dagu-org vulnerabilities
4 published CVEs name dagu-org among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-33344
Dagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG
dagu-org · dagu
High8.1 - CVE-2026-31886
Dagu has a Path Traversal via `dagRunId` in Inline DAG Execution
dagu-org · dagu
Critical9.1 - CVE-2026-31882
Dagu SSE Authentication Bypass in Basic Auth Mode
dagu-org · dagu
High7.5 - CVE-2026-27598
Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory
dagu-org · dagu
High7.1