VDB
MAL-2026-4625
MAL-2026-4625
PUBLISHED
CVSS 8.600000381469727 HIGH
Malicious code in oh-langfuse (npm)
Risk Scores
CVSS 4.0
8.600000381469727
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | oh-langfuse | |
| npm | oh-langfuse | 0.1.21, 0.1.22, 0.1.21 |
Timeline
- May 21, 2026 CVE Published
- Jun 12, 2026 CVE Updated
References
- https://www.npmjs.com/package/oh-langfuse/v/0.1.21 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.22 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.28 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.48 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.56 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.31 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.50 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.46 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.53 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.43 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.44 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.38 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.42 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.45 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.49 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.29 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.51 package
- https://www.npmjs.com/package/oh-langfuse/v/0.1.52 package