Dapr (Linuxfoundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 387 known versions, newest CVE from 2026-07-02. Vendor: Linuxfoundation.

CVEs of Dapr

• CVE-2026-59096 - CVSS 8.2 (high), 2026-07-02: Dapr Sentry's OIDC discovery endpoint derives the issuer and jwks_uri of the /.well-known/openid-configuration document from the request Host, honoring an…
• CVE-2026-41491 - CVSS 8.1 (high), 2026-05-08: Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. From versions 1.3.0 to before 1.15.14, 1.16.0-rc.1 to…
• CVE-2023-37918 - CVSS 7.5 (high), 2023-07-21: Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability has been found in Dapr that allows…