mirror of
https://github.com/Dokploy/dokploy.git
synced 2026-10-15 21:31:11 +00:00
fbf2ff73c2
Same drizzle-zod $defaultFn-as-optional leak as schedule appName: certificatePath (notNull + $defaultFn) was overridable, enabling path traversal out of the certs dir even with the escaped shell paths. Omit it from apiCreateCertificate so it is always server-generated (completes GHSA-q9qw).