CVE-2026-125122 compose-lint: Text in a pull request can issue CI workflow commands through compose-lint 0.31.0's JSON and SARIF output on stdout

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. In version 0.31.0, compose-lint does not sanitize the workflow-command opener inside strings written by --format json or --format sarif to stdout. A pull request can place that opener i...