Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
langfuse may expose data to attackers
published 21 days ago
Summary
The langfuse software package can allow unauthorized users to view or change stored information. This risk is fixed in newer versions of the package. Update langfuse to the latest release to protect your data.
What to do
- Update cleanstart langfuse to version 4.35.0-r1.
- Update langfuse to version 4.35.0-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | langfuse |
< 4.35.0-r1 Fix: upgrade to 4.35.0-r1
|
| CleanStart | – | langfuse |
< 4.35.0-r1 Fix: upgrade to 4.35.0-r1
|
Original advisory text
Security fix for GHSA-g57g-f23g-4646 applied in: langfuse 4.35.0-r1
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published15 Oct 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLEANSTART-2026-TR78672 · OSV
Track software like this
Free during beta