Beveiligingsadvies

CVE-2026-21866

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-03 21:42:25

Laatst bijgewerkt 2026-03-04 21:18:08

Toegewezen door GitHub_M

CVSS-score 5.1

Status PUBLISHED

Beschrijving

Dify is an open-source LLM app development platform. Prior to 1.11.2, Dify is vulnerable to a stored XSS issue when rendering Mermaid diagrams within chats. This occurs because Dify’s default Mermaid configuration uses securityLevel: loose, which allows potentially unsafe content to execute. This vulnerability is fixed in 1.11.2.

← Alle CVE's bekijken Bekijk op cve.org ↗