CVE-2026-6618

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...

EUVD-2026-23807

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...

CVE-2026-6618

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...

CVE-2026-6618

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...

CVE-2026-6618

Summary (CVE-2026-6618): A flaw in langgenius dify up to 1.13.3 affects the component ApiBasedToolSchemaParser, specifically parse_openai_plugin_json_to_tool_bundle in api/core/tools/utils/parser.py. The issue allows an attacker to manipulate the argument url to trigger a server-side request forg...

Insufficient Granularity of Access Control

Overview Affected versions of this package are vulnerable to Insufficient Granularity of Access Control via the favorite-output-definitions-table-proxy API endpoint. An attacker can access or modify configurations without proper authorization by sending requests as an authenticated backend user w...

dq-tool-bundle (0.0.4), mlshell (0.0.1) +2 more potentially affected by CVE-2023-24816 via ipython (7.12.0)

ipython PYPI version 7.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - dq-tool-bundle 0.0.4 - mlshell 0.0.1 - piml =0.1.1, =0.1.2 - pymondo 0.0.7 Source cves: CVE-2023-24816 Source advisory: OSV:PYSEC-2023-17...

dq-tool-bundle (0.0.4), mlshell (0.0.1) +2 more potentially affected by CVE-2023-24816 via ipython (7.12.0)

ipython PYPI version 7.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - dq-tool-bundle 0.0.4 - mlshell 0.0.1 - piml =0.1.1, =0.1.2 - pymondo 0.0.7 Source cves: CVE-2023-24816 Source advisory: OSV:GHSA-29GW-9793-FVW7...