https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:41:18.312311+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292194 EUVD-2026-292194 2026-10-06T08:41:18.356980+00:00 EUVD-2026-292194 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34082 fkie_cve-2026-34082 2026-10-06T08:41:18.357029+00:00

Dify is an open-source LLM app development platform. Prior to 1.13.1, the method `DELETE /console/api/installed-apps/<appId>/conversations/<conversationId>` has poor authorization checking and allows any Dify-authenticated user to delete someone else's chat history. Version 1.13.1 patches the issue.