Nixpkgs security tracker
Dismissed
by @anthonyroussel Activity log
- Created suggestion
- @anthonyroussel dismissed
Dify has a user enumeration issue
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue.
References
-
https://github.com/langgenius/dify/security/advisories/GHSA-9qpf-wcv3-w3qx x_refsource_CONFIRM
-
https://github.com/langgenius/dify/issues/24323 x_refsource_MISC
Affected products
dify
- ==< 1.9.0
Matching in nixpkgs
pkgs.speedify
Use multiple internet connections in parallel
-
nixos-unstable 15.8.2-12611
- nixpkgs-unstable 15.8.2-12611
- nixos-unstable-small 15.8.2-12611
pkgs.hiddify-app
None
pkgs.haskellPackages.swizzle-modify
Swizzle modify functions
Package maintainers
-
@vdemeester Vincent Demeester <vincent@sbr.pm>
-
@zahrun Zahrun <zahrun@murena.io>