CVE-2026-33344
2 advisories.
Go/github.com/dagu-org/dagu CVE-2026-33344: high 8.1, EPSS 0.53%
Dagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG
Action: Upgrade github.com/dagu-org/dagu to 1.30.4-0.20260319093346-7d07fda8f9de or later.
go get github.com/dagu-org/dagu@v1.30.4-0.20260319093346-7d07fda8f9deAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.30.4-0.20260221021317-e2ed589105d7 | 1.30.4-0.20260319093346-7d07fda8f9de | - |
Fixed versions
| 1.30.4-0.20260319093346-7d07fda8f9de |
Sources
- osv: GHSA-ph8x-4jfv-v9v8
- https://github.com/dagu-org/dagu/security/advisories/GHSA-ph8x-4jfv-v9v8
- https://nvd.nist.gov/vuln/detail/CVE-2026-33344
- https://github.com/dagu-org/dagu/commit/7d07fda8f9de3ae73dfb081ccd0639f8059c56bb
- https://github.com/dagu-org/dagu
CVE-2026-33344 · published · modified · JSON
Go/github.com/dagu-org/dagu CVE-2026-33344: unknown, EPSS 0.53%
Dagu has an incomplete fix for CVE-2026-27598: path traversal via %2F-encoded slashes in locateDAG in github.com/dagu-org/dagu
Action: Upgrade github.com/dagu-org/dagu to 1.30.4-0.20260319093346-7d07fda8f9de or later.
go get github.com/dagu-org/dagu@v1.30.4-0.20260319093346-7d07fda8f9deAffected
| introduced | fixed | last affected |
|---|---|---|
| 1.30.4-0.20260221021317-e2ed589105d7 | 1.30.4-0.20260319093346-7d07fda8f9de | - |
Fixed versions
| 1.30.4-0.20260319093346-7d07fda8f9de |
Sources
- osv: GO-2026-4785
- https://github.com/dagu-org/dagu/security/advisories/GHSA-ph8x-4jfv-v9v8
- https://github.com/dagu-org/dagu/commit/7d07fda8f9de3ae73dfb081ccd0639f8059c56bb
CVE-2026-33344 · published · modified · JSON