dokku

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

dokku records in CISA KEV

No dokku vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dokku 5 records MEDIUM

Records

5 records in Dokku · all components

TI-2026-39465 CVE-2026-54636

Dokku: OS Command Injection via app.json managed Cron

MEDIUM 43

Dokku is a docker-powered PaaS.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00529 Published 2026-06-26 Fixed in 0.38.7 CWE-78

TI-2026-33197 CVE-2026-45408

Dokku: OS Command Injection via App Name in Git Pre-Receive Hook

MEDIUM 41

Dokku is a docker-powered PaaS.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00419 Published 2026-06-26 Fixed in 0.38.2 CWE-78

TI-2026-33195 CVE-2026-45406

Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval

MEDIUM 41

Dokku is a docker-powered PaaS.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00529 Published 2026-06-26 Fixed in 0.38.2 CWE-95

TI-2026-33194 CVE-2026-45405

Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add

MEDIUM 41

Dokku is a docker-powered PaaS.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00458 Published 2026-06-26 Fixed in 0.38.2 CWE-59

TI-2026-33196 CVE-2026-45407

Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch

LOW 24

Dokku is a docker-powered PaaS.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00125 Published 2026-06-26 Fixed in 0.38.2 CWE-522

Open these records in search →