Go/github.com/dapr/dapr CVE-2024-35223: medium 5.3, EPSS 0.44%
Dapr API Token Exposure
Action: Upgrade github.com/dapr/dapr to 1.13.3 or later.
go get github.com/dapr/dapr@v1.13.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.13.0 | 1.13.3 | - |
Fixed versions
| 1.13.3 |
Sources
- osv: GHSA-284c-x8m7-9w5h
- https://github.com/dapr/dapr/security/advisories/GHSA-284c-x8m7-9w5h
- https://nvd.nist.gov/vuln/detail/CVE-2024-35223
- https://github.com/dapr/dapr/issues/7344
- https://github.com/dapr/dapr/pull/7404
- https://github.com/dapr/dapr/commit/e0591e43d0cdfd30a2f2960dce5d9892dc98bc2c
- https://github.com/dapr/dapr
- https://github.com/dapr/dapr/releases/tag/v1.13.3
CVE-2024-35223 · published · modified · JSON