Re:Preview Deployment Vulnerability in Dokploy
by clandad on Sunday July 13, 2025 @06:21AM
(#44549120)
Hard to believe they left such an obvious security hole open for 6 months. Any random PR can access environment variables? That's concerning for a project with 20k+ stars.
[ Parent
| on HN ]
Re:Preview Deployment Vulnerability in Dokploy
by dominikdoesdev on Sunday July 13, 2025 @08:43AM
(#44550017)
Yea, I'm not sure why the developer refuses to fix it. You can probably do a lot more than just read environment variables too.