2352 matches found
GHSA-R7J4-CRJV-H467 compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's output
Impact 0.31.0 fixed GHSA-6f4g-xm8v-pgv6, where text from a Compose file became GitHub Actions workflow commands in compose-lint's output. The fix escapes the command openers in everything compose-lint prints, and the 0.31.0 changelog says the report "escapes both openers also covering Azure...
5.3CVSS6.1AI score
SaveExploits0References5
20