Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/03/13 7:32 p.m.43 views

CVE-2026-31886 Dagu has a Path Traversal via `dagRunId` in Inline DAG Execution

Dagu is a workflow engine with a built-in Web user interface. Prior to 2.2.4, the dagRunId request field accepted by the inline DAG execution endpoints is passed directly into filepath.Join to construct a temporary directory path without any format validation. Go's filepath.Join resolves...

9.1CVSS0.00421EPSS
SaveExploits1References2
Rows per page
Query Builder