Amirraminfar Dozzle vulnerabilities
- amir20 dozzleDozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy)8.6 High
- amir20 dozzleDozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication8.7 High
- amir20 dozzleDozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access8.7 High
- amir20 dozzleDozzle uses unsafe hash for passwords4.8 Medium