github.com/dagu-org/dagu vulnerabilities (Go)

4 vulnerabilities.

• github.com/dagu-org/dagu Go Dagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG CVE-2026-33344 Fix available 8.1 HighMarch 19, 2026
• github.com/dagu-org/dagu Go Dagu has a Path Traversal via `dagRunId` in Inline DAG Execution CVE-2026-31886 9.1 CriticalMarch 13, 2026
• github.com/dagu-org/dagu Go Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory CVE-2026-27598 7.1 HighFebruary 24, 2026
• github.com/dagu-org/dagu Go Dagu affected by unauthenticated RCE via inline DAG spec in default configuration GHSA-6qr9-g2xw-cw92 9.8 CriticalFebruary 19, 2026