EUVD-2025-7040

Malicious code in bioql PyPI...

EUVD-2025-7037

Malicious code in bioql PyPI...

EUVD-2025-12580

Malicious code in bioql PyPI...

EUVD-2025-7125

Malicious code in bioql PyPI...

EUVD-2025-11860

Malicious code in bioql PyPI...

EUVD-2025-7034

Malicious code in bioql PyPI...

EUVD-2025-31756

Malicious code in bioql PyPI...

EUVD-2025-11859

Malicious code in bioql PyPI...

EUVD-2025-14819

Malicious code in bioql PyPI...

EUVD-2025-31091

Malicious code in bioql PyPI...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

CVE-2025-56520

Dify v1.6.0 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the controllers.console.remote_files.RemoteFileUploadApi component. The root cause is improper validation , which allows an attacker with network access to force the server to make arbitrary requests. This coul...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

CVE-2025-56520: Server-Side Request Forgery (SSRF)

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery SSRF via the component controllers.console.remotefiles.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720...

PT-2025-40009

Name of the Vulnerable Software and Affected Versions Dify version 1.6.0 Description The software contains a Server-Side Request Forgery SSRF issue. This occurs through the component controllers.console.remote files.RemoteFileUploadApi. The issue is distinct from CVE-2025-29720. Recommendations A...

dify security vulnerabilities

dify is an open source LLM application development platform from LangGenius Open Source. A security vulnerability exists in version 1.6.0 of dify, which stems from a server-side request forgery in the controllers.console.remotefiles.RemoteFileUploadApi component, which could lead to a server-side...

CVE-2025-59422

Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/chat-messages?conversationid==10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query data an...