CVE-2026-45772 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

Malicious code in oh-langfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b229927c5bc228764ab11651b10bd06c6ff61edffa820a632c343aeec13037 The package configures Langfuse tracing for Claude Code, Codex, and OpenCode. When the operator runs the bundled CLI without explicitly overriding...

MAL-2026-4625 Malicious code in oh-langfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b229927c5bc228764ab11651b10bd06c6ff61edffa820a632c343aeec13037 The package configures Langfuse tracing for Claude Code, Codex, and OpenCode. When the operator runs the bundled CLI without explicitly overriding...

CVE-2026-45736 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, drupal, gitlab-rails-ce, homepage, gemini-cli, vitess, kibana, opensearch-dashboards, tensorflow-cpu-jupyter, kubeflow-pipelines, code-server, langfuse, argo-workflows, wazuh-dashboard-fips, py3-jupyterlab, opensearch-dashboards-fips, langfuse-fips,...

GHSA-58QX-3VCG-4XPX vulnerabilities

Vulnerabilities for packages: kubeflow-katib, drupal, gitlab-rails-ce, homepage, gemini-cli, vitess, kibana, opensearch-dashboards, tensorflow-cpu-jupyter, kubeflow-pipelines, code-server, langfuse, argo-workflows, wazuh-dashboard-fips, py3-jupyterlab, opensearch-dashboards-fips, langfuse-fips,...

GHSA-JXXR-4GWJ-5JF2 vulnerabilities

Vulnerabilities for packages: prism, ts-patch, vitess, kibana, opensearch-dashboards, emscripten, airflow, npm, authentik, langfuse, opensearch-dashboards-fips, pulumi, langfuse-fips, tileserver-gl-fips, tileserver-gl, renovate, lerna, actions-runner, authentik-fips...

CVE-2026-45740 vulnerabilities

Vulnerabilities for packages: librechat, renovate, vitess, langfuse, pulumi, kibana, cadence-web, jitsucom-jitsu, langfuse-fips, gemini-cli...

GHSA-JGGG-4JG4-V7C6 vulnerabilities

Vulnerabilities for packages: librechat, renovate, vitess, langfuse, pulumi, kibana, cadence-web, jitsucom-jitsu, langfuse-fips, gemini-cli...

CVE-2026-45149 vulnerabilities

Vulnerabilities for packages: prism, ts-patch, vitess, kibana, opensearch-dashboards, emscripten, airflow, npm, authentik, langfuse, opensearch-dashboards-fips, pulumi, langfuse-fips, tileserver-gl-fips, tileserver-gl, renovate, lerna, actions-runner, authentik-fips...

Malicious code in code-tool-langfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13591fd81486fc2001b5c998ff87badefcb81f4c396aa43675a7280a6fed23cf The package installs a Claude Code Stop hook and patches OpenCode plugin code so that every future AI session's user prompts, assistant responses, to...

MAL-2026-4532 Malicious code in code-tool-langfuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13591fd81486fc2001b5c998ff87badefcb81f4c396aa43675a7280a6fed23cf The package installs a Claude Code Stop hook and patches OpenCode plugin code so that every future AI session's user prompts, assistant responses, to...

GHSA-3644-Q5CJ-C5C7 vulnerabilities

Vulnerabilities for packages: langfuse, open-webui...

CVE-2026-45134 vulnerabilities

Vulnerabilities for packages: langfuse, open-webui...

CVE-2026-44902 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-Q7RR-3CGH-J5R3 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-41487 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-3644-Q5CJ-C5C7 vulnerabilities

Vulnerabilities for packages: librechat, open-webui, langfuse, kibana, langfuse-fips...

CVE-2026-41487 vulnerabilities

Vulnerabilities for packages: langfuse...

CVE-2026-45134 vulnerabilities

Vulnerabilities for packages: librechat, open-webui, langfuse, kibana, langfuse-fips...

Exploit for Improper Access Control in Langfuse

CVE-2026-24055 — Unauthenticated Slack OAuth Install in Langfu...