Skip to content
OpenAdvisories

Package · Go

github.com/docker/compose/v5

1 known vulnerabilities.

1 result · Feed

  • High 7.0

    Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker can create this directory and place malicious CLI plugin binaries (docker-compose.exe, docker-build…