Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Langfuse SSRF Vulnerability: Missing Secret Key Validation on LLM Base URL Change

github.com 2026-05-08English translation pending; showing Chinese查看中文 →
Security AdvisoryHighLangfuse
Affected:
  • Langfuse platform (versions prior to 7527bb0)
Fixed in:
  • 7527bb0
Referenced CVEs: CVE-2026-41487
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
n8n-mcp Log Injection Vulnerability: Sensitive Data Leakage via HTTP Transport 2026-05-09 Fix: Incorrect Role Assignment in Email-Based Domain Invitations 2026-05-09 CVE-2024-42185: Privilege Escalation in La Suite Numérique people service 2026-05-09 n8n-mcp Log Information Disclosure Vulnerability (GHSA-wq4g-395p-mqv3) 2026-05-09 Eruka/scoold CVE-2026-4276 Persistent Admin Takeover via JWT Forgery POC 2026-05-09