https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:08:12.581255+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-00211 bdu:2026-00211 2026-10-03T16:08:12.644140+00:00 bdu:2026-00211 https://cve.radiocsirt.org/vuln/euvd-2026-246443 EUVD-2026-246443 2026-10-03T16:08:12.644185+00:00 EUVD-2026-246443 https://cve.radiocsirt.org/vuln/fkie_cve-2025-3466 fkie_cve-2025-3466 2026-10-03T16:08:12.644200+00:00

langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability arises from the ability to override global functions in JavaScript, such as parseInt, before sandbox security restrictions are imposed. This can lead to unauthorized access to secret keys, internal network servers, and lateral movement within dify.ai. The issue is resolved in version 1.1.3.

 https://cve.radiocsirt.org/vuln/ghsa-x53g-q9xm-rf4m GHSA-x53g-q9xm-rf4m 2026-10-03T16:08:12.644230+00:00

langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability arises from the ability to override global functions in JavaScript, such as parseInt, before sandbox security restrictions are imposed. This can lead to unauthorized access to secret keys, internal network servers, and lateral movement within dify.ai. The issue is resolved in version 1.1.3.