dominikdoesdev
Re:Preview Deployment Vulnerability in Dokploy
on Monday July 14, 2025 @08:25AM (#44559351)
After re-reporting the vulnerability through GitHub, the maintainer of Dokploy has published a fix in version v0.24.3. Read more here: https://github.com/Dokploy/dokploy/security/advisories/GHSA-...
Re:Preview Deployment Vulnerability in Dokploy
on Sunday July 13, 2025 @08:50AM (#44550073)
Oh, wow, that actually sucks. I had a similar issue with my self-hosted instance. I couldn't access it because it crashed and never auto-restarted. Luckily, our services were still running, so it wasn't as bad as your incident.
I really loved Dokploys UI and that it was fully open source, so it sucks to see them not care about the security of their products. I even sponsored them for a few months.
How has EasyPanel been for you so far? Is it worth checking out over Coolify, for example?
Re:Preview Deployment Vulnerability in Dokploy
on Sunday July 13, 2025 @08:43AM (#44550017)
Yea, I'm not sure why the developer refuses to fix it. You can probably do a lot more than just read environment variables too.
Preview Deployment Vulnerability in Dokploy
Re:Show HN: Autumn – Open-source infra over Stripe
on Tuesday June 24, 2025 @02:00PM (#44368930)
Looks cool, but usually permissions management is done by auth, how does this work with autumn?