DO
Product
dockhand
9
CVEs
0
On KEV
10.0
Max CVSS
9
New 30D
Severity mix
Critical 3High 2Medium 3Low 1
Watch
Add dockhand to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-110130 | 10.0 | Oct 13 | Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check Affected: before 1.0.45 |
| CVE-2026-53988 | 10.0 | Sep 29 | Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints Affected: before 1.0.40 |
| CVE-2026-57169 | 9.6 | Oct 16 | Dockhand: Unauthenticated container exec via WebSocket upgrade Affected: < 1.0.34 |
| CVE-2026-110255 | 8.5 | Oct 13 | Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint Affected: before 1.0.43 |
| CVE-2026-110112 | 8.1 | Oct 13 | Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation Affected: before 1.0.50 |
| CVE-2026-113354 | 6.5 | Oct 20 | Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content Affected: before 1.0.46 |
| CVE-2026-53989 | 4.7 | Sep 29 | Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint Affected: before 1.0.36 |
| CVE-2026-110254 | 4.3 | Oct 13 | Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory Affected: before 1.0.45 |
| CVE-2026-110256 | 3.7 | Oct 13 | Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth Affected: before 1.0.19 |
Showing 9