vibe-kanban
Warn
Audited by Socket on Nov 6, 2026
1 alert found:
AnomalyAnomalytemplates/docker-compose.yml
LOWAnomalyLOW
templates/docker-compose.yml
This Compose file deploys Vibe Kanban behind Nginx and shows no direct malicious behavior. The principal security concern is mounting /var/run/docker.sock into the application container, which can provide host-level control if that container is compromised or its access is exposed. Remote mode, published MCP/application ports, and the mutable latest image tag also merit review; severity is elevated by the Docker socket exposure.
Confidence: 98%Severity: 62%
Audit Metadata