Skip to content
OpenAdvisories

Package · Go

github.com/dapr/dapr

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-35223

    Dapr API Token Exposure

    Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. Dapr sends the app token of the invoker app instead of the app token of the invoked app. This causes of a leak of the application token of the invoker app t…

    dapr dapr github.com/dapr/dapr Go
  • Medium 6.8
    CVE-2023-37918

    API token authentication bypass in HTTP endpoints in Dapr

    Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability has been found in Dapr that allows bypassing API token authentication, which is used by the Dapr sidecar to authenticate calls coming from t…

    dapr dapr github.com/dapr/dapr Go