Product by LangGenius
Langgenius/dify
14 known vulnerabilities in Langgenius/dify (LangGenius), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-0185 | Pandas Query Injection in langgenius/dify | 8.8 | |
| Critical | CVE-2025-3466 | Unsanitized Input in langgenius/dify | 9.8 | |
| High | CVE-2024-10252 | Code Injection in langgenius/dify | 8.8 | |
| High | CVE-2024-12776 | Authentication Bypass in langgenius/dify | 8.1 | |
| High | CVE-2024-12039 | Improper Restriction of Excessive Authentication Attempts in langgenius/dify | 7.4 | |
| High | CVE-2025-1796 | Langgenius/dify: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) | 7.5 | |
| Medium | CVE-2024-12775 | SSRF in langgenius/dify | 6.5 | |
| High | CVE-2024-11822 | Server-Side Request Forgery (SSRF) in langgenius/dify | 6.5 | |
| High | CVE-2025-3467 | XSS Vulnerability in langgenius/dify | 8.0 | |
| Medium | CVE-2025-0184 | Server-Side Request Forgery (SSRF) in langgenius/dify | 6.5 | |
| Medium | CVE-2025-11750 | User Enumeration via Distinct Error Messages in langgenius/dify-web | 4.3 | |
| Medium | CVE-2024-11850 | Stored XSS in langgenius/dify | 6.8 | |
| High | CVE-2024-11824 | Stored XSS in langgenius/dify | 5.8 | |
| Medium | CVE-2024-11821 | Privilege Escalation in langgenius/dify | 4.3 |