Security vulnerability affects the langfuse package. undici's retry handler can leave an already-exposed response body pending forever.