Dapr vulnerabilities

Products

• Dapr 4

Newest

• dapr Dapr - OIDC Discovery Issuer and JWKS URI Injection via Unvalidated X-Forwarded-Host CVE-2026-59096 8.2 HighJuly 2, 2026
• dapr Dapr: Service Invocation path traversal ACL bypass CVE-2026-41491 Fix available 8.1 HighApril 17, 2026
• dapr Dapr API Token Exposure CVE-2024-35223 Fix available 5.3 MediumMay 22, 2024
• dapr API token authentication bypass in HTTP endpoints in Dapr CVE-2023-37918 Fix available 6.8 MediumJuly 21, 2023