Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/13 3:40 p.m.19 views

Dagu: Path Traversal via `dagRunId` in Inline DAG Execution

Vulnerability Summary The dagRunId request field accepted by the inline DAG execution endpoints is passed directly into filepath.Join to construct a temporary directory path without any format validation. Go's filepath.Join resolves .. segments lexically, so a caller can supply a value such as...

9.1CVSS6.2AI score0.00421EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder