CVE-2026-121449

Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack attaches resolved secret values to its result as resolvedSecrets, which Git-stack routes return unfiltered. Holders of a stack's webhook secret or users with stacks:start permission can trigger the Git stack...

EUVD-2026-115871

Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack attaches resolved secret values to its result as resolvedSecrets, which Git-stack routes return unfiltered. Holders of a stack's webhook secret or users with stacks:start permission can trigger the Git stack...

CVE-2026-121449: Finsys dockhand: Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack() attaches resolved secret…

Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack attaches resolved secret values to its result as resolvedSecrets, which Git-stack routes return unfiltered. Holders of a stack's webhook secret or users with stacks:start permission can trigger the Git stack...