dominikdoesdev

4 ms·

1. 1.▲
   Stealing from Google(taqib.dev)

   65 points by dominikdoesdev 1y ago|29 comments
2. 2.▲
   by dominikdoesdev 1y ago

   After re-reporting the vulnerability through GitHub, the maintainer of Dokploy has published a fix in version v0.24.3. Read more here: https://github.com/Dokploy/dokploy/security/advisories/GHSA-...
3. 3.▲
   by dominikdoesdev 1y ago

   Oh, wow, that actually sucks. I had a similar issue with my self-hosted instance. I couldn't access it because it crashed and never auto-restarted. Luckily, our services were still running, so it wasn't as bad as your incident. I
4. 4.▲
   by dominikdoesdev 1y ago

   Yea, I'm not sure why the developer refuses to fix it. You can probably do a lot more than just read environment variables too.
5. 5.▲
   Preview Deployment Vulnerability in Dokploy(rivo.gg)

   13 points by dominikdoesdev 1y ago|6 comments
6. 6.▲
   by dominikdoesdev 1y ago

   Looks cool, but usually permissions management is done by auth, how does this work with autumn?