https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 13:45:18 +0000 https://db.gcve.eu/vuln/cve-2026-128328 <p><strong>Affected:</strong> dokploy</p> <p>Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization members to list tracked files of any git repository by supplying an arbitrary repoPath to patch.readRepoDirectories. Attackers with read access to one service can enumerate file and directory names of other tenants&#39; application and compose source trees on the host or managed servers.</p> <p><strong>Affected:</strong> dokploy</p> <p>Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization members to list tracked files of any git repository by supplying an arbitrary repoPath to patch.readRepoDirectories. Attackers with read access to one service can enumerate file and directory names of other tenants&#39; application and compose source trees on the host or managed servers.</p> https://db.gcve.eu/vuln/cve-2026-128328