📦 Langfuse

This vulnerability allows unauthenticated attackers to bind their Slack workspace to any Langfuse project via the Slack OAuth endpoint. This could enable unauthorized access to prompt management chang...

This vulnerability in Langfuse's SSO provider configurations allows account takeover when authenticated users are tricked into visiting a specially crafted URL via CSRF or phishing attacks. It affects...

This vulnerability in Langfuse allows authenticated users to enumerate names and email addresses of users in other organizations if they know the target organization's ID. It affects Langfuse versions...

This CVE describes a Server-Side Request Forgery (SSRF) vulnerability in Langfuse's webhook handler. Attackers can manipulate the promptChangeEventSourcing function to make the server send unauthorize...