Starstruk Logo MarkStarstruk

1.11.1 1.11.2

medium risk

langgenius/difyDec 12, 2025 → Dec 25, 202513 days between releases

What's New

1.11.2 adds IRIS vector DB, Aliyun SLS logging, Tunisian Arabic, and critical XSS/SSRF/CSV security fixes over 1.11.1.

New Features

  • Added support for InterSystems IRIS as a vector database backend.
  • Integrated Aliyun Simple Log Service for workflow execution logging.
  • Added Tunisian Arabic (ar-TN) localization support.

Improvements

  • Expanded Jest test coverage across UI components and pipeline settings to improve release confidence.
  • Included broad code refactoring and robustness work across the platform.
  • Optimized the chat wrapper for better usability across device types.
  • Enhanced Amplitude tracking for deeper user behavior insights.

Bug Fixes

  • Patched an XSS vulnerability in Mermaid Graph rendering.
  • Patched an SSRF vulnerability.
  • Patched a CSV injection vulnerability.
  • Fixed various translation inconsistencies across the platform.

Upgrade Notes

This is a patch upgrade with no documented breaking changes, so the standard upgrade path applies. Review configuration only if you plan to adopt the new IRIS vector database or Aliyun SLS logging integrations. Apply promptly because the release includes critical security fixes.

The Two Releases

1.11.1

v1.11.1

Dec 12, 2025· 11 months ago

Dify 1.11.1 is a security-focused patch release with important React, React DOM, and Next.js CVE fixes. It also resolves credential display, description length, content-type charset, Flask-RESTX, document handling, token retrieval, and hit-test issues while improving Excel extractor performance.

Full release notes
1.11.2

v1.11.2

Dec 25, 2025· 10 months ago

Version 1.11.2 introduces support for InterSystems IRIS Vector Database and Aliyun SLS workflow logging, expands language support to Tunisian Arabic, and patches critical security vulnerabilities including XSS, SSRF, and CSV injection. The release also significantly enhances platform robustness through comprehensive Jest test coverage, extensive code refactoring, and improved monitoring capabilities.

Full release notes