← All credits
Ido Shani and Gal Zaban of Zafran Security
6 vulnerability records and advisories credit this contributor.
CVE-2026-41950
Dify < 1.14.0 Authorization Bypass via File UUID
CVE-2026-41949
Dify < 1.14.2 Authorization Bypass via File Preview Endpoint
CVE-2026-41948
Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access
CVE-2026-41947
Dify < 1.14.2 Authorization Bypass via Trace Configuration Endpoints
CVE-2026-22219
Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element
CVE-2026-22218
Chainlit < 2.9.4 Arbitrary File Read via /project/element