important · Edge — Containers
A delegated Dokku app user can escape Docker options into host commands as the dokku account.
Affects
Dokku, a self-hosted Docker-based platform-as-a-service running on Linux servers.
An app-scoped user who may set Docker options can store command substitution that Bash eval expands during a build, deployment or run operation.
Detail and 2 sources
Dokku identifies the affected range and a fixed release.