Github.Com Docker Compose V2 vulnerabilities

CVE-2025-15558 Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows in github.com/docker/cli

CVE-2025-62725 [HIGH] CWE-20 Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations Docker Compose Vulnerable to Path Traversal via OCI Artifact Layer Annotations Docker Compose trusts the path information embedded in remote OCI compose artifacts. When a layer includes the annotations com.docker.compose.extends or com.docker.compose.envfile, Compose joins the attacker‑supplied value from com.docker.compose.file/com.docker.compose.envfile with its local cache directory an