Skip to content
OpenAdvisories

Package · Go

github.com/docker/compose

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.0
    CVE-2025-15558

    Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-build…

    Docker Compose Docker CLI github.com/docker/cli Go
  • High 8.9
    CVE-2025-62725 EPSS 16%

    Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

    Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.doc…

    Docker Compose github.com/docker/compose/v2 github.com/docker/compose Ubuntu Go