Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-7606 1 Docker-compose-remote-api Project 1 Docker-compose-remote-api 2024-11-21 9.8 Critical
docker-compose-remote-api through 0.1.4 allows execution of arbitrary commands. Within 'index.js' of the package, the function 'exec(serviceName, cmd, fnStdout, fnStderr, fnExit)' uses the variable 'serviceName' which can be controlled by users without any sanitization.