Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
langfuse could let attackers access or modify data
published 11 days ago
Summary
The langfuse package version 3.225.9-r4 has a security weakness that could allow unauthorized people to view or change information. This risk is fixed in newer releases of langfuse. Update to the latest version of langfuse promptly to remove the problem.
What to do
- Update cleanstart langfuse to version 3.225.9-r4.
- Update langfuse to version 3.225.9-r4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | langfuse |
< 3.225.9-r4 Fix: upgrade to 3.225.9-r4
|
| CleanStart | – | langfuse |
< 3.225.9-r4 Fix: upgrade to 3.225.9-r4
|
Original advisory text
Security fix for GHSA-vcvr-r3jv-pc5j applied in: langfuse 3.225.9-r4
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details.
Severity
9.9
Critical
Timeline
Published8 Oct 2026
Updated15 Oct 2026
First seen8 Oct 2026
Sources
CLEANSTART-2026-CM96340 · OSV
Track software like this
Free during beta