https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:58:57.730572+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292115 EUVD-2026-292115 2026-10-06T08:58:57.787798+00:00 EUVD-2026-292115 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6618 fkie_cve-2026-6618 2026-10-06T08:58:57.787838+00:00

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_plugin_json_to_tool_bundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-337w-xf2q-h5w2 GHSA-337w-xf2q-h5w2 2026-10-06T08:58:57.787873+00:00

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_plugin_json_to_tool_bundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.