Go/github.com/dagu-org/dagu: critical 9.8
Dagu affected by unauthenticated RCE via inline DAG spec in default configuration
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.30.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-6qr9-g2xw-cw92
- https://github.com/dagu-org/dagu/security/advisories/GHSA-6qr9-g2xw-cw92
- https://github.com/dagu-org/dagu
published · modified · JSON