Skip to content
OpenAdvisories

Package · Go

github.com/dapr/dapr

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.1
    CVE-2026-41491

    Dapr: Service Invocation path traversal ACL bypass

    Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. From versions 1.3.0 to before 1.15.14, 1.16.0-rc.1 to before 1.16.14, and 1.17.0-rc.1 to before 1.17.5, a vulnerability has been found in Dapr that allows b…

    dapr dapr github.com/dapr/dapr Go
  • Medium 5.3
    CVE-2024-35223

    Dapr API Token Exposure

    Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. Dapr sends the app token of the invoker app instead of the app token of the invoked app. This causes of a leak of the application token of the invoker app t…

    dapr dapr github.com/dapr/dapr Go
  • Medium 6.8
    CVE-2023-37918

    API token authentication bypass in HTTP endpoints in Dapr

    Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability has been found in Dapr that allows bypassing API token authentication, which is used by the Dapr sidecar to authenticate calls coming from t…

    dapr dapr github.com/dapr/dapr Go