| Package | Affected versions | Patched versions |
|---|---|---|
| dify | < 1.9.0 | 1.9.0 |
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free