855 matches found
szluyu99 gin-vue-blog security vulnerability
szluyu99 gin-vue-blog is a Golang full-stack blog by Zhenyu personal developer, supporting Docker Compose one-click deployment. Based on the latest front-end and back-end technology stack Vue3, TS, Unocs, Redis and so on. The front-end contains a blog post display front , blog background manageme...
SUSE-SU-2025:20385-1 Security update for docker-compose
This update for docker-compose fixes the following issues: Update to version 2.33.1: Improvements - Add support for gwpriority, enableipv4 requires docker v28.0 by @thaJeztah in 12570 Fixes - Run watch standalone if menu fails to start by @ndeloof in 12536 - Report error using non-file...
docker-compose-control-center (>=3.1.1, <=3.1.2) potentially affected by CVE-2025-48432 via django (2.1.11)
django PYPI version 2.1.11 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =3.1.1, =3.1.2 Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...
docker-compose-control-center (3.1.0) potentially affected by CVE-2025-48432 via django (2.1.10)
django PYPI version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center 3.1.0 Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...
docker-compose-control-center (>=2.4.0, <=3.0.0) potentially affected by CVE-2025-48432 via django (2.1.8)
django PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =2.4.0, =3.0.0 Source cves: CVE-2025-48432 Source advisory: OSV:GHSA-7XR5-9HCQ-CHF9...
CVE-2025-47290 vulnerabilities
Vulnerabilities for packages: docker-compose, neuvector-scanner...
GHSA-CM76-QM8V-3J95 vulnerabilities
Vulnerabilities for packages: docker-compose, neuvector-scanner...
CVE-2025-47290 vulnerabilities
Vulnerabilities for packages: neuvector-fips, neuvector-scanner, docker-compose-fips, docker-compose, neuvector...
GHSA-CM76-QM8V-3J95 vulnerabilities
Vulnerabilities for packages: neuvector-fips, neuvector-scanner, docker-compose-fips, docker-compose, neuvector...
CVE-2023-37273
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing docker compose run auto-gpt in the repo root uses a different docker-compose.yml file from the one suggested i...
CVE-2020-11710
An issue was discovered in docker-kong for Kong through 2.0.3. The admin API port may be accessible on interfaces other than 127.0.0.1. NOTE: The vendor argue that this CVE is not a vulnerability because it has an inaccurate bug scope and patch links. “1 Inaccurate Bug Scope - The issue scope was...
CVE-2020-7606
docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'execserviceName, cmd, fnStdout, fnStderr, fnExit' uses the variable 'serviceName' which can be controlled by users without any sanitization...
Azure Linux 3.0 Security Update: cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device-plugin (CVE-2025-22872)
The version of cf-cli / cni-plugins / containerized-data-importer / docker-compose / kubevirt / sriov-network-device- plugin installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22872 advisory. - The...
CVE-2025-22872 affecting package docker-compose for versions less than 2.27.0-5
CVE-2025-22872 affecting package docker-compose for versions less than 2.27.0-5. A patched version of the package is available...
Exploit for Deserialization of Untrusted Data in Apache Activemq
CVE-2023-46604 !imagehttps://github.com/user-attachments/ass...
Incorrect Default Permissions
Overview docksible is a Deploy and set up Docker Compose based web apps with Ansible Affected versions of this package are vulnerable to Incorrect Default Permissions via the file permissions of docker-compose files. An attacker could gain unauthorized access to sensitive configuration data or...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
CVE-2025-24813-vulhub POC script for the vulhub environment of...
AZL-60557 CVE-2025-22872 affecting package docker-compose for versions less than 2.27.0-5
The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing. When directly using Tokenizer, this can result in such tags incorrectly being marked as self-closing, and when using the Parse functions, this can result in content...