Langgenius vulnerabilities
44 CVEs and advisories name Langgenius as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-32796Dify Allows Unauthorized APP Enable/Disable via API
- CVE-2025-32795Dify Allows Insecure User Role Access Control for APP Editing
- CVE-2025-32790Dify Allows Insecure User Role Access Control for APP DSL Exporting
- CVE-2025-0184Server-Side Request Forgery (SSRF) in langgenius/dify
- CVE-2024-11850Stored XSS in langgenius/dify
- CVE-2024-12776Authentication Bypass in langgenius/dify
- CVE-2024-10252Code Injection in langgenius/dify
- CVE-2024-12039Improper Restriction of Excessive Authentication Attempts in langgenius/dify
- CVE-2024-12775SSRF in langgenius/dify
- CVE-2024-11822Server-Side Request Forgery (SSRF) in langgenius/dify
- CVE-2025-0185Pandas Query Injection in langgenius/dify
- CVE-2024-11824Stored XSS in langgenius/dify
- CVE-2024-11821Privilege Escalation in langgenius/dify
- CVE-2025-1796Admin account takeover through weak Pseudo-Random number generator used in generating password reset codes in langgenius/dify