dokku records

5 published records for vendor dokku.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2026-54636No exploit	Dokku: OS Command Injection via app.json managed Crondokku · dokku · CWE-78 RCE Command injection	Critical9.9	—	0.5%	Jun 26, 2026
36Monitor	CVE-2026-45408No exploit	Dokku: OS Command Injection via App Name in Git Pre-Receive Hookdokku · dokku · CWE-78 RCE Command injection	Critical9.0	—	0.4%	Jun 26, 2026
35Monitor	CVE-2026-45406No exploit	Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through evaldokku · dokku · CWE-95 RCE	High8.8	—	0.5%	Jun 26, 2026
35Monitor	CVE-2026-45405No exploit	Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:adddokku · dokku · CWE-59	High8.8	—	0.4%	Jun 26, 2026
22Monitor	CVE-2026-45407No exploit	Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touchdokku · dokku · CWE-522 Info leak	Medium5.5	—	0.1%	Jun 26, 2026

CVE-2026-54636
39Monitor
Dokku: OS Command Injection via app.json managed Cron
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Command injection
dokku · dokkuJun 26, 2026
CVE-2026-45408
36Monitor
Dokku: OS Command Injection via App Name in Git Pre-Receive Hook
CriticalCVSS 9.0No exploitEPSS 0%
- RCE
- Command injection
dokku · dokkuJun 26, 2026
CVE-2026-45406
35Monitor
Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval
HighCVSS 8.8No exploitEPSS 0%
- RCE
dokku · dokkuJun 26, 2026
CVE-2026-45405
35Monitor
Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add
HighCVSS 8.8No exploitEPSS 0%
dokku · dokkuJun 26, 2026
CVE-2026-45407
22Monitor
Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch
MediumCVSS 5.5No exploitEPSS 0%
- Info leak
dokku · dokkuJun 26, 2026