Skip to content
OpenAdvisories

Package · Go

github.com/dapr/dapr

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.1

    Dapr: Service Invocation path traversal ACL bypass

    Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. From versions 1.3.0 to before 1.15.14, 1.16.0-rc.1 to before 1.16.14, and 1.17.0-rc.1 to before 1.17.5, a vulnerability has been found in Dapr that allows b…