—

GO-2026-5242

Dapr: Service Invocation path traversal ACL bypass in github.com/dapr/dapr

Quick fix

GO-2026-5242 — github.com/dapr/dapr: upgrade to the fixed version with the command below.

go get github.com/dapr/dapr@v1.15.14

Details

Dapr: Service Invocation path traversal ACL bypass in github.com/dapr/dapr

Enter the version of the package you're using.

Introduced in: 1.3.0Fixed in: 1.15.14

Fixgo get github.com/dapr/dapr@v1.15.14