EUVD-2026-121405

compose-lint: Workflow command injection through SARIF-directory errors triggered by pull request symlinks...

CVE-2026-125125

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From version 0.30.0 until 0.32.0, the compose-lint GitHub Action prints the resolved directory from a failed sarif-file subdirectory creation without effective command suppression...