Dify
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 26 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 20, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability
Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_text
DifyTap Bugs Let Attackers 'Wiretap' AI Chat Histories
Dify < 1.14.2 Authorization Bypass via File Preview Endpoint
Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access
Dify < 1.14.2 Authorization Bypass via Trace Configuration Endpoints
Dify < 1.14.0 Authorization Bypass via File UUID
Dify Vulnerable to Stored XSS via SVG-file upload
Dify has IDOR in deleting someone else's chat conversation
Dify - Stored XSS in chat
Monitor Dify in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.