Skip to content
OpenAdvisories

Vendor

dagu-org

4 known vulnerabilities.

Products

dagu 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-31886

    Dagu has a Path Traversal via `dagRunId` in Inline DAG Execution

    Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, the dagRunId request field accepted by the inline DAG execution endpoints is passed directly into filepath.Join to construct a temporary directory path without any format validation…

    dagu-org dagu github.com/dagu-org/dagu Go