CVE-2026-28288
Dify has a user enumeration issue
Résumé
Dify has a user enumeration issue
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- report github.com