CVE Tools
Track your stack

Langgenius

17 CVEs tracked since 2025. Since Mar 2025, none of them reached CISA KEV.

Langgenius CVEs per month

Mar 2025 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Langgenius CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-03110
2025-0460
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Langgenius's monthly top three, with their CVEs summed over those months.

  1. Dify152 months
  2. Langgenius/dify111 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Langgenius.

  1. CVE-2026-105762Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint8.3
  2. CVE-2026-105761Dify: IDOR in AppMCPServer PUT Endpoint Allows Modification of Other Apps' MCP Servers7.1
  3. CVE-2026-85022langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross site scripting3.5
  4. CVE-2026-85021langgenius dify Splash Layout splash.tsx router.replace cross site scripting4.3
  5. CVE-2026-18632langgenius dify Jinja2 jinja2_transformer.py jinja2.Template special elements used in a template engine6.3
  6. CVE-2026-18266Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability5.4
  7. CVE-2026-61461Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_text8.8
  8. CVE-2026-41949Dify < 1.14.2 Authorization Bypass via File Preview Endpoint5.9
  9. CVE-2026-41948Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access9.4
  10. CVE-2026-41947Dify < 1.14.2 Authorization Bypass via Trace Configuration Endpoints9.1
  11. CVE-2026-41950Dify < 1.14.0 Authorization Bypass via File UUID6.5
  12. CVE-2026-42138Dify Vulnerable to Stored XSS via SVG-file upload6.1
  13. CVE-2026-34082Dify has IDOR in deleting someone else's chat conversation4.3
  14. CVE-2026-6619langgenius dify ImagePreview image-preview.tsx openInNewTab cross site scripting3.5
  15. CVE-2026-6618langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery6.3

The record

Peak rank
#90 in Mar 2025
Busiest month shown
Mar 2025, 11 CVEs
Months with a KEV entry
0 since Mar 2025
Monthly snapshots
2 since 2025
Langgenius's full record, month by month