CVE-2026-56761 vulnerabilities

Vulnerabilities for packages: langfuse...

GHSA-GVMJ-G25R-R7WR vulnerabilities

Vulnerabilities for packages: langfuse, nextcloud-server...

CVE-2026-48712 vulnerabilities

Vulnerabilities for packages: langfuse, cadence-web, librechat, vitess, langfuse-fips, pulumi...

CVE-2026-8769 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

GHSA-WQCH-XFXH-VRR4 vulnerabilities

Vulnerabilities for packages: code-server, tileserver-gl-fips, librechat, tileserver-gl, redisinsight, saf, opensearch-dashboards, opensearch-dashboards-fips, kibana...

CVE-2025-0330 Exposure of Sensitive Information in berriai/litellm

In berriai/litellm version v1.52.1, an issue in proxyserver.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings. This vulnerability exposes sensitive information, including langfusesecret and langfusepublickey, which can provide full access to the Langfuse...

CVE-2025-0330

The CVE-2025-0330 issue affects berriai/litellm v1.52.1, where a flaw in proxy_server.py leads to leakage of Langfuse API keys (langfuse_secret and langfuse_public_key) when parsing team settings. This reportedly grants full access to the Langfuse project storing all requests. Connected documents...