https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 05:58:22 +0000 https://cve.radiocsirt.org/vuln/cve-2025-0184 <p><strong>Affected:</strong> langgenius/dify</p> <p>A Server-Side Request Forgery (SSRF) vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the &#39;Create Knowledge&#39; section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the &#39;requests&#39; module instead of the &#39;ssrf_proxy&#39;, leading to an SSRF vulnerability. This issue was fixed in version 0.11.0.</p> <p><strong>Affected:</strong> langgenius/dify</p> <p>A Server-Side Request Forgery (SSRF) vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the &#39;Create Knowledge&#39; section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the &#39;requests&#39; module instead of the &#39;ssrf_proxy&#39;, leading to an SSRF vulnerability. This issue was fixed in version 0.11.0.</p> https://cve.radiocsirt.org/vuln/cve-2025-0184