CVE-2026-125123

The compose-lint Docker Compose security linter (version 0.31.0 ) is vulnerable to a command injection-like behavior via its argument parser. When a path is passed without a preceding -- separator, the parser writes rejected repository paths to stderr without sanitization. An attacker can supply ...