dokploy/apps
Mauricio Siu b24202e69b fix(security): escape dockerImage in database service remote docker pull
The deploy functions for postgres/mysql/mariadb/mongo/redis/libsql interpolated
the user-settable dockerImage field unquoted into 'docker pull ${dockerImage}'
executed via execAsyncRemote (SSH) on the remote server path. Now passed through
shell-quote. The local path already used pullImage() (execFile-based) and is
unaffected.

Closes GHSA-6jrh-8qmg-jj3p
2026-07-19 22:45:31 -06:00
..
api Feat/tailwind v4 shadcn update (#4706) 2026-06-30 15:45:23 -06:00
dokploy fix(security): escape dockerImage in database service remote docker pull 2026-07-19 22:45:31 -06:00
monitoring fix: enhance container metrics query to support wildcard matching for container names 2026-03-08 16:16:45 -06:00
schedules Feat/tailwind v4 shadcn update (#4706) 2026-06-30 15:45:23 -06:00