DokployProduct update

Dokploy · v0.29.13

Dokploy v0.29.13 is a large security release that fixes OS command injection in git clone, Docker build and pull, database deploys and backup/restore, Compose paths, Swarm node IDs and registry tests, along with cross-org IDOR bugs that exposed git provider credentials and SSH private keys. It also adds missing authorization checks to the Docker and terminal WebSocket handlers, host schedules and the GitHub App setup callback, which had let a member escalate to root and an unauthenticated caller write into another organization. Separately, email verification is now on for SSO and user creation, and organizations can define their own AI provider presets.

GitHub ReleasesJul 22, 20261 min read