What’s Vulnerable › Products

amir20 dozzle vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your amir20 dozzle version is affected

Latest amir20 dozzle vulnerabilities

• CVE-2026-102332 — Dozzle before 11.1.2 Path Traversal via Log ZIP Download (CVSS 6.1)
• CVE-2026-62286 — Dozzle label filters do not restrict container event and statistics streams (CVSS 4.3)
• CVE-2026-73087 — Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher (CVSS 2.3)
• CVE-2026-45298 — Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy) (CVSS 8.6)
• CVE-2026-44985 — Dozzle: Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpoints bypasses authentication (CVSS 9.6)
• CVE-2026-24740 — Dozzle Agent Label-Based Access Control Bypass Allows Unauthorized Container Shell Access (CVSS 9.9)
• CVE-2024-47182 — Dozzle uses unsafe hash for passwords (CVSS 7.5)