Lucene search
+L

2 matches found

OSV
OSV
added 2026/07/07 3:28 a.m.4 views

CVE-2026-34158 Coolify: Command injection via single-quote breakout in Docker Compose custom commands

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, the executeInDocker helper wraps user-controlled commands in single quotes without escaping embedded single quotes. Attackers who can edit application settings can inject a...

8.8CVSS6.2AI score0.00354EPSS
SaveExploits0References3
Rows per page
Query Builder