Search results

[SECURITY] CRITICAL: Empty SECRET_KEY + default credentials across .env.example (CWE-798)

project#dify

Status: Open.

#36690 In langgenius/dify;

· olliezyuhscripta opened on May 26, 2026

[SECURITY] CORS allows wildcard * in production default (CWE-942)

project#dify

Status: Open.

#36691 In langgenius/dify;

· olliezyuhscripta opened on May 26, 2026

[SECURITY] Missing SECURITY.md — no vuln reporting channel for 142K-star project

project#dify

Status: Open.

#36692 In langgenius/dify;

· olliezyuhscripta opened on May 26, 2026

dep inject model validate

Status: Open.

#36659 In langgenius/dify;

· asukaminato0721 opened on May 26, 2026

On the MCP list page, the search results include non-MCP tools.

bug

Status: Open.

#36647 In langgenius/dify;

· Zrincet opened on May 26, 2026

The SSE connection remains active indefinitely and fails to close normally when an annotation reply is triggered.

bug

Status: Open.

#36646 In langgenius/dify;

· yky888 opened on May 26, 2026

Skills support

enhancement

Status: Open.

#36641 In langgenius/dify;

· joeylee2023 opened on May 26, 2026

Add built-in output validation and auto-retry for LLM Node

enhancement

Status: Open.

#36632 In langgenius/dify;

· ZangXincz opened on May 25, 2026

pass session from parameter , dont use db.session

Status: Open.

#36631 In langgenius/dify;

· asukaminato0721 opened on May 25, 2026

Possible cross-tenant issue in DocumentSegment.get_sign_content

bug

Status: Open.

#36623 In langgenius/dify;

· cqjjjzr opened on May 25, 2026

When uploading the plugin in an offline environment, an error occurred, indicating that the uv was constantly attempting to connect to the network.

bug

Status: Open.

#36620 In langgenius/dify;

· dczhangii opened on May 25, 2026

Version History

bug

Status: Open.

#36589 In langgenius/dify;

· andyqiuqiubo opened on May 25, 2026