CVE WATCH / VULNERABILITY DETAIL

CVE-2026-123373

UNKNOWNCVSS 0NVD feed

Published 9 November 2026 · tracked since 10 November 2026

Description

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.2.0 until 0.25.0, compose-lint follows a project-controlled symbolic link used as the Compose file outside the project. The same issue affects compose.override.yml and a COMPOSE_FIL

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools