CVE-2026-121587

Coolify versions prior to 4.1.1 are vulnerable to an information disclosure flaw. Unauthenticated attackers can enumerate application names across all teams by interacting with manual GitHub , GitLab , Bitbucket , and Gitea webhooks. The vulnerability is caused by unescaped LIKE wildcards , where...