Skip to content
OpenAdvisories

Package · npm

dagu

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-31882

    Dagu SSE Authentication Bypass in Basic Auth Mode

    Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, when Dagu is configured with HTTP Basic authentication (DAGU_AUTH_MODE=basic), all Server-Sent Events (SSE) endpoints are accessible without any credentials. This allows unauthentic…

    dagu-org dagu dagu npm