Skip to content
Ddagu-org
Products
| Product | CVEs | Exploited | Latest |
|---|
| dagu | 4 | – | Mar 24, 2026 |
Exploited and recent CVEs
-
CVE-2026-33344
High 8.1
Dagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG
0.5%
-
CVE-2026-31886
Critical 9.1
Dagu has a Path Traversal via `dagRunId` in Inline DAG Execution
0.4%
-
CVE-2026-31882
High 7.5
Dagu SSE Authentication Bypass in Basic Auth Mode
0.8%
-
CVE-2026-27598
High 7.1
Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory
0.6%