YAML Parser Vulnerability in Compose-Lint Affects Docker Users

CVE-2026-123370

What is CVE-2026-123370?

Compose-Lint, a security linter for Docker Compose, has a vulnerability related to its YAML parser that improperly handles lone carriage returns and Unicode line separators. This flaw can lead to accidental deletions of important network settings or security configurations in the Compose file when edits are applied. Despite appearing valid post-edit and passing checks, the intended security settings might be compromised without detection. The issue has been resolved in version 0.18.0, emphasizing the importance of updating to maintain security.

References