GHSA-MCHM-GJX6-7H55 vulnerabilities

Vulnerabilities for packages: supabase, langfuse, langfuse-fips...

CVE-2026-114139 vulnerabilities

Vulnerabilities for packages: supabase, langfuse, langfuse-fips...

CVE-2026-24055-OAuth-Langfuse

CVE-2026-24055 — Unauthenticated Slack OAuth Install in Langfuse Course Project for Web and Application Security — Group 06, class NT213.Q21.ANTT 📌 Summary The project reproduces a real-world security vulnerability that has been publicly disclosed CVE-2026-24055 on the Langfuse platform — an OAut...

GHSA-QXG6-89MG-RQV8 vulnerabilities

Vulnerabilities for packages: langfuse, gitlab-rails-ce, renovate, langfuse-fips, vitess, gitlab-rails-ce-fips...

CVE-2026-112949 vulnerabilities

Vulnerabilities for packages: langfuse, gitlab-rails-ce, renovate, langfuse-fips, vitess, gitlab-rails-ce-fips...

CVE-2026-112950 vulnerabilities

Vulnerabilities for packages: langfuse, gitlab-rails-ce, renovate, langfuse-fips, vitess, gitlab-rails-ce-fips...

GHSA-XP26-3454-MJGP vulnerabilities

Vulnerabilities for packages: langfuse, gitlab-rails-ce, renovate, langfuse-fips, vitess, gitlab-rails-ce-fips...

GHSA-9JRQ-W75R-8GCW vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, gitlab-rails-ce, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

GHSA-RQ7H-C2JC-7F22 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, gitlab-rails-ce, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

CVE-2026-114125 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

GHSA-F2PH-CMG5-WXC8 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2026-112945 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, gitlab-rails-ce, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

CVE-2026-112946 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, gitlab-rails-ce, langfuse-fips, kubeflow-pipelines, gitlab-rails-ce-fips...

ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

CLEANSTART-2026-XJ89225 hono before 4

Security vulnerability affects the langfuse package. hono before 4...

CLEANSTART-2026-YH79720 fast-uri is a dependency-free RFC 3986 URI parser for Node

Security vulnerability affects the langfuse package. fast-uri is a dependency-free RFC 3986 URI parser for Node...

CLEANSTART-2026-JE80726 Security fix for GHSA-wq5f-xc86-pv6w applied in: langfuse 4.35.0-r1

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OL77428 flaw was found in librsvg

Security vulnerability affects the langfuse package. A flaw was found in librsvg...

CLEANSTART-2026-XI51543 Axios is a promise-based HTTP client for the browser and Node

Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...

CLEANSTART-2026-LO03281 MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients

Security vulnerability affects the langfuse package. MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients...