github.com/amir20/dozzle vulnerabilities (Go)

6 vulnerabilities.

• github.com/amir20/dozzle Go Dozzle label filters do not restrict container event and statistics streams CVE-2026-62286 Fix available 4.3 MediumSeptember 24, 2026
• github.com/amir20/dozzle Go Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher CVE-2026-73087 Fix available 2.3 LowAugust 11, 2026
• github.com/amir20/dozzle Go Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy) CVE-2026-45298 8.6 HighMay 18, 2026
• github.com/amir20/dozzle Go Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication CVE-2026-44985 8.7 HighMay 11, 2026
• github.com/amir20/dozzle Go Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access CVE-2026-24740 Fix available 8.7 HighJanuary 27, 2026
• github.com/amir20/dozzle Go Dozzle uses unsafe hash for passwords CVE-2024-47182 Fix available 4.8 MediumSeptember 27, 2024