All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-73087
LOWpublished 2026-08-11 17:19 UTC · 1 day ago · modified 2026-08-11 20:18 UTC
2.3
CVSS / 10
// description
Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal/notification/dispatcher/webhook.go, used by safeDialContext for webhook notification URLs, does not inspect IPv4 addresses embedded in 6to4, NAT64, Teredo, or IPv4-compatible IPv6 addresses, allowing an authenticated user to reach loopback or link-local targets that the guard intends to block. This issue is fixed in version 10.6.15.
// weaknesses (CWE)
- CWE-918