Vulnerability	Vulnerable Version
M Incorrect Authorization langgraph-checkpoint-sqlite is a Library with a SQLite implementation of LangGraph checkpoint saver. Affected versions of this package are vulnerable to Incorrect Authorization in the `search` or `list_namespaces` process. An attacker can access data from unintended namespaces by crafting namespace labels that share prefixes or include pattern metacharacters, leading to disclosure of items outside the intended scope. This is only exploitable if the application uses namespace labels where one is a prefix of another or contains unescaped pattern characters such as '_' or '%', and relies on namespaces to separate data between users or tenants. How to fix Incorrect Authorization? Upgrade `langgraph-checkpoint-sqlite` to version 3.1.1 or higher.	[,3.1.1)

Incorrect Authorization

langgraph-checkpoint-sqlite is a Library with a SQLite implementation of LangGraph checkpoint saver.

Affected versions of this package are vulnerable to Incorrect Authorization in the search or list_namespaces process. An attacker can access data from unintended namespaces by crafting namespace labels that share prefixes or include pattern metacharacters, leading to disclosure of items outside the intended scope. This is only exploitable if the application uses namespace labels where one is a prefix of another or contains unescaped pattern characters such as '_' or '%', and relies on namespaces to separate data between users or tenants.

How to fix Incorrect Authorization?

Upgrade langgraph-checkpoint-sqlite to version 3.1.1 or higher.

[,3.1.1)

Go back to all versions of this package