Mauricio Siu 5563699f71 fix(security): enforce org-scope on swarm reads and escape nodeId ...

swarm.getNodes/getNodeInfo/getNodeApps/getAppInfos accepted a caller-supplied
serverId and ran remote Docker Swarm reads against it with no organization
check, exposing another tenant's swarm topology cross-org (getContainerStats
already had the check; the others did not). getNodeInfo additionally
interpolated nodeId unescaped into 'docker node inspect ${nodeId}'.

Adds an org-ownership assertion to the four unscoped handlers and passes nodeId
through shell-quote in getNodeInfo.

Closes GHSA-jj6h-388v-9rwm

2026-07-19 21:20:47 -06:00

..

scripts

fix(server): update build paths

2024-10-26 15:48:30 -06:00

src

fix(security): enforce org-scope on swarm reads and escape nodeId

2026-07-19 21:20:47 -06:00

auth-schema2.ts

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

auth-schema.ts

Refactor user schema and update database references: rename 'users_temp' to 'user' across the codebase, update related database queries, and enhance endpoint specifications for swarm settings in various database schemas.

2025-11-08 13:54:32 -06:00

esbuild.config.ts

Refactor and update various components in the Dokploy application, enhancing functionality and fixing minor issues across multiple pages and features, including dashboard, settings, and API integrations.

2025-08-16 20:18:08 -06:00

package.json

feat(scim): implement SCIM 2.0 user provisioning support

2026-07-08 14:06:22 -06:00

tsconfig.json

chore(dependencies): update ai-sdk packages and other dependencies

2026-02-16 12:50:34 -06:00

tsconfig.server.json

Reapply "Merge branch 'canary' into kucherenko/canary"

2025-03-02 00:30:02 -06:00

tsconfig.server.no-decl.json

[autofix.ci] apply automated fixes

2026-02-16 18:51:10 +00:00