Lucene search
+L

35833 matches found

osv_ghsa
osv_ghsa
•added 2026/11/10 6:28 p.m.•5 views

GHSA-R7J4-CRJV-H467 compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's output

Impact 0.31.0 fixed GHSA-6f4g-xm8v-pgv6, where text from a Compose file became GitHub Actions workflow commands in compose-lint's output. The fix escapes the command openers in everything compose-lint prints, and the 0.31.0 changelog says the report "escapes both openers also covering Azure...

5.3CVSS6.1AI score
SaveExploits0References5
Rows per page
Query Builder