https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 08:12:08 +0000 https://cve.radiocsirt.org/vuln/cve-2026-45663 <p><strong>Affected:</strong> dokploy</p> <p>Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.1 and earlier, a command injection vulnerability exists in the Docker file upload functionality. When an authenticated user uploads a file to a container, the destinationPath parameter is not properly sanitized and is directly interpolated into a shell command string. By including shell metacharacters such as ; or &#34;, an attacker can escape the intended docker cp command and execute arbitrary OS commands on the Dokploy host.</p> <p><strong>Affected:</strong> dokploy</p> <p>Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.29.1 and earlier, a command injection vulnerability exists in the Docker file upload functionality. When an authenticated user uploads a file to a container, the destinationPath parameter is not properly sanitized and is directly interpolated into a shell command string. By including shell metacharacters such as ; or &#34;, an attacker can escape the intended docker cp command and execute arbitrary OS commands on the Dokploy host.</p> https://cve.radiocsirt.org/vuln/cve-2026-45663