Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

langgenius/dify

              main @ a421362
            

193

Fixes

CVEs

CRITICAL

Peak severity

23.5%

Coverage

Highlights

Auth Bypass: 87 prior fixes. Scrutinize any change in this area.

api/controllers/console/app/app.py: most-fixed (9 issues). Treat as high-risk during review.

116 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Missing tenant and user-scope boundaries in file preview lookups allowed cross-tenant unauthorized document content access. This pattern of missing database query tenant constraints is widely associated with CVE-2026-41949.

SSRF: Word document extraction features in WordExtractor were historically vulnerable to Server-Side Request Forgery (SSRF) via unvalidated external relationship target references and media urls. This was resolved by routing HTTP requests explicitly through the ssrf_proxy helper.

Remote Code Execution: The integration with the Vanna tool package allowed Pandas Query Injection via its default generic training plan execution flows, leading to Arbitrary Code Execution. The vulnerability was patched by disabling chart generation parameters.