CVE-2026-121449

Versions of Dockhand from 1.0.47 before 1.0.54 are vulnerable to a Secret Disclosure flaw via the Git stack webhook . The root cause is that the deployStack() function attaches resolved secret values to its result as resolvedSecrets, which the Git-stack routes then return unfiltered. Attackers wh...