https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-07T14:20:09.872852+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-34082 fkie_cve-2026-34082 2026-10-07T14:20:09.874829+00:00

Dify is an open-source LLM app development platform. Prior to 1.13.1, the method `DELETE /console/api/installed-apps/<appId>/conversations/<conversationId>` has poor authorization checking and allows any Dify-authenticated user to delete someone else's chat history. Version 1.13.1 patches the issue.