Dokploy
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 40 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 7, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root
Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one
Dokploy Settings application.ts writeTraefikConfigInPath path traversal
Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryById
Dokploy: Remote Code Execution via volume-backup
Dokploy: Command Injection via Compose Custom Command
Dokploy: WebSocket Terminal Missing Service-Level Access Control
Dokploy: Command Injection via dockerImage in buildRemoteDocker
Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*
Dokploy: Command Injection via Unescaped Git URL in Clone Commands
Monitor Dokploy in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.