CVE-2026-125125

The compose-lint GitHub Action (versions 0.30.0 through 0.32.0 ) is vulnerable to a command injection-like issue where a failed sarif-file subdirectory creation prints a resolved directory path without effective suppression. An attacker can submit a pull request containing a symlink to a director...