Threats affecting pkg:github/dokploy

Dokploy versions before 0.31.1 have an authorization bypass vulnerability in the readAppMonitoring tRPC procedure. Authenticated attackers can supply arbitrary application names to access container metrics of other organizations on self-hosted multi-tenant instances. This allows unauthorized reading of CPU, memory, network I/O, and block I/O metrics for containers they do not own. The issue is fixed in version 0.31.1.