Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how langgenius compares to other vendors in security performance

View Risk Score →

DifyDify AI Workflow oauth_redirect_url Open Redirect Vulnerability

Risk 34
Severity
5.4
First published (updated )
Advisory
ZDI-26-452

DifyZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability

Risk 34
Severity
5.4
First published (updated )
ZDI-CAN-29196

Dify Dify AI WorkflowDify AI Workflow oauth_redirect_url Open Redirect Vulnerability

Risk 34
Severity
5.4
First published (updated )
CVE-2026-18266

Dify difyDify < 1.14.0 Authorization Bypass via File UUID

Risk 40
Severity
6
First published (updated )
CVE-2026-41950

Dify difyDify Vulnerable to Stored XSS via SVG-file upload

Risk 33
Severity
6.9
First published (updated )
CVE-2026-42138
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dify difyA Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /…

Risk 66
Severity
9.1
First published (updated )
CVE-2025-63388

DifyA Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /…

Risk 66
Severity
9.1
First published (updated )
CVE-2025-63386

npm/difyDify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTT…

Risk 43
Severity
7.5
First published (updated )
CVE-2025-63387

docker-compose/difyDefault credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-com…

Risk 86
Severity
9.8
First published (updated )
CVE-2025-56157

LangGenius dify-webUser Enumeration via Distinct Error Messages in langgenius/dify-web

Risk 27
Severity
5.3
First published (updated )
CVE-2025-11750
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dify difyDify MCP OAuth Flow Vulnerable to XSS

Risk 38
Severity
2
First published (updated )
CVE-2025-58747

Dify difyDify Has Broken Access Control on Log Message Endpoint Allows Reading of Chats of Others

Risk 35
Severity
6
First published (updated )
CVE-2025-59422

LangGenius DifyXSS Vulnerability in langgenius/dify

Risk 71
Severity
5.4
First published (updated )
CVE-2025-3467

LangGenius DifyUnsanitized Input in langgenius/dify

Risk 86
Severity
7.2
First published (updated )
CVE-2025-3466

Dify difyDify has XSS vulnerability

Risk 38
Severity
5.3
First published (updated )
CVE-2025-49149
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dify difyDIFY vulnerable to Clickjacking Attack

Risk 27
Severity
2.3
EPSS
0.03%
First published (updated )
CVE-2025-43854

Dify difyDify Allows Unauthorized Access and Modification of APP Orchestration

Risk 42
Severity
7.6
EPSS
0.04%
First published (updated )
CVE-2025-43862

Dify difyDify Allows Unauthorized APP Enable/Disable via API

Risk 27
Severity
6.5
EPSS
0.03%
First published (updated )
CVE-2025-32796

Dify difyDify Allows Insecure User Role Access Control for APP Editing

Risk 27
Severity
6.5
EPSS
0.02%
First published (updated )
CVE-2025-32795

Dify difyDify Allows Insecure User Role Access Control for APP DSL Exporting

Risk 33
Severity
6.3
EPSS
0.03%
First published (updated )
CVE-2025-32790
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Dify difySSRF

Risk 35
Severity
4.8
First published (updated )
CVE-2025-29720

LangGenius DifyServer-Side Request Forgery (SSRF) in langgenius/dify

Risk 38
Severity
6.5
First published (updated )
CVE-2025-0184

LangGenius DifyStored XSS in langgenius/dify

Risk 38
Severity
5.4
First published (updated )
CVE-2024-11850

LangGenius DifyAuthentication Bypass in langgenius/dify

Risk 75
Severity
8.1
First published (updated )
CVE-2024-12776

LangGenius DifyCode Injection in langgenius/dify

Risk 79
Severity
7.2
First published (updated )
CVE-2024-10252
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

LangGenius DifyImproper Restriction of Excessive Authentication Attempts in langgenius/dify

Risk 75
Severity
8.1
First published (updated )
CVE-2024-12039

LangGenius DifySSRF in langgenius/dify

Risk 38
Severity
6.5
First published (updated )
CVE-2024-12775

LangGenius DifyServer-Side Request Forgery (SSRF) in langgenius/dify

Risk 43
Severity
7.5
First published (updated )
CVE-2024-11822

Dify difyPandas Query Injection in langgenius/dify

Risk 79
Severity
8.8
First published (updated )
CVE-2025-0185

LangGenius DifyStored XSS in langgenius/dify

Risk 49
Severity
7.6
First published (updated )
CVE-2024-11824
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203