952 matches found
GHSA-345P-7CG4-V4C7 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, langfuse, librechat, kibana, gemini-cli, langfuse-fips, opensearch-dashboards-fips...
GHSA-5F7Q-JPQC-WP7H vulnerabilities
Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, langfuse...
CVE-2025-59472 vulnerabilities
Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, langfuse...
CVE-2025-14874 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, librechat, langfuse, kibana...
CVE-2025-14874 vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu...
CVE-2026-24055
Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/slack/install endpoint initiates Slack OAuth using a projectId provided by the client without authentication or authorization. The projectId is preserved throughout the OAuth flow,...
CVE-2026-24055 Langfuse Slack OAuth Installation Endpoint Lacks Authentication, Enabling Arbitrary Project Linking
Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/slack/install endpoint initiates Slack OAuth using a projectId provided by the client without authentication or authorization. The projectId is preserved throughout the OAuth flow,...
CVE-2026-24055: Improper Access Control
Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/slack/install endpoint initiates Slack OAuth using a projectId provided by the client without authentication or authorization. The projectId is preserved throughout the OAuth flow,...
langfuse Access Control Vulnerability
Langfuse is an open-source large language model engineering platform developed by Langfuse. Versions of Langfuse 3.146.0 and earlier contained a access control vulnerability. This vulnerability stemmed from the /api/public/slack/install endpoint using ProjectId provided by unauthenticated or...
CVE-2026-22817 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-3VHC-576X-3QV4 vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-22818 vulnerabilities
Vulnerabilities for packages: langfuse...
GHSA-6475-R3VJ-M8VF vulnerabilities
Vulnerabilities for packages: langfuse, opensearch-dashboards...
GHSA-F67F-6CW9-8MQ4 vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-22817 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
CVE-2026-22818 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-F67F-6CW9-8MQ4 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-3VHC-576X-3QV4 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...