VYPR

compose-lint

by Compose Lint

CVEs (2)

  • CVE-2026-123796LowNov 9, 2026
    risk 0.08cvss —epss —

    compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.32.0 until 0.33.0, compose-lint's incomplete remediation for .env secret disclosure checks the 20,000-finding limit before replacing resolved values with their…

  • CVE-2026-123373LowNov 9, 2026
    risk 0.08cvss —epss —

    compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From 0.2.0 until 0.25.0, compose-lint follows a project-controlled symbolic link used as the Compose file outside the project. The same issue affects…