Low
Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery
Type: advisorySources: OSV
A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-9799
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 7 Nov 2026, 13:23 UTC · Revision 1
Source evidence
Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery
core-osv · Original sourcePublished 1 Sept 2025, 22:02 UTC
A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.
osv:CVE-2025-9799
Complete source record
{
"id": "16f38676b83c268bdd4b903ad3055974362949a75c36b9451e0399db9e0f7598",
"url": "https://osv.dev/vulnerability/CVE-2025-9799",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery",
"summary": "A security flaw has been discovered in Langfuse up to 3.88.0. Affected by this vulnerability is the function promptChangeEventSourcing of the file web/src/features/prompts/server/routers/promptRouter.ts of the component Webhook Handler. Performing manipulation results in server-side request forgery. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been released to the public and may be exploited.",
"evidence": "osv:CVE-2025-9799",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2025-9799",
"aliases": [
"CVE-2025-9799"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/langfuse/langfuse",
"type": "GIT",
"events": [
{
"introduced": "1211de3efb1a8811ad587dcecb4722ffd7f77d68"
},
{
"last_affected": "e07120b16361c6a3417addb12a0440a8dd204c64"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "3.0"
},
{
"last_affected": "3.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.1"
},
{
"last_affected": "3.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.2"
},
{
"last_affected": "3.2"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.3"
},
{
"last_affected": "3.3"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.4"
},
{
"last_affected": "3.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.5"
},
{
"last_affected": "3.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.6"
},
{
"last_affected": "3.6"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.7"
},
{
"last_affected": "3.7"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.8"
},
{
"last_affected": "3.8"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.9"
},
{
"last_affected": "3.9"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.10"
},
{
"last_affected": "3.10"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.11"
},
{
"last_affected": "3.11"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.12"
},
{
"last_affected": "3.12"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.13"
},
{
"last_affected": "3.13"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.14"
},
{
"last_affected": "3.14"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.15"
},
{
"last_affected": "3.15"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.16"
},
{
"last_affected": "3.16"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.17"
},
{
"last_affected": "3.17"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.18"
},
{
"last_affected": "3.18"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.19"
},
{
"last_affected": "3.19"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.20"
},
{
"last_affected": "3.20"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.21"
},
{
"last_affected": "3.21"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.22"
},
{
"last_affected": "3.22"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.23"
},
{
"last_affected": "3.23"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.24"
},
{
"last_affected": "3.24"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.25"
},
{
"last_affected": "3.25"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.26"
},
{
"last_affected": "3.26"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.27"
},
{
"last_affected": "3.27"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.28"
},
{
"last_affected": "3.28"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.29"
},
{
"last_affected": "3.29"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.30"
},
{
"last_affected": "3.30"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.31"
},
{
"last_affected": "3.31"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.32"
},
{
"last_affected": "3.32"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.33"
},
{
"last_affected": "3.33"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.34"
},
{
"last_affected": "3.34"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.35"
},
{
"last_affected": "3.35"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.36"
},
{
"last_affected": "3.36"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.37"
},
{
"last_affected": "3.37"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.38"
},
{
"last_affected": "3.38"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.39"
},
{
"last_affected": "3.39"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.40"
},
{
"last_affected": "3.40"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.41"
},
{
"last_affected": "3.41"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.42"
},
{
"last_affected": "3.42"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.43"
},
{
"last_affected": "3.43"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.44"
},
{
"last_affected": "3.44"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.45"
},
{
"last_affected": "3.45"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.46"
},
{
"last_affected": "3.46"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.47"
},
{
"last_affected": "3.47"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.48"
},
{
"last_affected": "3.48"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.49"
},
{
"last_affected": "3.49"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.50"
},
{
"last_affected": "3.50"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.51"
},
{
"last_affected": "3.51"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.52"
},
{
"last_affected": "3.52"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.53"
},
{
"last_affected": "3.53"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.54"
},
{
