| id: GO-2024-2879 |
| modules: |
| - module: github.com/dapr/dapr |
| versions: |
| - introduced: 1.13.0 |
| - fixed: 1.13.3 |
| vulnerable_at: 1.13.2 |
| summary: Dapr API Token Exposure in github.com/dapr/dapr |
| cves: |
| - CVE-2024-35223 |
| ghsas: |
| - GHSA-284c-x8m7-9w5h |
| references: |
| - advisory: https://github.com/dapr/dapr/security/advisories/GHSA-284c-x8m7-9w5h |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2024-35223 |
| - fix: https://github.com/dapr/dapr/commit/e0591e43d0cdfd30a2f2960dce5d9892dc98bc2c |
| - fix: https://github.com/dapr/dapr/pull/7404 |
| - report: https://github.com/dapr/dapr/issues/7344 |
| - web: https://github.com/dapr/dapr/releases/tag/v1.13.3 |
| source: |
| id: GHSA-284c-x8m7-9w5h |
| created: 2024-05-24T19:47:17.904676322Z |
| review_status: UNREVIEWED |
