Mauricio Siu df2779eaeb fix(security): escape swarm nodeId and registry tag in cluster commands ...

- cluster.removeWorker: input.nodeId (z.string(), no regex) was interpolated raw
  into 'docker node update/rm ${nodeId}' — now shell-quoted.
- swarm image upload (getRegistryCommands): registryTag / imageName were
  interpolated raw into 'docker tag'/'docker push' and an echo. registryTag is
  built from username and imagePrefix, which have no schema regex, so it was
  injectable — now shell-quoted. (The docker login already used
  safeDockerLoginCommand, so credentials were already safe.)
- gpu-setup: nodeId (derived from 'docker info', not user input) escaped as
  defense-in-depth.

Closes GHSA-4mfc-grxw-6858, GHSA-hfwh-69ch-gv47, GHSA-prwq-2mcm-mvhr

2026-07-19 23:34:18 -06:00

..

scripts

fix(server): update build paths

2024-10-26 15:48:30 -06:00

src

fix(security): escape swarm nodeId and registry tag in cluster commands

2026-07-19 23:34:18 -06:00

auth-schema2.ts

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

auth-schema.ts

Refactor user schema and update database references: rename 'users_temp' to 'user' across the codebase, update related database queries, and enhance endpoint specifications for swarm settings in various database schemas.

2025-11-08 13:54:32 -06:00

esbuild.config.ts

Refactor and update various components in the Dokploy application, enhancing functionality and fixing minor issues across multiple pages and features, including dashboard, settings, and API integrations.

2025-08-16 20:18:08 -06:00

package.json

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

tsconfig.json

chore(dependencies): update ai-sdk packages and other dependencies

2026-02-16 12:50:34 -06:00

tsconfig.server.json

Reapply "Merge branch 'canary' into kucherenko/canary"

2025-03-02 00:30:02 -06:00

tsconfig.server.no-decl.json

[autofix.ci] apply automated fixes

2026-02-16 18:51:10 +00:00