How many Docker compose CVEs are in CISA KEV?

None of Docker compose's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Docker compose vulnerabilities?

Yes — 1 of Docker compose's CVEs have a known public exploit.

Which versions of Docker compose are affected?

147 distinct Docker compose versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Docker compose CVEs?

Docker compose's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-427 (Uncontrolled Search Path Element), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).

What is the average severity of Docker compose CVEs?

The average CVSS base score across Docker compose's scored CVEs is 7.7.

Docker compose Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Docker compose vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Docker compose Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Docker compose has 3 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Docker compose, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Docker compose's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High3

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Docker compose's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Docker compose's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Docker compose version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

2.0.02 CVEs
2.0.0-rc.32 CVEs
2.0.12 CVEs
2.1.02 CVEs
2.1.12 CVEs
2.10.02 CVEs
2.10.12 CVEs
2.10.22 CVEs
2.11.02 CVEs
2.11.12 CVEs
2.11.22 CVEs
2.12.02 CVEs

Common weakness types

The CWE weakness categories most often found in Docker compose CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Docker compose CVEs were published each year.

2025

2026

Other Docker products

Browse vulnerabilities for other products by Docker.

docker54 CVEs Docker Desktop37 CVEs github.com/docker/docker33 CVEs desktop14 CVEs engine6 CVEs Docker Sandboxes4 CVEs cli3 CVEs Docker Engine3 CVEs

All Docker vulnerabilities

Frequently asked questions

Common questions about Docker compose vulnerabilities.

How many CVEs does Docker compose have?: Docker compose has 3 published CVE records since 2025.
How many Docker compose CVEs are in CISA KEV?: None of Docker compose's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Docker compose vulnerabilities?: Yes — 1 of Docker compose's CVEs have a known public exploit.
Which versions of Docker compose are affected?: 147 distinct Docker compose versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Docker compose CVEs?: Docker compose's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-427 (Uncontrolled Search Path Element), CWE-59 (Improper Link Resolution Before File Access ('Link Following')).
What is the average severity of Docker compose CVEs?: The average CVSS base score across Docker compose's scored CVEs is 7.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Docker compose vulnerabilities

Monitor new Docker compose vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

Docker compose Vulnerabilities