Security Advisory

CVE-2026-26023

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-11 21:23:09

Last updated 2026-02-12 21:16:35

Assigner GitHub_M

CVSS score 5.3

State PUBLISHED

Description

Dify is an open-source LLM app development platform. Prior to 1.13.0, a cross site scripting vulnerability has been found in the web application chat frontend when using echarts. User or llm inputs containing echarts containing a specific javascript payload will be executed. This vulnerability is fixed in 1.13.0.

← Browse all CVEs View on cve.org ↗