Amir20 vulnerabilities
We track 4 vulnerabilities in Amir20 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on May 26, 2026.
Latest Amir20 vulnerabilities
- 8.6 High severity
dozzle: Server-Side Request Forgery
Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, in a default dozzle deploy (the documented quickstart, no DOZZLE_AUTH_PROVIDER set), POST /api/notifications/test-webhook is reachable without authentication and forwards an attacker-contr
- 9.6 Critical severity
dozzle: Origin Validation Error
Dozzle is a realtime log viewer for docker containers. Prior to 10.5.2, he WebSocket upgrader for the /exec and /attach endpoints uses CheckOrigin: func(r *http.Request) bool { return true }, accepting upgrade requests from any origin. Combined with the JWT co
- 9.9 Critical severity
dozzle: Incorrect Authorization
Dozzle is a realtime log viewer for docker containers. Prior to version 9.0.3, a flaw in Dozzle’s agent-backed shell endpoints allows a user restricted by label filters (for example, `label=env=dev`) to obtain an interactive root shell in out‑of‑scope containe
- 7.5 High severity
dozzle: Inadequate Encryption Strength
Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches to bcrypt, a more appropriate hash for passwords, in version