github.com/dagu-org/dagu
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Dagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG | github.com/dagu-org/dagu | Go | High | Fix reported | |
| Dagu: Path Traversal via `dagRunId` in Inline DAG Execution | github.com/dagu-org/dagu | Go | Critical | No fix reported | |
| Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory | github.com/dagu-org/dagu | Go | High | No fix reported | |
| Dagu affected by unauthenticated RCE via inline DAG spec in default configuration | github.com/dagu-org/dagu | Go | Critical | No fix reported |