Dapr

4 CVEs across 1 Dapr products. Browse Dapr vulnerabilities, severities, and proof-of-concept exploits.

Dapr products with known CVEs

ProductCVEs
Dapr4
Dapr CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-59096High7.52026-07-02Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.well-known/openid-configuration document from the request Host, honoring an atta…
CVE-2026-41491High8.12026-05-08Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. From versions 1.3.0 to before 1.15.14, 1.16.0-rc.1 to be…
CVE-2024-35223Medium5.32024-05-23Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. Dapr sends the app token of the invoker app instead of t…
CVE-2023-37918Medium6.82023-07-21Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability has been found in Dapr that allows bypas…