—
GO-2025-3412
Excessive resource consumption when unmarshalling Compose file with recursive loop in github.com/compose-spec/compose-go/v2
Quick fix
GO-2025-3412 — github.com/compose-spec/compose-go/v2: upgrade to the fixed version with the command below.
go get github.com/compose-spec/compose-go/v2@v2.4.1Details
Excessive resource consumption when unmarshalling Compose file with recursive loop in github.com/compose-spec/compose-go/v2
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/compose-spec/compose-go/v2
Introduced in:
2.1.0Fixed in: 2.4.1Fix
go get github.com/compose-spec/compose-go/v2@v2.4.1References
- https://github.com/compose-spec/compose-go/security/advisories/GHSA-36gq-35j3-p9r9[ADVISORY]
- https://github.com/compose-spec/compose-go/pull/618[FIX]
- https://github.com/compose-spec/compose-go/pull/703[FIX]
- https://github.com/docker/compose/commit/d239f0f3187a2ed5404c61f83bd5e995c81600ff[FIX]
- https://github.com/docker/compose/issues/12235[WEB]