"last_affected": "3.54"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.55"
},
{
"last_affected": "3.55"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.56"
},
{
"last_affected": "3.56"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.57"
},
{
"last_affected": "3.57"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.58"
},
{
"last_affected": "3.58"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.59"
},
{
"last_affected": "3.59"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.60"
},
{
"last_affected": "3.60"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.61"
},
{
"last_affected": "3.61"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.62"
},
{
"last_affected": "3.62"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.63"
},
{
"last_affected": "3.63"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.64"
},
{
"last_affected": "3.64"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.65"
},
{
"last_affected": "3.65"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.66"
},
{
"last_affected": "3.66"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.67"
},
{
"last_affected": "3.67"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.68"
},
{
"last_affected": "3.68"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.69"
},
{
"last_affected": "3.69"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.70"
},
{
"last_affected": "3.70"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.71"
},
{
"last_affected": "3.71"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.72"
},
{
"last_affected": "3.72"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.73"
},
{
"last_affected": "3.73"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.74"
},
{
"last_affected": "3.74"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.75"
},
{
"last_affected": "3.75"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.76"
},
{
"last_affected": "3.76"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.77"
},
{
"last_affected": "3.77"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.78"
},
{
"last_affected": "3.78"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.79"
},
{
"last_affected": "3.79"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.80"
},
{
"last_affected": "3.80"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.81"
},
{
"last_affected": "3.81"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.82"
},
{
"last_affected": "3.82"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.83"
},
{
"last_affected": "3.83"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.84"
},
{
"last_affected": "3.84"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.85"
},
{
"last_affected": "3.85"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.86"
},
{
"last_affected": "3.86"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.87"
},
{
"last_affected": "3.87"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "3.88.0"
},
{
"last_affected": "3.88.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"cpe": "cpe:2.3:a:langfuse:langfuse:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "3.88.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"3.0",
"3.1",
"3.10",
"3.11",
"3.12",
"3.13",
"3.14",
"3.15",
"3.16",
"3.17",
"3.18",
"3.19",
"3.2",
"3.20",
"3.21",
"3.22",
"3.23",
"3.24",
"3.25",
"3.26",
"3.27",
"3.28",
"3.29",
"3.3",
"3.30",
"3.31",
"3.32",
"3.33",
"3.34",
"3.35",
"3.36",
"3.37",
"3.38",
"3.39",
"3.4",
"3.40",
"3.41",
"3.42",
"3.43",
"3.44",
"3.45",
"3.46",
"3.47",
"3.48",
"3.49",
"3.5",
"3.50",
"3.51",
"3.52",
"3.53",
"3.54",
"3.55",
"3.56",
"3.57",
"3.58",
"3.59",
"3.6",
"3.60",
"3.61",
"3.62",
"3.63",
"3.64",
"3.65",
"3.66",
"3.67",
"3.68",
"3.69",
"3.7",
"3.70",
"3.71",
"3.72",
"3.73",
"3.74",
"3.75",
"3.76",
"3.77",
"3.78",
"3.79",
"3.8",
"3.80",
"3.81",
"3.82",
"3.83",
"3.84",
"3.85",
"3.86",
"3.87",
"3.88.0",
"3.9",
"v3.88.0",
"v3.87.1",
"v3.87.0",
"v3.86.1",
"v3.86.0",
"v3.85.2",
"v3.85.1",
"v3.85.0",
"v3.84.0",
"v3.83.0",
"v3.82.0",
"v3.81.1",
"v3.81.0",
"v3.80.1",
"v3.80.0",
"v3.79.1",
"v3.79.0",
"v3.78.2",
"v3.78.1",
"v3.78.0",
"v3.77.0",
"v3.76.0",
"v3.75.4",
"v3.75.3",
"v3.75.2",
"v3.75.1",
"v3.75.0",
"v3.74.0",
"v3.73.1",
"v3.73.0",
"v3.72.1",
"v3.72.0",
"v3.71.0",
"v3.70.0",
"v3.69.0",
"v3.68.0",
"v3.67.0",
"v3.66.1",
"v3.66.0",
"v3.65.3",
"v3.65.2",
"v3.65.1",
"v3.65.0",
"v3.64.0",
"v3.63.1",
"v3.63.0",
"v3.62.1",
"v3.62.0",
"v3.61.0",
"v3.60.1",
"v3.60.0",
"v3.59.1",
"v3.59.0",
"v3.58.0",
"v3.57.2",
"v3.57.1",
"v3.57.0",
"v3.56.0",
"v3.55.0",
"v3.54.1",
"v3.54.0",
"v3.53.0",
"v3.52.0",
"v3.51.2",
"v3.51.1",
"v3.51.0",
"v3.50.0",
"v3.49.1",
"v3.49.0",
"v3.48.1",
"v3.48.0",
"v3.47.0",
"v3.46.0",
"v3.45.2",
"v3.45.1",
"v3.45.0",
"v3.44.0",
"v3.43.0",
"v3.42.1",
"v3.42.0",
"v3.41.1",
"v3.41.0",
"v3.40.0",
"v3.39.0",
"v3.38.0",
"v3.37.0",
"v3.36.0",
"v3.35.1",
"v3.35.0",
"v3.34.1",
"v3.34.0",
"v3.33.1",
"v3.33.0",
"v3.32.1",
"v3.32.0",
"v3.31.0",
"v3.30.0",
"v3.29.1",
"v3.29.0",
"v3.28.3",
"v3.28.1",
"v3.28.0",
"v3.27.2",
"v3.27.1",
"v3.27.0",
"v3.26.0",
"v3.25.0",
"v3.24.1",
"v3.24.0",
"v3.23.0",
"v3.22.0",
"v3.21.0",
"v3.20.0",
"v3.19.0",
"v3.18.0",
"v3.17.1",
"v3.17.0",
"v3.16.0",
"v3.15.0",
"v3.14.0",
"v3.13.0",
"v3.12.0",
"v3.11.1",
"v3.11.0",
"v3.10.0",
"v3.9.0",
"v3.8.0",
"v3.7.1",
"v3.7.0",
"v3.6.2",
"v3.6.1",
"v3.6.0",
"v3.5.3",
"v3.5.2",
"v3.5.1",
"v3.5.0",
"v3.4.0",
"v3.3.0",
"v3.2.0",
"v3.1.1",
"v3.1.0",
"v3.0.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9799.json"
}
}
],
"modified": "2026-10-28T02:30:50.707061305Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9799.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-9799",
"https://vuldb.com/?id.322114",
"https://vuldb.com/?submit.641128",
"https://github.com/langfuse/langfuse/issues/8522",
"https://github.com/langfuse/langfuse/issues/8522#issue-3320549867",
"https://vuldb.com/?ctiid.322114"
],
"provider_metadata": {
"cwe_ids": [
"CWE-918"
],
"cna_assigner": "VulDB",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9799.json"
}
},
"related_cves": [
{
"value": "CVE-2025-9799",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 519438,
"published_at": "2025-09-01T22:02:09.356+00:00"
}