SSO OIDC validation hardened; regex DoS patched
v3.225.2
3 fixesThis release3 fixesBug fixesAI-tallied from the release notes
From the original release noteView original ↗
What's Changed
- fix(sso): block internal targets in OIDC discovery validation (v3 backport of #15897) by @Steffen911 in https://github.com/langfuse/langfuse/pull/15988
- fix(rbac): scope project role updates to organization (v3 backport of #15940) by @Steffen911 in https://github.com/langfuse/langfuse/pull/15987
- fix(shared): prevent regex backtracking denial of service (v3 backport of #15891) by @Steffen911 in https://github.com/langfuse/langfuse/pull/15985
Full Changelog: https://github.com/langfuse/langfuse/compare/v3.225.1...v3.225.2
Fetched August 11, 2026
