Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

langgenius/dify — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in langgenius/dify, with AI-generated Chinese analysis, references, and POCs.

Vendor: langgenius

CVE IDTitleCVSSSeverityPublished
CVE-2025-11750 User Enumeration via Distinct Error Messages in langgenius/dify-web CWE-544 8.2AIHighAI2025-10-22
CVE-2025-3467 XSS Vulnerability in langgenius/dify CWE-79 6.1AIMediumAI2025-07-07
CVE-2025-3466 Unsanitized Input in langgenius/dify CWE-1100 9.8AICriticalAI2025-07-07
CVE-2025-0184 Server-Side Request Forgery (SSRF) in langgenius/dify CWE-918 9.1 -2025-03-20
CVE-2024-11850 Stored XSS in langgenius/dify CWE-79 5.4 -2025-03-20
CVE-2024-12776 Authentication Bypass in langgenius/dify CWE-305 9.8 -2025-03-20
CVE-2024-10252 Code Injection in langgenius/dify CWE-94 9.8 -2025-03-20
CVE-2024-12039 Improper Restriction of Excessive Authentication Attempts in langgenius/dify CWE-307 9.8 -2025-03-20
CVE-2024-12775 SSRF in langgenius/dify CWE-918 9.1 -2025-03-20
CVE-2024-11822 Server-Side Request Forgery (SSRF) in langgenius/dify CWE-918 7.5 -2025-03-20
CVE-2025-0185 Pandas Query Injection in langgenius/dify CWE-94 9.8 -2025-03-20
CVE-2024-11824 Stored XSS in langgenius/dify CWE-79 5.4 -2025-03-20
CVE-2024-11821 Privilege Escalation in langgenius/dify CWE-250 5.7 -2025-03-20
CVE-2025-1796 Admin account takeover through weak Pseudo-Random number generator used in generating password reset codes in langgenius/dify CWE-338 8.8 -2025-03-20

All 14 known CVE vulnerabilities affecting langgenius/dify with full Chinese analysis, references, and POCs where available.