CVE-2026-123373

The compose-lint security linter (versions 0.2.0 to 0.25.0 ) is vulnerable to an information disclosure issue when following project-controlled symbolic links to files outside the project directory. Specifically, if an external Compose-related target (like compose.override.yml or a COMPOSE_FILE e...