langgenius security advisories
3 threat alerts tracking vulnerabilities and security advisories that affect langgenius products.
Vulnios monitors langgenius CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent langgenius security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2025-56157 — langgenius — dify
Default credentials in Dify thru 1.5.1. PostgreSQL username and password specified in the docker-compose.yaml file included in its source code. NOTE: the Supplier reports that the Docker configuration
criticalCVE-2025-56157Critical Vulnerability: CVE-2025-63386 — langgenius — dify
A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/setup endpoint. The endpoint implements an insecure CORS policy that reflects any Origin
criticalCVE-2025-63386Critical Vulnerability: CVE-2025-63388 — langgenius — dify
A Cross-Origin Resource Sharing (CORS) misconfiguration vulnerability exists in Dify v1.9.1 in the /console/api/system-features endpoint. The endpoint implements an overly permissive CORS policy that
criticalCVE-2025-63388
Track langgenius exposure across your environment
Vulnios automatically cross-references your asset inventory against new langgenius CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan