Hacker News Reader

dominikdoesdevon Preview Deployment Vulnerability in Dokploy

After re-reporting the vulnerability through GitHub, the maintainer of Dokploy has published a fix in version v0.24.3. Read more here: https://github.com/Dokploy/dokploy/security/advisories/GHSA-...

dominikdoesdevon Preview Deployment Vulnerability in Dokploy

Oh, wow, that actually sucks. I had a similar issue with my self-hosted instance. I couldn't access it because it crashed and never auto-restarted. Luckily, our services were still running, so it wasn't as bad as your incident.

I really loved Dokploys UI and that it was fully open source, so it sucks to see them not care about the security of their products. I even sponsored them for a few months.

How has EasyPanel been for you so far? Is it worth checking out over Coolify, for example?

dominikdoesdevon Preview Deployment Vulnerability in Dokploy

Yea, I'm not sure why the developer refuses to fix it. You can probably do a lot more than just read environment variables too.

dominikdoesdevon Show HN: Autumn – Open-source infra over Stripe

Looks cool, but usually permissions management is done by auth, how does this work with autumn?