Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
langfuse-worker may allow unauthorized actions until updated
published 11 days ago
Summary
The langfuse-worker component from cleanstart can be exploited in its current version, potentially letting attackers affect your system. The problem is fixed in newer releases, so upgrade to the latest version as soon as possible to stay safe.
What to do
- Update cleanstart langfuse-worker to version 3.225.9-r3.
- Update langfuse-worker to version 3.225.9-r3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | langfuse-worker |
< 3.225.9-r3 Fix: upgrade to 3.225.9-r3
|
| CleanStart | – | langfuse-worker |
< 3.225.9-r3 Fix: upgrade to 3.225.9-r3
|
Original advisory text
Security fix for GHSA-2xp9-vwfh-vxw4 applied in: langfuse-worker 3.225.9-r3
Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details.
Severity
9.9
Critical
Timeline
Published8 Oct 2026
Updated15 Oct 2026
First seen8 Oct 2026
Sources
CLEANSTART-2026-PO83122 · OSV
Track software like this
Free during beta