langfuse-4 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the langfuse-4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Insufficient Verification of Data Authenticity	<4.57.0-r0
L GHSA-wq5f-xc86-pv6w	<4.55.0-r0
M Origin Validation Error	<4.50.0-r0
M Origin Validation Error	<4.50.0-r0
M Information Exposure Through Caching	<4.50.0-r0
M Information Exposure Through Caching	<4.50.0-r0
M Information Exposure Through Caching	<4.50.0-r0
M Server-Side Request Forgery (SSRF)	<4.50.0-r0
L Inefficient Regular Expression Complexity	<4.50.0-r0
L Arbitrary Code Injection	<4.50.0-r0
L Protection Mechanism Failure	<4.50.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.50.0-r0
L Unintended Proxy or Intermediary ('Confused Deputy')	<4.50.0-r0
L Arbitrary Code Injection	<4.50.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.50.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.50.0-r0
L Server-Side Request Forgery (SSRF)	<4.50.0-r0
L Resource Exhaustion	<4.50.0-r0
L Resource Exhaustion	<4.50.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.50.0-r0
L Unintended Proxy or Intermediary ('Confused Deputy')	<4.50.0-r0
L Improper Certificate Validation	<4.48.0-r0
L GHSA-vcvr-r3jv-pc5j	<4.44.0-r0
L Information Exposure Through Server Error Message	<4.48.0-r0
H Algorithmic Complexity	<4.36.1-r0
L CVE-2026-18540	<4.32.0-r0
H CVE-2026-84933	<4.32.0-r0
C CVE-2026-84961	<4.32.0-r0
M CVE-2026-85008	<4.32.0-r0
H CVE-2026-85014	<4.32.0-r0
L GHSA-g57g-f23g-4646	<4.47.0-r0
M CVE-2026-84947	<4.32.0-r0
L CVE-2026-18149	<4.32.0-r0
L GHSA-v53p-9fqp-m79j	<4.47.0-r0
L CVE-2026-86472	<4.38.0-r0
L CVE-2026-19534	<4.32.0-r0
L CVE-2026-84890	<4.32.0-r0
L GHSA-8vvx-rff5-p5rq	<4.36.1-r0
L CVE-2026-84292	<4.30.0-r0
L GHSA-6vj9-mwq6-2f5v	<4.36.1-r0
L CVE-2026-84394	<4.30.0-r0
L CVE-2026-85024	<4.32.0-r0
L GHSA-2x7j-588g-ccc2	<4.34.0-r0
L GHSA-wmmp-3585-3rmp	<4.34.0-r0
L GHSA-cc9r-2j5m-2m83	<4.34.0-r0
L GHSA-8m3c-c648-2xjj	<4.34.0-r0
L GHSA-rgj7-g3m4-5g8c	<4.33.0-r0
L Resource Exhaustion	<4.30.0-r0
L GHSA-2xp9-vwfh-vxw4	<4.23.0-r0
L Directory Traversal	<4.23.0-r0
L CVE-2026-82417	<4.28.1-r0
L CVE-2026-75975	<4.28.1-r0
L GHSA-frvp-7c67-39w9	<4.30.0-r0
L CVE-2026-75931	<4.28.1-r0
L CVE-2026-76172	<4.28.1-r0
L CVE-2026-82562	<4.28.1-r0
L CVE-2026-75899	<4.28.1-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.16.0-r0
L Server-Side Request Forgery (SSRF)	<4.16.0-r0
L Information Exposure	<4.16.0-r0
L Deserialization of Untrusted Data	<4.16.0-r0
L GHSA-5p4m-2wfm-xmqj	<4.12.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<4.10.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<4.9.0-r0
L GHSA-f88m-g3jw-g9cj	<4.10.0-r0
H CVE-2026-14643	<4.4.0-r0
C CVE-2026-13697	<4.4.0-r0
M CVE-2026-16729	<4.4.0-r0
M CVE-2026-16728	<4.4.0-r0
L CVE-2026-18446	<4.4.0-r0
M CVE-2026-15157	<4.4.0-r0

Vulnerability

Vulnerable Version

Insufficient Verification of Data Authenticity

<4.57.0-r0