CVE-2026-125122
LOW
INFO
Priority: 0.01
BB Relevance:
55/100
Published: 2026-11-10
Modified: 2026-11-13
First seen: 2026-11-10
Status: active
Attack Surface
Network
Low Complexity
No Auth
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
Passive
S:
X
AT:
Present
VC:
None
VI:
Low
VA:
None
Description
compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. In version 0.31.0, compose-lint does not sanitize the ##[ workflow-command opener inside strings written by --format json or --format sarif to stdout. A pull request can place that opener in a service name or other Compose value, and the GitHub Actions runner recognizes it even in the middle of a serialized line when the package, pre-commit hook, or Docker image prints JSON or SARIF to the job log. Writing the output to a file and using the compose-lint GitHub Action are not affected, and the flaw does not change the lint pass or fail result. This issue is fixed in version 0.32.0.
Weakness Classification (2)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| tmatens | compose-lint | = 0.31.0 |
| tmatens | compose-lint | = 0.31.0 |
References & Advisories (4)
x_refsource_MISC
x_refsource_MISC
x_refsource_MISC
x_refsource_CONFIRM