MEDIUM6.7npm
GHSA-98xf-r82g-9mhx· CVE-2026-48121LangGraph has NoSQL parameter injection in MongoDBSaver, allowing cross-tenant state access
Modified: 9/10/2026
package
pkg:npm/%40langchain/langgraph-checkpoint-mongodb
LangGraph has NoSQL parameter injection in MongoDBSaver, allowing cross-tenant state access
Modified: 9/10/2026