Lucene search
+L

1 matches found

OSV
OSV
added 3 days ago8 views

CVE-2026-72873 Dokploy: Cross-tenant Git provider secrets are disclosed to low-privileged service readers via `application.one`

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, application.one in apps/dokploy/server/api/routers/application.ts returns provider relations loaded by findApplicationById in packages/server/src/services/application.ts without redacting githubClientSecret,...

6.5CVSS5.4AI score
SaveExploits0References6
Rows per page
Query Builder