Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
dagu-org records in CISA KEVNo dagu-org vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 72
Dagu is a workflow engine with a built-in Web user interface.
CVSS 3.1CRITICAL 9.1· Network · Low privileges · No interaction · EPSS 0.00438 · Published 2026-03-13 · Fixed in 2.2.4 CWE-22
Priority HIGH 66
Dagu is a workflow engine with a built-in Web user interface.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00827 · Published 2026-03-13 · Fixed in 2.2.4 CWE-306
Priority MEDIUM 64
Dagu is a workflow engine with a built-in Web user interface.
CVSS 4.0HIGH 7.1· Network · No auth · User interaction · EPSS 0.00649 · Published 2026-02-25 · No fix listed CWE-22
Priority LOW 38
Dagu is a workflow engine with a built-in Web user interface.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00487 · Published 2026-03-24 · Fixed in 2.3.1, 1.30.4-0.20260319093346-7d07fda8f9de CWE-22
Open these records in search →