<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: finsys-dockhand</title><description>Every new CVE for finsys-dockhand.</description><link>https://agentprime.io/</link><item><title>CVE-2026-121449: Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook</title><link>https://agentprime.io/advisories/CVE-2026-121449/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-121449/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 14:28:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-121448: Dockhand before 1.0.54 Path Traversal via Stack Environment Routes</title><link>https://agentprime.io/advisories/CVE-2026-121448/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-121448/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 03 Nov 2026 14:28:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-113354: Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content</title><link>https://agentprime.io/advisories/CVE-2026-113354/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-113354/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Oct 2026 10:41:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-57169: Dockhand: Unauthenticated container exec via WebSocket upgrade</title><link>https://agentprime.io/advisories/CVE-2026-57169/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-57169/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 16:13:20 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-110256: Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth</title><link>https://agentprime.io/advisories/CVE-2026-110256/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110256/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:05:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110255: Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-110255/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110255/</guid><description>CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:05:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110254: Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory</title><link>https://agentprime.io/advisories/CVE-2026-110254/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110254/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:05:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110130: Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check</title><link>https://agentprime.io/advisories/CVE-2026-110130/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110130/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:05:27 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-110112: Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation</title><link>https://agentprime.io/advisories/CVE-2026-110112/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110112/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 19:05:27 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-53988: Dockhand &lt; 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints</title><link>https://agentprime.io/advisories/CVE-2026-53988/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53988/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 19:55:59 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-53989: Dockhand &lt; 1.0.36 Open Redirect via OIDC Initiation Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-53989/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-53989/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 19:42:43 GMT</pubDate><category>CVE</category></item></channel></rss>