Vulnerabilities in dokku

5 results

CVE-2026-45405CRITICALDokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:addEPSS 0.3%CVE-2026-54636CRITICALDokku: OS Command Injection via app.json managed CronEPSS 0.3%CVE-2026-45406CRITICALDokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through evalEPSS 0.3%CVE-2026-45408CRITICALDokku: OS Command Injection via App Name in Git Pre-Receive HookEPSS 0.2%CVE-2026-45407MEDIUMDokku: Git Credentials in .netrc Stored World-Readable Due to Premature touchEPSS 0.1%