[sylvesterkaczmarek]

Summary

Correct the first affected releases for the two store implementations in GHSA-6hmw-9432-67qq:

PyPI package	Current range	Proposed range
langgraph-checkpoint-postgres	< 3.1.3	>= 1.0.10, < 3.1.3
langgraph-checkpoint-sqlite	< 3.1.2	>= 2.0.8, < 3.1.2

Earlier releases do not contain these store implementations. The current ranges incorrectly match 10 PostgreSQL-package releases and 13 SQLite-package releases that predate the affected component.

Evidence

I inspected all 77 published wheel manifests available on PyPI when checking: 52 for langgraph-checkpoint-postgres and 25 for langgraph-checkpoint-sqlite. Each wheel's SHA-256 was checked against PyPI metadata.

• PostgreSQL releases 1.0.0 through 1.0.9 have no langgraph/store/postgres/ implementation. It first ships in 1.0.10. The introducing source change is langchain-ai/langgraph@97f79fc, "Add Postgres Store Implementation" ([GHSA-9fgx-q25h-jxrg] DOM XSS in Theme Preview #1906).
• SQLite releases 1.0.0 through 1.0.4 and 2.0.0 through 2.0.7 have no langgraph/store/sqlite/ implementation. It first ships in 2.0.8. The introducing source change is langchain-ai/langgraph@025b634, "SqliteStore" ([GHSA-v646-rx6w-r3qq] Improper Access Control in Apache Tomcat #3608).
• The earlier wheels were also checked for these store class definitions at alternative Python module paths; none were present.
• In both first-containing releases, the original namespace-conversion helper reproduces the documented collision between a two-label namespace and a single label containing a dot. A distinct-namespace control remains distinct. These were bounded, offline source-function tests; no PostgreSQL server or end-to-end store test was run.

Adjacent release artifacts:

• https://pypi.org/project/langgraph-checkpoint-postgres/1.0.9/
• https://pypi.org/project/langgraph-checkpoint-postgres/1.0.10/
• https://pypi.org/project/langgraph-checkpoint-sqlite/2.0.7/
• https://pypi.org/project/langgraph-checkpoint-sqlite/2.0.8/

The fixed versions, impact, severity and remediation remain unchanged. The description's "all releases" sentence is updated to agree with the corrected ranges, and the introduction commits and release artifacts are added as references.

AI assistance was used for artifact inspection, test scripting and drafting. The stated checks were executed locally. This contribution updates an already-public advisory and does not introduce a new vulnerability report.