https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:52:48.689322+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-26023 CVE-2026-26023 — Client‑side DOM XSS in the web chat app of Dify when using echarts 2026-10-07T19:52:48.712564+00:00

Affected: langgenius dify

Dify is an open-source LLM app development platform. Prior to 1.13.0, a cross site scripting vulnerability has been found in the web application chat frontend when using echarts. User or llm inputs containing echarts containing a specific javascript payload will be executed. This vulnerability is fixed in 1.13.0.