Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
langfuse can be exploited before version 4.35.0‑r1
published 4 days ago
Summary
The langfuse software (cleanstart/langfuse) contains a security weakness that could let an attacker affect the application. The problem is fixed in version 4.35.0‑r1 and later. Install the updated version as soon as possible.
What to do
- Update cleanstart langfuse to version 4.35.0-r1.
- Update langfuse to version 4.35.0-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | langfuse |
< 4.35.0-r1 Fix: upgrade to 4.35.0-r1
|
| CleanStart | – | langfuse |
< 4.35.0-r1 Fix: upgrade to 4.35.0-r1
|
Original advisory text
Security fix for GHSA-vcvr-r3jv-pc5j applied in: langfuse 4.35.0-r1
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLEANSTART-2026-HY02778 · OSV
Track software like this
Free during beta