langfuse-4-worker

Direct Vulnerabilities

Known vulnerabilities in the langfuse-4-worker package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Insufficient Verification of Data Authenticity	<4.57.0-r0
L GHSA-r4xh-jqrq-34v2	<4.55.0-r0
L GHSA-wq5f-xc86-pv6w	<4.55.0-r0
L Incomplete Blacklist	<4.56.0-r0
L Arbitrary Code Injection	<4.56.0-r0
L GHSA-g2v6-rqmx-r4w6	<4.55.0-r0
H Improper Validation of Specified Quantity in Input	<4.55.0-r0
L Improper Encoding or Escaping of Output	<4.56.0-r0
L CVE-2026-90711	<4.37.0-r0
L GHSA-6688-9rhm-gjv2	<4.50.0-r0
L CVE-2026-74866	<4.16.0-r0
L GHSA-jggr-w7fw-pc2j	<4.16.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.16.0-r0
L Resource Exhaustion	<4.50.0-r0
L Inefficient Regular Expression Complexity	<4.50.0-r0
L Arbitrary Code Injection	<4.50.0-r0
L Protection Mechanism Failure	<4.50.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.50.0-r0
L Unintended Proxy or Intermediary ('Confused Deputy')	<4.50.0-r0
L Arbitrary Code Injection	<4.50.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.50.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.50.0-r0
L Server-Side Request Forgery (SSRF)	<4.50.0-r0
L Resource Exhaustion	<4.50.0-r0
L Resource Exhaustion	<4.50.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.50.0-r0
L Resource Exhaustion	<4.50.0-r0
L Unintended Proxy or Intermediary ('Confused Deputy')	<4.50.0-r0
L GHSA-p98j-92pf-mc4p	<4.50.0-r0
L Resource Exhaustion	<4.50.0-r0
L CVE-2026-19484	<4.16.0-r0
L CVE-2026-19481	<4.16.0-r0
L Improper Certificate Validation	<4.48.0-r0
L Information Exposure Through Server Error Message	<4.48.0-r0
M Cross-site Scripting (XSS)	<4.39.0-r0
H Algorithmic Complexity	<4.36.1-r0
L CVE-2026-18540	<4.33.0-r0
H CVE-2026-84933	<4.32.0-r0
C CVE-2026-84961	<4.32.0-r0
M CVE-2026-85008	<4.32.0-r0
L Insufficient Comparison	<4.48.0-r0
H CVE-2026-85014	<4.32.0-r0
L GHSA-g57g-f23g-4646	<4.47.0-r0
M CVE-2026-84947	<4.32.0-r0
L Insufficient Comparison	<4.48.0-r0
L CVE-2026-18149	<4.32.0-r0
L Resource Exhaustion	<4.48.0-r0
L GHSA-v53p-9fqp-m79j	<4.47.0-r0
L CVE-2026-86472	<4.38.0-r0
L Server-Side Request Forgery (SSRF)	<4.48.0-r0
L CVE-2026-19534	<4.33.0-r0
L CVE-2026-84890	<4.32.0-r0
L GHSA-8vvx-rff5-p5rq	<4.36.1-r0
L CVE-2026-84292	<4.30.0-r0
L GHSA-6vj9-mwq6-2f5v	<4.36.1-r0
L CVE-2026-84394	<4.30.0-r0
L CVE-2026-85024	<4.33.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<4.45.4-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<4.45.4-r0
L GHSA-2x7j-588g-ccc2	<4.34.0-r0
L GHSA-wmmp-3585-3rmp	<4.34.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.34.0-r0
L GHSA-cc9r-2j5m-2m83	<4.34.0-r0
L GHSA-8m3c-c648-2xjj	<4.34.0-r0
L Unchecked Input for Loop Condition	<4.34.0-r0
L HTTP Request Smuggling	<4.30.0-r0
L GHSA-rgj7-g3m4-5g8c	<4.33.0-r0
L Resource Exhaustion	<4.30.0-r0
L Directory Traversal	<4.30.0-r0
L Directory Traversal	<4.33.0-r0
L Resource Exhaustion	<4.30.0-r0
L CVE-2026-45819	<4.28.0-r0
L CVE-2026-75899	<4.28.1-r0
L CVE-2026-82417	<4.28.1-r0
L CVE-2026-75975	<4.28.1-r0
L GHSA-frvp-7c67-39w9	<4.30.0-r0
L Algorithmic Complexity	<4.30.0-r0
L CVE-2026-75931	<4.28.1-r0
L CVE-2026-76172	<4.28.1-r0
L CVE-2026-82562	<4.28.1-r0
L Inefficient Regular Expression Complexity	<4.30.0-r0
L Exposure of Data Element to Wrong Session	<4.30.0-r0
L Information Exposure	<4.30.0-r0
H CVE-2026-45820	<4.30.0-r0
L GHSA-p498-v437-472g	<4.28.1-r0
L Uncaught Exception	<4.28.0-r0
L Allocation of Resources Without Limits or Throttling	<4.28.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.21.0-r0
L Loop with Unreachable Exit Condition ('Infinite Loop')	<4.21.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.21.0-r0
L Arbitrary Code Injection	<4.21.0-r0
L Unchecked Input for Loop Condition	<4.21.0-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<4.16.0-r0
L Server-Side Request Forgery (SSRF)	<4.16.0-r0
L Information Exposure	<4.16.0-r0
L Deserialization of Untrusted Data	<4.16.0-r0
L GHSA-5p4m-2wfm-xmqj	<4.12.0-r0
L GHSA-55q2-fjhq-7xh7	<4.13.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<4.10.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<4.9.0-r0
L GHSA-f88m-g3jw-g9cj	<4.10.0-r0
M Directory Traversal	<4.4.0-r0
H CVE-2026-14643	<4.4.0-r0
L Improper Input Validation	<4.4.0-r0
C CVE-2026-13697	<4.4.0-r0
M CVE-2026-16729	<4.4.0-r0
L Improper Input Validation	<4.4.0-r0
M CVE-2026-16728	<4.4.0-r0
L CVE-2026-18446	<4.4.0-r0
M CVE-2026-15157	<4.4.0-r0
L Improper Input Validation	<4.4.0-r0
L Resource Exhaustion	<4.3.0-r0
L CVE-2026-14257	<4.3.0-r0

Vulnerability

Vulnerable Version

Insufficient Verification of Data Authenticity

<4.57.0-r0