CLEANSTART-2026-LO03281

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-LO03281.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-LO03281
Upstream
Published
2026-10-15T00:40:55Z
Modified
2026-10-15T01:00:20Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients
Details

Security vulnerability affects the langfuse package. MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients.

References

Affected packages

CleanStart / langfuse

Package

Name
langfuse
Purl
pkg:apk/cleanstart/langfuse

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.35.0-r1

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-LO03281.json"