Security
فارسی
All products

compose-lint

PyPI · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
compose-lint: File paths embedded in pull requests can inject CI workflow commands through command-line error messages CVE-2026-125123 · GHSA-8V59-QMWV-4P6Q compose-lint PyPI Low Fix reported
compose-lint: Text in a pull request can issue CI workflow commands through JSON and SARIF output on stdoutCVE-2026-125122 · GHSA-HR4H-4C45-V4Q4 compose-lint PyPI Low Fix reported
compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's outputCVE-2026-125121 · GHSA-R7J4-CRJV-H467 compose-lint PyPI Medium Fix reported
compose-lint: Incomplete fix for GHSA-jf3h-8jvx-vcrg: a run stopped at the finding limit quotes a secret from a CI-generated `.env`CVE-2026-123796 · GHSA-RM8W-W798-G545 tmatens/compose-lintcompose-lint GitHub ActionsPyPI Low Fix reported
compose-lint: `fix --apply` can delete a line the user did not select, including a security settingCVE-2026-123370 · GHSA-65V8-Q222-64XX compose-lint PyPI Medium Fix reported
compose-lint: .env read through a symlink outside the project can expose the CI job's environmentCVE-2026-123368 · GHSA-6WCV-RJ3C-MHV3 tmatens/compose-lintcompose-lint GitHub ActionsPyPI Low Fix reported
compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint ActionCVE-2026-123369 · GHSA-6F4G-XM8V-PGV6 tmatens/compose-lintcompose-lint GitHub ActionsPyPI Medium Fix reported
compose-lint: A pull request can make compose-lint quote a secret from a CI-generated `.env` into its findingsCVE-2026-123372 · GHSA-JF3H-8JVX-VCRG tmatens/compose-lintcompose-lint GitHub ActionsPyPI Low Fix reported
compose-lint: A committed symlink makes compose-lint quote a file from outside the project into its outputCVE-2026-123373 · GHSA-WHR6-FGPQ-FPV9 tmatens/compose-lintcompose-lint GitHub ActionsPyPI Low Fix reported
compose-lint: A `.compose-lint.yml` symlinked outside the project is read, and a parse error quotes part of the targetCVE-2026-123371 · GHSA-88F4-FRH5-GMCR tmatens/compose-lintcompose-lint GitHub ActionsPyPI Low Fix reported