{"api_version":"v1","generated_at":"2026-10-08T15:15:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-dapr-dapr-5d09000c8267","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/dapr","name":"dapr","next_cursor":null,"observations":[{"affected":"1.17.0; 1.18.0","affected_versions_present":true,"cve_id":"CVE-2026-59096","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59096","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-14T22:03:23.087Z","patch_url":"","primary_source":"","published":"2026-07-02T19:41:40.984Z"},{"affected":">= 1.3.0, < 1.15.14; >= 1.16.0-rc.1, < 1.16.14; >= 1.17.0-rc.1, < 1.17.5","affected_versions_present":true,"cve_id":"CVE-2026-41491","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-41491","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2026-05-08T13:58:57.832Z","patch_url":"https://github.com/dapr/dapr/pull/9589","primary_source":"","published":"2026-05-08T13:11:13.128Z"},{"affected":">= 1.13.0, < 1.13.3","affected_versions_present":true,"cve_id":"CVE-2024-35223","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-35223","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-02T03:07:46.803Z","patch_url":"","primary_source":"","published":"2024-05-23T08:47:40.289Z"},{"affected":"< 1.11.2","affected_versions_present":true,"cve_id":"CVE-2023-37918","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-37918","fixed":"An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.","last_modified":"2024-10-10T18:40:09.738Z","patch_url":"https://github.com/dapr/dapr/commit/83ca1abb11ffe34211db55dcd36d96b94252827a","primary_source":"","published":"2023-07-21T20:08:00.768Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"dapr"}}