Read the docs

compose-spec

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

compose-spec records in CISA KEV

No compose-spec vulnerabilities are listed in CISA KEV.

Records

1 record

Priority LOW 26

The compose-go library component in versions v2.10-v2.4.0 allows an authorized user who sends malicious YAML payloads to cause the compose-go to consume excessive amount of Memory and CPU cycles while parsing YAML, such…

CVSS 3.1MEDIUM 5.9 Local Low privileges User interaction EPSS 0.00229 Published 2025-01-23 Fixed in 2.4.1 CWE-20
Open these records in search →