Dokploy
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 51 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 7, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Dokploy before 0.31.1 OS Command Injection via Compose Backup serviceName
Dokploy 0.28.0 before 0.31.1 Path Traversal via patch.readRepoDirectories repoPath
Dokploy 0.28.0 before 0.31.1 Path Traversal via patch.readRepoFile
Dokploy 0.28.0 before 0.31.1 Path Traversal via patch.readRepoFile
Dokploy 0.28.0 before 0.31.1 Path Traversal via patch.readRepoDirectories repoPath
Dokploy < 0.31.1 Broken Access Control via readAppMonitoring
Dokploy < 0.31.1 Broken Access Control via readAppMonitoring
Dokploy: the validator allows the backtick — a member's database password change is host RCE, 9.9 on the vendor's own vector (v0.31.0, live-proven)
Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router
Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router
Monitor Dokploy in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.