CVE-2025-58754 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, opensearch-dashboards, saf, grafana-image-renderer, prism, tileserver-gl, jitsucom-jitsu, kubeflow-pipelines, kubeflow-katib...

GHSA-4HJH-WCWX-XVWJ vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, opensearch-dashboards, saf, grafana-image-renderer, prism, tileserver-gl, jitsucom-jitsu, kubeflow-pipelines, kubeflow-katib...

GHSA-4HJH-WCWX-XVWJ vulnerabilities

Vulnerabilities for packages: awx, grafana-image-renderer, saf, kubeflow-centraldashboard, lerna, opensearch-dashboards-fips, gitlab-rails-ce-fips, kubeflow-katib, redisinsight, jitsucom-jitsu, gitlab-rails-ce, kubeflow-pipelines, airflow, kibana, prism, tileserver-gl, tileserver-gl-fips,...

CVE-2025-58754 vulnerabilities

Vulnerabilities for packages: awx, grafana-image-renderer, saf, kubeflow-centraldashboard, lerna, opensearch-dashboards-fips, gitlab-rails-ce-fips, kubeflow-katib, redisinsight, jitsucom-jitsu, gitlab-rails-ce, kubeflow-pipelines, airflow, kibana, prism, tileserver-gl, tileserver-gl-fips,...

CVE-2025-58751 vulnerabilities

Vulnerabilities for packages: vitess, langfuse...

CVE-2025-58752 vulnerabilities

Vulnerabilities for packages: vitess, langfuse...

GHSA-JQFW-VQ24-V9C3 vulnerabilities

Vulnerabilities for packages: vitess, langfuse...

GHSA-G4JQ-H2W9-997C vulnerabilities

Vulnerabilities for packages: vitess, langfuse...

CVE-2025-58752 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips, vitess...

GHSA-G4JQ-H2W9-997C vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips, vitess...

GHSA-JQFW-VQ24-V9C3 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips, vitess...

CVE-2025-58751 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips, vitess...

CVE-2025-9799

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request...

CVE-2025-9799

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request...

CVE-2025-9799

CVE-2025-9799 affects Langfuse up to version 3.88.0. The vulnerability is in the Webhook Handler’s WebSocket/HTTP code path, specifically the function promptChangeEventSourcing in web/src/features/prompts/server/routers/promptRouter.ts. Manipulation of this function can lead to server-side reques...

CVE-2025-9799 Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request...

CVE-2025-9799 Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request...

CVE-2025-9799 Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery

A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request...

PT-2025-35514

Name of the Vulnerable Software and Affected Versions Langfuse versions through 3.88.0 Description A security flaw exists in Langfuse, potentially leading to server-side request forgery. The vulnerability is located in the promptChangeEventSourcing function within the...

langfuse 代码问题漏洞

langfuse is a large language model engineering platform open-sourced by Langfuse. A code issue vulnerability exists in langfuse 3.88.0 and earlier versions, which stems from a misuse of the function promptChangeEventSourcing in the file web/src/features/prompts/server/routers/promptRouter.ts...