Skip to content

Product

npm docker-compose-remote-api vulnerabilities

1 published CVE affecting npm docker-compose-remote-api, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest npm docker-compose-remote-api CVEs

Newest publication first

  1. CVE-2020-7606 OS Command Injection in docker-compose-remote-api

    Published
    CriticalCVSS 9.8 EPSS 2.7%

    docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by users without any sanitization.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.