dagu-org dagu

• CVE-2026-33344 High 8.1 Dagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG 0.5%
• CVE-2026-31886 Critical 9.1 Dagu has a Path Traversal via `dagRunId` in Inline DAG Execution 0.4%
• CVE-2026-31882 High 7.5 Dagu SSE Authentication Bypass in Basic Auth Mode 0.8%
• CVE-2026-27598 High 7.1 Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory 0.6%