CVE-2026-123369

The compose-lint Docker Compose security linter (versions prior to 0.31.0 ) is vulnerable to command injection or output manipulation because it fails to neutralize GitHub Actions and Azure Pipelines workflow-command openers. Specifically, the tool prints attacker-controlled service names, enviro...