Advisories · Technology
dokku.
Every CVE that names dokku among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.0 CriticalCritical · CVSS 9+
Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS
- dokku
- Code injection
- CVSS 9.0 CriticalCritical · CVSS 9+
Dokku: OS Command Injection via app.json managed Cron
- dokku
- Command injection
- CVSS 9.0 CriticalCritical · CVSS 9+
Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add
- dokku
- Path traversal
- CVSS 9.0 CriticalCritical · CVSS 9+
Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval
- dokku
- Code injection
- CVSS 5.0 Medium
Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch
- dokku
- Hard-coded credentials
- CVSS 9.0 CriticalCritical · CVSS 9+
Dokku: OS Command Injection via App Name in Git Pre-Receive Hook
- dokku
- Command injection