Finsys Dockhand vulnerabilities

• finsys dockhand Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook CVE-2026-121449 7.1 HighNovember 3, 2026
• finsys dockhand Dockhand before 1.0.54 Path Traversal via Stack Environment Routes CVE-2026-121448 8.7 HighNovember 3, 2026
• finsys dockhand Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content CVE-2026-113354 7.1 HighOctober 20, 2026
• finsys dockhand Dockhand: Unauthenticated container exec via WebSocket upgrade CVE-2026-57169 9.6 CriticalOctober 16, 2026
• finsys dockhand Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth CVE-2026-110256 6.3 MediumOctober 13, 2026
• finsys dockhand Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint CVE-2026-110255 8.4 HighOctober 13, 2026
• finsys dockhand Dockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory CVE-2026-110254 5.3 MediumOctober 13, 2026
• finsys dockhand Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check CVE-2026-110130 10.0 CriticalOctober 13, 2026
• finsys dockhand Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation CVE-2026-110112 9.2 CriticalOctober 13, 2026
• finsys dockhand Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints CVE-2026-53988 9.2 CriticalSeptember 29, 2026
• finsys dockhand Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint CVE-2026-53989 5.3 MediumSeptember 29, 2026