CVE-2026-28288 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attac…
Medium CVSS: 5.5

CVE-2026-28288

Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue.
Vendor
Dify
Product
Dify
CWE
CWE-204
Yayın Tarihi
2026-02-27 21:16:18
Güncelleme
2026-03-09 20:23:10
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-204 Dify MEDIUM Dify 2026

Referanslar

https://github.com/langgenius/dify/issues/24323 https://github.com/langgenius/dify/security/advisories/GHSA-9qpf-wcv3-w3qx