Low severityNVD Advisory· Published Aug 11, 2026· Updated Sep 9, 2026
CVE-2026-73087
CVE-2026-73087
Description
Dozzle is a realtime log viewer for docker containers. From 10.5.2 until 10.6.15, the isBlockedIP SSRF guard in internal/notification/dispatcher/webhook.go, used by safeDialContext for webhook notification URLs, does not inspect IPv4 addresses embedded in 6to4, NAT64, Teredo, or IPv4-compatible IPv6 addresses, allowing an authenticated user to reach loopback or link-local targets that the guard intends to block. This issue is fixed in version 10.6.15.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/amir20/dozzleGo | < 1.29.1-0.20260804193351-8cf7ccd5ee04 | 1.29.1-0.20260804193351-8cf7ccd5ee04 |
Affected products
2Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-p2w3-6x73-2f6xghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-73087ghsaADVISORY
- github.com/amir20/dozzle/commit/8cf7ccd5ee041ecaea92b49951793d4d2393761fnvdWEB
- github.com/amir20/dozzle/pull/4887nvdWEB
- github.com/amir20/dozzle/releases/tag/v10.6.15nvdWEB
- github.com/amir20/dozzle/security/advisories/GHSA-p2w3-6x73-2f6xnvdWEB
News mentions
0No linked articles in our index yet.