github.com/amir20/dozzle
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Dozzle label filters do not restrict container event and statistics streams | github.com/amir20/dozzle | Go | Medium | Fix reported | |
| Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher | github.com/amir20/dozzle | Go | Low | Fix reported | |
| Dozzle's Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpointsbypasses authentication | github.com/amir20/dozzle | Go | High | No fix reported | |
| Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy) | github.com/amir20/dozzle | Go | High | No fix reported | |
| Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access | github.com/amir20/dozzle | Go | High | Fix reported | |
| Dozzle uses unsafe hash for passwords | github.com/amir20/dozzle | Go | Low | Fix reported |