christianandClaude Opus 5.5 5c661a4805 Mitigate PHP RCE advisories GHSA-6wmf-4rv5-p3rp / GHSA-w8hw-w9fx-j79w ...

Stopgap for the PHP RCE advisories GHSA-6wmf-4rv5-p3rp and GHSA-w8hw-w9fx-j79w
(2026-10-21): disable session.upload_progress (and fatal_error_backtraces on
PHP 8.5). Upload progress should stay off even after patched PHP is deployed.

Bump the EOL Alpine base to 3.24 so php83 receives the 8.3.36 security
release. Alpine 3.24 no longer ships /usr/bin/php for php83, so add the link.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-21 17:43:59 +02:00

..

Caddyfile

container and dev preparations

2025-06-10 10:39:47 +02:00

Dockerfile

Mitigate PHP RCE advisories GHSA-6wmf-4rv5-p3rp / GHSA-w8hw-w9fx-j79w

2026-10-21 17:43:59 +02:00

dokploy-compose.yml

feat: enable BLOCK_PRIVATE_IPS in docker-compose for enhanced security

2026-04-21 12:53:08 +02:00

start.sh

fix: block non-http(s) schemes, sanitize API_KEY backslash, improve viewport error message

2026-04-21 12:48:18 +02:00