Docker Compose vulnerabilities

• moby go-archive, docker cli, compose +3 more +5 more Tar extraction in moby/go-archive can write outside the destination directory via link following CVE-2026-17106 Public exploitFix available 7.1 HighAugust 18, 2026
• docker compose, cli, command line interface +27 more +29 more Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability CVE-2025-15558 Fix available 7.0 HighMarch 4, 2026
• docker compose Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations CVE-2025-62725 Fix available EPSS 13.7% 8.9 HighOctober 27, 2025
• composer, debian linux, fedoraproject fedora +2 more Remote Code Execution via web-accessible composer.phar CVE-2023-43655 Fix available 6.4 MediumSeptember 29, 2023
• docker composer docker image The official composer docker images before 1.8.3 contain a blank password for a root user. System... CVE-2020-35184 9.8 CriticalDecember 17, 2020