Go/github.com/amir20/dozzle CVE-2026-44985: critical 9.6, EPSS 0.21%

Dozzle's Cross-Site WebSocket Hijacking (CSWSH) on exec/attach endpointsbypasses authentication in github.com/amir20/dozzle

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5449
• nvd: CVE-2026-44985
• https://github.com/amir20/dozzle/security/advisories/GHSA-j643-x8pv-8m67
• https://github.com/amir20/dozzle/releases/tag/v10.5.2

CVE-2026-44985 · published 2026-06-25T22:34:31Z · modified 2026-06-25T23:01:14.563568268Z · JSON