Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 37
   CVE NVD 1h ago

   Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and…

   Dify before 1.15.0 contains a server-side request forgery vulnerability that allows any authenticated console user to bypass SSRF protections and issue arbitrary HTTP requests to internal services and cloud metadata endpoints due…

   CVSS 7.6 CVE-2026-58141 Langgenius Edge / VPN / firewall
2. 23
   CVE NVD 22h ago

   A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2.

   A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/__init__.py of the component Sandbox Run Handler. The manipulation…

   CVSS 6.3 CVE-2026-123135 Langgenius AI infrastructure

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Langgenius&limit=100. RSS for this section: feed.xml.