dockge vulnerabilities

1 known vulnerability in dockge from Louislam. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  dockge: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-73040Aug 20, 2026Louislam

  Dockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in validate(), which requires the name to match ^[a-z0-9_-]+$, is reached from save() alone, while the path getter returns path.join(this.server.stacksDir, this.name