—
GO-2026-5101
Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy) in github.com/amir20/dozzle
Details
Dozzle: Pre-auth SSRF with response-body reflection via POST /api/notifications/test-webhook (default no-auth deploy) in github.com/amir20/dozzle
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/amir20/dozzle
Introduced in:
0 No fixed version published yet for github.com/amir20/dozzle (go modules). Pin to a known-safe version or switch to an alternative.