GO-2025-3527 vulnerabilities

Vulnerabilities for packages: docker-compose, docker-compose-fips, kubescape...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: docker-cli-buildx, docker-compose, trivy, conftest, podman, kaniko-fips, buildah, osv-scanner, cloudbeat-fips, docker-fips, trivy-fips, trivy-operator-fips, kubescape, zot, trivy-operator, docker-cli-buildx-fips, skaffold-fips, podman-fips, kaniko, docker-compose-fip...

GO-2025-3900 vulnerabilities

Vulnerabilities for packages: istio-fips, boring-registry-fips, beats-fips, k9s-fips, grafana, bank-vaults, jitsucom-bulker, neuvector-sigstore-interface-fips, kyverno, ratify-fips, zitadel, docker-compose-fips, pluto-fips, tkn-fips, rancher-security-scan, mattermost-fips, beats, grafana-fips,...

GO-2023-2331 vulnerabilities

Vulnerabilities for packages: buildkitd, docker-compose, rancher-webhook, metrics-server, temporal-server, metrics-server-fips, kube-oidc-proxy, k3s, prometheus-adapter, volume-modifier-for-k8s, envoy-ratelimit, aws-ebs-csi-driver, temporal-fips, kubescape, prometheus-adapter-fips, kine, kubevela...

GO-2025-3527 vulnerabilities

Vulnerabilities for packages: kubescape, docker-compose...

GO-2025-3699 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, docker-compose...

GO-2026-4858 vulnerabilities

Vulnerabilities for packages: scorecard, kaniko, trivy-operator, docker-compose, skaffold, buildah, docker-cli-buildx, podman, kubescape, conftest, osv-scanner, guac, trivy, zot...

GO-2026-4859 vulnerabilities

Vulnerabilities for packages: scorecard, kaniko, trivy-operator, docker-compose, skaffold, buildah, docker-cli-buildx, podman, kubescape, conftest, osv-scanner, guac, trivy, zot...

GO-2024-2737 vulnerabilities

Vulnerabilities for packages: kaniko, docker-compose, cri-tools, grype, helm-push, wolfictl, dagger, neuvector-scanner, k3d, melange, syft, policy-controller, buf, harbor-scanner-trivy...

GO-2025-3830 vulnerabilities

Vulnerabilities for packages: grype, buildah, splunk-otel-collector, docker-cli-buildx, trufflehog, trivy, syft, goreleaser, docker-compose, osv-scanner, aws-otel-collector, k9s, kargo, spire-server, falcoctl, opentelemetry-collector-contrib, apko, zarf, zot, openfga, cadvisor,...

GO-2024-2659 vulnerabilities

Vulnerabilities for packages: kaniko, grype, ko, kubescape, tkn, syft, trivy, aactl, docker-compose, cilium-cli, crossplane, up, kargo, spire-server, zot, cadvisor, wolfictl, dagger, conftest, ctop, melange, buildkitd, buf...

PT-2026-114468

Уязвимость демона dockerd библиотеки go-archive интерфейса командной строки платформы для разработки и доставки контейнерных приложений Docker Desktop и инструмента для управления многоконтейнерными приложениями Docker Compose связана с некорректным определением символических ссылок перед доступо...

CVE-2026-72865

Dokploy prior to 0.29.13 suffers an OS command injection via an unvalidated composePath used by the compose.update/deploy flow. An authenticated user with compose write and deploy permissions can craft a path that is interpolated into docker commands (docker compose -f, docker stack deploy -c) an...

CVE-2026-72865 Dokploy: OS Command Injection via compose `composePath`

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, the compose.update operation stores an unvalidated composePath that packages/server/src/utils/builders/compose.ts and packages/server/src/services/compose.ts interpolate into docker compose -f, docker stack deploy -c,...

pentest-toolkit

Pentest Automation Toolkit A fully open-source pentest automa...

EUVD-2026-53374

The NASA-AMMOS Asynchronous Network Management System ANMS reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface port 8089, e.g. "$IONMGRPORT:-8089:8089/tcp" with capadd: NETADMIN, NETRAW, SYSNICE, bypassing the C...

CVE-2026-71289

The NASA-AMMOS Asynchronous Network Management System ANMS reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface port 8089, e.g. ":8089/tcp" with capadd: NETADMIN, NETRAW, SYSNICE, bypassing the CAM Configuration...

CVE-2026-71289

The CVE affects NASA-AMMOS ANMS and JHUAPL-DTNMA/dtnma-tools. The default docker-compose setup exposes the amp-manager REST API on the host network (port 8089) with NET_ADMIN/NET_RAW/SYS_NICE and bypasses the CAM gateway, placing the REST server (CivetWeb, nm_rest.c) in a state where enable_auth_...

docker-compose-control-center (>=2.4.0, <=3.0.0) potentially affected by CVE-2026-15307 via django (2.1.8)

django PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =2.4.0, =3.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

docker-compose-control-center (3.1.0) potentially affected by CVE-2026-15830 via django (2.1.10)

django PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center 3.1.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...