Threats tagged 'ghsa-9vvm-xvr2-mhx6'

Dockhand versions prior to 1.0.54 contain a path traversal vulnerability that allows authenticated users to read, overwrite, and delete .env files outside the intended stack root directory. This is achieved by double-encoding the stack name in API requests, enabling unauthorized access to sensitive environment files and potential manipulation of deployment variables.