Dozzle before 11.1.2 Path Traversal via Log ZIP Download

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-102332 · Microsoft / collected KEV context

cve-program · CVE-2026-102332

• https://github.com/amir20/dozzle/pull/5242
• https://github.com/amir20/dozzle/commit/bc07db73dd84ce2cb939b744e983a8cfdf29c644
• https://github.com/amir20/dozzle/releases/tag/v11.1.2
• https://github.com/amir20/dozzle/blob/v11.1.1/internal/web/download.go#L141-L146
• https://github.com/amir20/dozzle/blob/v11.1.1/internal/container/docker/client.go#L610-L614
• https://github.com/amir20/dozzle
• https://www.vulncheck.com/advisories/dozzle-before-11.1.2-path-traversal-via-log-zip-download

No related operational record is retained in the current change model.