tmatens vulnerabilities
12 published CVEs name tmatens among the affected products.
- 12Published CVEs12 of them scored
- 12Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-125125
compose-lint: A symlink in a pull request can issue workflow commands through the compose-lint Action's SARIF-directory error message
tmatens · compose-lint
Low2.3 - CVE-2026-125124
compose-lint: Text in a pull request can reach Azure Pipelines as logging commands through compose-lint 0.31.0's output
tmatens · compose-lint
Low2.3 - CVE-2026-125123
compose-lint: A file path in a pull request can issue CI workflow commands through compose-lint 0.31.0's command-line error messages
tmatens · compose-lint
Low2.3 - CVE-2026-125122
compose-lint: Text in a pull request can issue CI workflow commands through compose-lint 0.31.0's JSON and SARIF output on stdout
tmatens · compose-lint
Low2.3 - CVE-2026-125121
compose-lint: Text in a pull request can still issue CI workflow commands through compose-lint 0.31.0's output
tmatens · compose-lint
Medium5.3 - CVE-2026-123796
compose-lint: Incomplete fix for GHSA-jf3h-8jvx-vcrg: a run stopped at the finding limit quotes a secret from a CI-generated `.env`
tmatens · compose-lint
Low2.3 - CVE-2026-123373
compose-lint: A committed symlink makes compose-lint quote a file from outside the project into its output
tmatens · compose-lint
Low2.3 - CVE-2026-123372
compose-lint: A pull request can make compose-lint quote a secret from a CI-generated `.env` into its findings
tmatens · compose-lint
Low2.3 - CVE-2026-123371
compose-lint: A `.compose-lint.yml` symlinked outside the project is read, and a parse error quotes part of the target
tmatens · compose-lint
Low2.3 - CVE-2026-123370
compose-lint: `fix --apply` can delete a line the user did not select, including a security setting
tmatens · compose-lint
Medium5.1