Skip to content
OpenAdvisories

Package · Wolfi

langfuse-3-worker

248 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

122 results · Clear filters · Feed

  • Medium 6.9
    CVE-2025-66400

    mdast-util-to-hast unsanitized class attribute

    mdast-util-to-hast is an mdast utility to transform to hast. From 13.0.0 to before 13.2.1, multiple (unprefixed) classnames could be added in markdown source by using character references. This could make rendered user supplied markdown code elements appear l…

    syntax-tree mdast-util-to-hast langfuse-3-worker langfuse-3 Wolfi npm
  • Medium 6.0
    CVE-2025-62522 Scanner template

    vite allows server.fs.deny bypass via backslash on Windows

    Vite is a frontend tooling framework for JavaScript. In versions from 2.9.18 to before 3.0.0, 3.2.9 to before 4.0.0, 4.5.3 to before 5.0.0, 5.2.6 to before 5.4.21, 6.0.0 to before 6.4.1, 7.0.0 to before 7.0.8, and 7.1.0 to before 7.1.11, files denied by serve…

    vitejs vite langfuse-3-worker renovate Wolfi npm