VU#889462: Casdoor authentication server is vulnerable to authorization bypass

Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps

Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants

Attacking Cloud Service Providers (ACSP) - An interactive textbook on control-plane intrusion and breaking cross-tenant isolation