1.10.1-fix.1
langgenius/dify1.10.1-fix.1Dec 5, 2025by laipz8200
Upgrading?
Release notes summary
Dify 1.10.1-fix.1 is a security and dependency patch for 1.10.1. It bumps frontend and backend libraries to address vulnerabilities, including React CVE-2025-55182, and requires users to verify the web service image tag.
Key Highlights
- Backend bumps pyarrow to 17.0.0, werkzeug to 3.1.4, and urllib3 to 2.5.0.
- Frontend bumps React to 19.2.1 to address CVE-2025-55182.
- Frontend bumps Next.js to 15.5.7.
- Users who upgraded early must verify the web service uses langgenius/dify-web:1.10.1-fix.1.
Full Release Notes
> [!IMPORTANT] > > For users who upgraded to version 1.10.1-fix.1 before 2025-12-09 03:00:00 UTC, please verify your docker compose configuration to ensure the web service is using the correct image version langgenius/dify-web:1.10.1-fix.1. This verification is critical to address the https://github.com/advisories/GHSA-fv66-9v8q-g76r security vulnerability. - Security/deps: backend bumps pyarrow 17.0.0, werkzeug 3.1.4, urllib3 2.5.0 in api/uv.lock; frontend bumps React 19.2.1 (addresses CVE-2025-55182) and Next.js 15.5.7 in web/package.json + web/pnpm-lock.yaml. **Full Changelog**: https://github.com/langgenius/dify/compare/1.10.1...1.10.1-fix.1
Related Repositories
public-apis/public-apis★ 492,774
A collective list of free APIs
NousResearch/hermes-agent★ 257,813
The agent that grows with you
yt-dlp/yt-dlp★ 203,099
A feature-rich command-line audio/video downloader
microsoft/markitdown★ 192,609
Python tool for converting files and office documents to Markdown.
Significant-Gravitas/AutoGPT★ 187,793
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.