CVE-2025-49149 — Dify is an open-source LLM app development platform. In version 1.2.0, there is insufficient filtering of user input by web applications. Attackers can use website vulnerabilities to inject malicious — CVE Database · The Intelligence Room