dokku vulnerabilities
6 published CVEs name dokku among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 5Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-86002
Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS
dokku · dokku
Critical9.0 - CVE-2026-54636
Dokku: OS Command Injection via app.json managed Cron
dokku · dokku
Critical9.0 - CVE-2026-45405
Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add
dokku · dokku
Critical9.0 - CVE-2026-45406
Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval
dokku · dokku
Critical9.0 - CVE-2026-45407
Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch
dokku · dokku
Medium5.0 - CVE-2026-45408
Dokku: OS Command Injection via App Name in Git Pre-Receive Hook
dokku · dokku
Critical9.0