Skip to content
OpenAdvisories

Package · Go

github.com/amir20/dozzle

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-62286

    Dozzle label filters do not restrict container event and statistics streams

    Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go applies a restricted user's label filter to container lists but not to the container-stat and container-event channels returned by GET /api/events/s…

    amir20 dozzle github.com/amir20/dozzle Go
  • Medium 4.8
    CVE-2024-47182

    Dozzle uses unsafe hash for passwords

    Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches to bcrypt, a more appropriate hash for passwords, in version…

    amir20 dozzle github.com/amir20/dozzle Go