Log in Start free

dapr

Products

ProductCVEsExploitedLatest
dapr4–Jul 2, 2026

Exploited and recent CVEs

  • CVE-2026-59096 High 7.5 Dapr - OIDC Discovery Issuer and JWKS URI Injection via Unvalidated X-Forwarded-Host 0.3%
  • CVE-2026-41491 High 8.1 Dapr: Service Invocation path traversal ACL bypass 0.3%
  • CVE-2024-35223 Medium 5.3 Dapr API Token Exposure 0.4%
  • CVE-2023-37918 Medium 6.8 API token authentication bypass in HTTP endpoints in Dapr 1.4%