langgenius dify

Name: langgenius dify
Brand: langgenius

productUS

cpe:2.3:a:langgenius:dify:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical5high9medium1low

updated 2026-10-28

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-0184US	—	0.51% (43rd)	Exploit	0.11.0	2025-03-20	< 0.11.0
CVE-2025-63387US	—	29.9% (98th)	—	no fix	2025-12-18	= 1.9.1
CVE-2025-58747US	medium6.1	5.73% (93rd)	—	1.9.2	2025-10-17	< 1.9.2
CVE-2025-56157US	—OT elevated	0.86% (58th)	—	no fix	2025-12-18	≤ 1.5.1
CVE-2024-10252US	high7.2	0.83% (57th)	—	no fix	2025-03-20	≤ 0.9.1
CVE-2025-3466US	high7.2	0.83% (57th)	—	1.1.3	2025-07-07	1.1.0 → 1.1.3
CVE-2025-11750US	medium5.3	0.70% (53rd)	—	no fix	2025-10-22	= 1.6.0
CVE-2024-12039US	high8.1	0.69% (53rd)	—	no fix	2025-03-20	= 0.10.1
CVE-2024-12776US	—	0.66% (52nd)	—	no fix	2025-03-20	= 0.10.1
CVE-2024-12775US	—	0.66% (51st)	—	no fix	2025-03-20	= 0.10.1
CVE-2025-1796US	high8.8	0.61% (49th)	—	no fix	2025-03-20	= 0.10.1
CVE-2024-11821US	—	0.49% (42nd)	—	no fix	2025-03-20	= 0.9.1
CVE-2024-11824US	high7.6	0.48% (41st)	—	0.12.1	2025-03-20	< 0.12.1
CVE-2024-11850US	medium5.4	0.44% (38th)	—	no fix	2025-03-20	= 0.9.2
CVE-2025-32796US	medium6.5OT elevated	0.43% (37th)	—	no fix	2025-04-18	≤ 0.6.8
CVE-2025-3467US	medium5.4	0.40% (34th)	—	1.1.3	2025-07-07	< 1.1.3
CVE-2026-41950US	—	0.35% (28th)	—	1.14.0	2026-05-05	< 1.14.0
CVE-2025-43862US	—OT elevated	0.34% (28th)	—	0.6.12	2025-04-25	< 0.6.12
CVE-2025-32795US	—	0.30% (23rd)	—	0.6.12	2025-04-18	< 0.6.12
CVE-2025-32790US	medium4.3	0.29% (22nd)	—	0.6.13	2025-04-18	< 0.6.13
CVE-2025-49149US	medium6.1	0.28% (21st)	—	no fix	2025-06-17	= 1.2.0
CVE-2025-59422US	low3.1	0.25% (17th)	—	no fix	2025-09-25	= 1.8.1
CVE-2025-43854US	medium6.1	0.24% (15th)	—	no fix	2025-04-28	≤ 0.6.8
CVE-2025-63386US	critical9.1	0.24% (15th)	—	no fix	2025-12-18	= 1.9.1
CVE-2026-42138US	medium6.1	0.24% (14th)	—	1.13.1	2026-05-04	< 1.13.1
CVE-2025-63388US	critical9.1	0.22% (13th)	—	no fix	2025-12-18	= 1.9.1
CVE-2025-29720US	—	0.17% (6th)	—	no fix	2025-04-14	= 1.0.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-346Origin Validation Error2 CVEs
CWE-1021Improper Restriction of Rendered UI Layers or Frames1 CVEs
CWE-1100Insufficient Isolation of System-Dependent Functions1 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs
CWE-305Authentication Bypass by Primary Weakness1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan