Docker Compose depends on a bundled copy of OpenSSL that has been insecure since June: <a href="https:&#x2F;&#x2F;github.com&#x2F;docker&#x2F;compose&#x2F;issues&#x2F;1601" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;docker&#x2F;compose&#x2F;issues&#x2F;1601</a>