Skip to content
OpenAdvisories

Product · Finsys

dockhand

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-110256

    Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth

    Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search filter without escaping wildcard characters. Unauthenticated attackers can sub…

    Finsys dockhand