https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:19:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-330720 EUVD-2026-330720 https://cve.radiocsirt.org/vuln/euvd-2026-330720 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45407 <p>Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash&#39;s touch command, which applies the default umask of 0644. This pre-creation defeats the netrc binary&#39;s built-in 0600 permission setting, leaving git credentials readable by any local user who can traverse the dokku home directory. This vulnerability is fixed in 0.38.2.</p> <p>Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash&#39;s touch command, which applies the default umask of 0644. This pre-creation defeats the netrc binary&#39;s built-in 0600 permission setting, leaving git credentials readable by any local user who can traverse the dokku home directory. This vulnerability is fixed in 0.38.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-45407