Skip to content
OpenAdvisories

Vendor

dokku

6 known vulnerabilities.

Products

dokku 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.0
    CVE-2026-45407

    Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch

    Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash's touch command, which applies the default umask of 0644. This pre-creation defeats the netrc binary's built-in 0600 permission setting, leaving git cr…

    dokku dokku