VDB
KO

GO-2026-5242

Dapr: Service Invocation path traversal ACL bypass in github.com/dapr/dapr

Details

Dapr: Service Invocation path traversal ACL bypass in github.com/dapr/dapr

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/dapr/dapr
Introduced in: 1.3.0 Fixed in: 1.15.14
Fix go get github.com/dapr/dapr@v1.15.14

References