10 matches found
CVE-2026-72873
Dokploy prior to v0.29.13 exposes Git provider secrets (githubClientSecret, githubPrivateKey, githubWebhookSecret) to users with only service:read by returning provider relations in application.one without redaction. Affected code paths: application.one in apps/dokploy/server/api/routers/applicat...
6.5CVSS5.3AI score0.00332EPSS
SaveExploits0References4
20