CVE WATCH / VULNERABILITY DETAIL
CVE-2026-123368
UNKNOWNCVSS 0NVD feed
Published 9 November 2026 · tracked since 10 November 2026
Description
compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.22.0 until 0.31.0, compose-lint follows a sibling .env symbolic link outside the project without applying its normal containment check. From 0.28.0, the same gap also affects an inc
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog