Threats tagged 'ghsa-4w83-mp5v-8r97'

A vulnerability in langgenius dify up to versions 1.18.0 and 2.0.0-beta.2 allows remote attackers to exploit hard-coded credentials in the Sandbox Run Handler component. The flaw is located in an unknown functionality within the file api/configs/feature/__init__.py. Public exploit code is available, and the vulnerability has a medium severity rating with a CVSS score of 6.3.