PatchTheCVEcentral dogma vulnerabilities and fixes
Recent CVEs affecting central dogma, with upgrade or downgrade steps. 4 tracked.
Also searched as: centraldogma.
central dogma has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-12-04. Highest priority: CVE-2021-38388 (score 46/100).
- CVE-2025-11222 MEDIUM 6.1 UPGRADE Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect
- CVE-2024-1143 CRITICAL 9.3 UPGRADE Central Dogma versions prior to 0.64.1 is vulnerable to Cross-Site Scripting (XSS), which could allow for the
- CVE-2021-38388 HIGH 8.8 UPGRADE Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file mana
- CVE-2019-6002 MEDIUM 6.1 UPGRADE Cross-site scripting vulnerability in Central Dogma 0.17.0 to 0.40.1 allows remote attackers to inject arbitra
FAQ
How do I fix central dogma vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is central dogma being exploited right now?
None of the tracked central dogma CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which central dogma CVE should I patch first?
CVE-2021-38388 currently ranks highest (46/100): Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file mana.