AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-20T21:17:09.110Z and has not been modified since then. The NVD entry is currently Received. Dockge, a stack management tool, contains a path traversal vulnerability that allows authenticated users to read and delete arbitrary files. This is due to inadequate validation of stack names, which can be e [truncated]
Uptime Kuma's Matomo analytics integration is vulnerable to JavaScript injection due to insufficient escaping of the siteId value. This allows an attacker to inject arbitrary JavaScript code, potentially leading to session-cookie theft and full page takeover. The vulnerability exists in the server/analytics/matomo-analytics.js file, where the admin-configurable Matomo siteId value is injected as a bare, u [truncated]
