CVE-2026-72873 Dokploy: Cross-tenant Git provider secrets are disclosed to low-privileged service readers via `application.one`

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, application.one in apps/dokploy/server/api/routers/application.ts returns provider relations loaded by findApplicationById in packages/server/src/services/application.ts without redacting githubClientSecret,...

PT-2026-55491

Name of the Vulnerable Software and Affected Versions ASUS Router App affected versions not specified Description An Improper Export of Android Application Components allows a third-party application installed on the same device to send a crafted Intent, which forces the ASUS Router App to open a...