Dockhand (< 1.0.54)

Dockhand versions prior to 1.0.54 are vulnerable to path traversal via double-encoded input in the /api/stacks/[name]/env/raw endpoint, allowing authenticated attackers to read, overwrite, or delete sensitive .env files.