github.com/dapr/dapr vulnerabilities
CVEs whose affected-version data names the github.com/dapr/dapr package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-41491High· 8.1Dapr: Service Invocation path traversal ACL bypass
Dapr: Service Invocation path traversal ACL bypass
▾ Twilightdapr · github.com/dapr/daprEPSS 0.33%via OSV
CVE-2024-35223Medium· 5.3Dapr API Token Exposure
Dapr API Token Exposure
▾ Sunlitdapr · github.com/dapr/daprEPSS 0.44%via OSV
CVE-2023-37918Medium· 6.8Dapr API token authentication bypass in HTTP endpoints
Dapr API token authentication bypass in HTTP endpoints
▾ Sunlitdapr · github.com/dapr/daprEPSS 1.4%via OSV