langgenius News Articles

DifyTap Bugs Let Attackers 'Wiretap' AI Chat Histories

Four vulnerabilities allow attackers to exploit Dify, a platform for AI application building and management, to silently access sensitive data.

3 weeks ago

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

Four DifyTap flaws could expose private AI chats and files across Dify tenants; three are fixed in version 1.14.2.

3 weeks ago

CVE-2025-3467 | langgenius dify up to 1.1.2 Monitoring/Log cross site scripting

A vulnerability classified as problematic has been found in langgenius dify up to 1.1.2. This affects an unknown part of the component Monitoring/Log. The manipulation leads to cross site scriptin…