CVE-2026-123368

The compose-lint Docker Compose security linter is vulnerable to information disclosure in versions 0.22.0 through 0.31.0 (specifically affecting include project_directory links from 0.28.0 ). The root cause is the failure to apply containment checks when following symbolic links outside the proj...

ansible-runner has default temporary files written to world R/W locations

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...