https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:04:05 +0000 https://cve.radiocsirt.org/vuln/cve-2026-45407 <p><strong>Affected:</strong> dokku</p> <p>Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash&#39;s touch command, which applies the default umask of 0644. This pre-creation defeats the netrc binary&#39;s built-in 0600 permission setting, leaving git credentials readable by any local user who can traverse the dokku home directory. This vulnerability is fixed in 0.38.2.</p> <p><strong>Affected:</strong> dokku</p> <p>Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash&#39;s touch command, which applies the default umask of 0644. This pre-creation defeats the netrc binary&#39;s built-in 0600 permission setting, leaving git credentials readable by any local user who can traverse the dokku home directory. This vulnerability is fixed in 0.38.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-45407