Skip to content
OpenAdvisories

Package · npm

docker-compose-remote-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2020-7606

    OS Command Injection in docker-compose-remote-api

    docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by users without any sa…

    docker-compose-remote-api npm