CVE-2026-28288
Vulnerability Description
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-204
Source
NVD
Vendor
langgenius
Product
dify
Discussion (0)
Add Comment
No comments yet. Be the first!