Langgraphjs
Langchain-AI · 2 CVEs
CVE-2026-48121
MEDIUM
@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access
Aug 4, 2026
CVE-2026-27022
MEDIUM
RediSearch Query Injection in @langchain/langgraph-checkpoint-redis
Feb 20, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-48121 | @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access | MEDIUM | 0.36% | Aug 4, 2026 |
| CVE-2026-27022 | RediSearch Query Injection in @langchain/langgraph-checkpoint-redis | MEDIUM | 0.49% | Feb 20, 2026 |
Showing 1 to 2 of 2 CVEs