Docker Compose
2 CVEs affecting Docker Compose. Latest disclosed: 2026-03-04. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-15558 | High | 8.0 | 2026-03-04 | Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default. A low-privileged attacker… |
CVE-2025-62725 | | 2025-10-27 | Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.do… |