Skip to content
OpenAdvisories

Package · Ubuntu

docker-compose

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.9
    CVE-2025-62725 EPSS 16%

    Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations

    Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.doc…

    Docker Compose github.com/docker/compose github.com/docker/compose/v2 Ubuntu Go