All 5 CVE vulnerabilities found in dokku, with AI-generated Chinese analysis, references, and POCs.
Vendor: dokku
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-54636 | Dokku: OS Command Injection via app.json managed Cron CWE-78 | 9.0 | Critical | 2026-06-26 |
| CVE-2026-45405 | Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add CWE-59 | 9.0 | Critical | 2026-06-26 |
| CVE-2026-45406 | Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval CWE-95 | 9.0 | Critical | 2026-06-26 |
| CVE-2026-45407 | Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch CWE-522 | 5.0 | Medium | 2026-06-26 |
| CVE-2026-45408 | Dokku: OS Command Injection via App Name in Git Pre-Receive Hook CWE-78 | 9.0 | Critical | 2026-06-26 |
All 5 known CVE vulnerabilities affecting dokku with full Chinese analysis, references, and POCs where available.