CVE-2026-121449

Versions of Dockhand from 1.0.47 before 1.0.54 are vulnerable to a Secret Disclosure flaw via the Git stack webhook . The root cause is that the deployStack() function attaches resolved secret values to its result as resolvedSecrets, which the Git-stack routes then return unfiltered. Attackers wh...

CVE-2026-121449 Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook

Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack attaches resolved secret values to its result as resolvedSecrets, which Git-stack routes return unfiltered. Holders of a stack's webhook secret or users with stacks:start permission can trigger the Git stack...