v3.9.8

LTS

Released Jul 15, 2026·Supported until Dec 31, 2026·Community 1.13.x·Community commit 82ab9b2·Enterprise 0.16.x·Helm chart·Docker Compose

Breaking

None

Security

Issues

Changes

0F · 6B

Downtime

Zero

Upgrade Impact

0 features · 6 fixes

Non-breaking:Security fixes and bug fixes. No breaking changes.

What Changed

Bug Fixes

Web App: Form state lost during config refetchFixed an issue where shared WebApp content was unmounted during /site, /parameters, and /meta background refetches, causing user form input to be lost. The content now stays mounted during refetches.

UI: Streamdown table fullscreen missing stylesFixed missing background, borders, and text colors in streamdown table fullscreen mode. The fullscreen view now correctly applies Dify design tokens via CSS overrides.

Security Fixes

Security: Harden default SSRF proxy egressHardened Docker Compose SSRF proxy defaults by denying loopback, private, CGN, link-local, ULA, multicast, reserved, and cloud metadata target networks before general egress. Removed reliance on the Squid image packaged allow rules. Added SSRF_PROXY_ALLOW_PRIVATE_IPS and SSRF_PROXY_ALLOW_PRIVATE_DOMAINS escape hatches for trusted private-network deployments.

Security: Require trial app registration for readsTrial apps must now be registered before read access is granted, closing a gap where unregistered trial apps could be read without proper registration.

Security: Email normalization for member servicesAdded strict email normalization (latin-only, trim spaces, reject invalid formats) in enterprise member and admin-member services to prevent email-based access bypass.

Security: CVE remediationUpdated vulnerable dependencies where fixes are available. See the Security CVE section below for detailed scan results. Note: quick-xml (via upstream uv) and nltk still have no upstream fix available.