Dagu-org vulnerabilities
Products
- Dagu 5
Newest
- dagu-org dagu Dagu MCP DAG specification read bypasses path containment and workspace isolation 6.5 Medium
- dagu Dagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG 8.1 High
- dagu Dagu has a Path Traversal via `dagRunId` in Inline DAG Execution 9.1 Critical
- dagu Dagu SSE Authentication Bypass in Basic Auth Mode 7.5 High
- dagu Dagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory 7.1 High