agentprime: langfuseEvery new CVE for langfuse.https://agentprime.io/CVE-2026-41487: Langfuse: Improper role-based-access control in Langfuse LLM connection management allowed users of role “member” to retrieve stored LLM provider API keyshttps://agentprime.io/advisories/CVE-2026-41487/https://agentprime.io/advisories/CVE-2026-41487/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 14:27:48 GMTCVECVE-2026-24055: Langfuse Slack OAuth Installation Endpoint Lacks Authentication, Enabling Arbitrary Project Linkinghttps://agentprime.io/advisories/CVE-2026-24055/https://agentprime.io/advisories/CVE-2026-24055/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jan 2026 03:07:03 GMTCVECVE-2025-65107: Langfuse SSO Account Takeover via CSRF or phishing attackhttps://agentprime.io/advisories/CVE-2025-65107/https://agentprime.io/advisories/CVE-2025-65107/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 21 Nov 2025 21:49:18 GMTCVECVE-2025-64504: Langfuse vulnerable to cross‑organization enumeration of member & invitation lists via project membership APIshttps://agentprime.io/advisories/CVE-2025-64504/https://agentprime.io/advisories/CVE-2025-64504/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Nov 2025 21:51:36 GMTCVECVE-2025-9799: Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgeryhttps://agentprime.io/advisories/CVE-2025-9799/https://agentprime.io/advisories/CVE-2025-9799/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Sep 2025 22:02:09 GMTCVE