Vulnerabilities

TI-2026-74166 CVE-2026-86002

Eval injection in Dokku docker-options lets users run host commands

MEDIUM 42

Dokku is a docker-powered platform as a service.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00563 Published 2026-10-14 Fixed in 0.38.25 CWE-95

TI-2026-39465 CVE-2026-54636

MEDIUM 43

Dokku is a docker-powered PaaS.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00529 Published 2026-06-26 Fixed in 0.38.7 CWE-78

TI-2026-33194 CVE-2026-45405

MEDIUM 41

Dokku is a docker-powered PaaS.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00458 Published 2026-06-26 Fixed in 0.38.2 CWE-59

TI-2026-33195 CVE-2026-45406

MEDIUM 41

Dokku is a docker-powered PaaS.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00529 Published 2026-06-26 Fixed in 0.38.2 CWE-95

TI-2026-33196 CVE-2026-45407

LOW 24

Dokku is a docker-powered PaaS.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00125 Published 2026-06-26 Fixed in 0.38.2 CWE-522

TI-2026-33197 CVE-2026-45408

MEDIUM 41

Dokku is a docker-powered PaaS.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00419 Published 2026-06-26 Fixed in 0.38.2 CWE-78