—
GO-2024-2879
Dapr API Token Exposure in github.com/dapr/dapr
Quick fix
GO-2024-2879 — github.com/dapr/dapr: upgrade to the fixed version with the command below.
go get github.com/dapr/dapr@v1.13.3Details
Dapr API Token Exposure in github.com/dapr/dapr
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/dapr/dapr/security/advisories/GHSA-284c-x8m7-9w5h[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2024-35223[ADVISORY]
- https://github.com/dapr/dapr/commit/e0591e43d0cdfd30a2f2960dce5d9892dc98bc2c[FIX]
- https://github.com/dapr/dapr/pull/7404[FIX]
- https://github.com/dapr/dapr/issues/7344[REPORT]
- https://github.com/dapr/dapr/releases/tag/v1.13.3[WEB]