1.10.1 1.10.1-fix.1
langgenius/difyNov 26, 2025 → Dec 5, 20259 days between releases
What's New
Security/dependency patch over 1.10.1: React and Next.js bumps plus backend library updates, no functional changes.
Improvements
- Frontend React upgraded to 19.2.1 to remediate CVE-2025-55182.
- Next.js bumped to 15.5.7 in the web package and lockfile.
- Backend dependencies refreshed: pyarrow 17.0.0, werkzeug 3.1.4, and urllib3 2.5.0.
- Addresses the GHSA-fv66-9v8q-g76r advisory through the corrected web image.
Upgrade Notes
This is a drop-in patch on top of 1.10.1 with no config or migration changes. If you pulled 1.10.1-fix.1 before 2025-12-09 03:00 UTC, confirm your docker compose web service points at langgenius/dify-web:1.10.1-fix.1, since an incorrect tag leaves the vulnerability unpatched. Re-pull images and restart web to pick up the fixed frontend build.
The Two Releases
v1.10.1 – Multi-Database Era Begins: MySQL Joins the Family
Nov 26, 2025· 11 months ago
Dify 1.10.1 introduces first-class MySQL support alongside PostgreSQL and OceanBase, and significantly improves Workflow Editor performance at larger node counts. It also switches the API image to run as a non-root user and includes numerous workflow, knowledge base, SDK, UI, and i18n fixes.
Full release notesv1.10.1-fix.1
Dec 5, 2025· 11 months ago
Dify 1.10.1-fix.1 is a security and dependency patch for 1.10.1. It bumps frontend and backend libraries to address vulnerabilities, including React CVE-2025-55182, and requires users to verify the web service image tag.
Full release notes