dokku vulnerabilities

Newest CVEs

• CVE-2026-86002

  Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS

  dokku · dokku

  Critical9.0
• CVE-2026-54636

  Dokku: OS Command Injection via app.json managed Cron

  dokku · dokku

  Critical9.0
• CVE-2026-45405

  Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add

  dokku · dokku

  Critical9.0
• CVE-2026-45406

  Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval

  dokku · dokku

  Critical9.0
• CVE-2026-45407

  Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch

  dokku · dokku

  Medium5.0
• CVE-2026-45408

  Dokku: OS Command Injection via App Name in Git Pre-Receive Hook

  dokku · dokku

  Critical9.0