2748 matches found
compose-lint: A committed symlink makes compose-lint quote a file from outside the project into its output
Impact Like Docker Compose, compose-lint follows symlinks when it reads a project's files. Unlike Compose, compose-lint up to 0.24.0 could then put the contents of a file from outside the project into its output, where the author of a pull request can read it. A pull request can commit a symlink,...
2.3CVSS0.00452EPSS
SaveExploits0References6Affected Software2
20