dapr vulnerabilities
4 published CVEs name dapr among the affected products.
- 4Published CVEs4 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-59096
Dapr - OIDC Discovery Issuer and JWKS URI Injection via Unvalidated X-Forwarded-Host
dapr · dapr
High8.2 - CVE-2026-41491
Dapr: Service Invocation path traversal ACL bypass
dapr · dapr
High8.1 - CVE-2024-35223
Dapr API Token Exposure
dapr · dapr
Medium5.3 - CVE-2023-37918
API token authentication bypass in HTTP endpoints in Dapr
dapr · dapr
Medium6.8