{"action":"Upgrade github.com/compose-spec/compose-go/v2 to 2.4.1 or later.","affected":[{"fixed":"2.4.1","introduced":"2.1.0"}],"component":"github.com/compose-spec/compose-go/v2","cve_ids":["CVE-2024-10846"],"ecosystem":"Go","epss":0.00229,"exploited":false,"fixed_versions":["2.4.1"],"ghsa_id":"GHSA-36gq-35j3-p9r9","id":"tcs_01M5KETBBY768XX8H0H5W97QYY","modified_at":"2025-04-28T14:09:27Z","published_at":"2025-01-21T20:24:02Z","references":["https://osv.dev/vulnerability/GHSA-36gq-35j3-p9r9","https://github.com/compose-spec/compose-go/security/advisories/GHSA-36gq-35j3-p9r9","https://nvd.nist.gov/vuln/detail/CVE-2024-10846","https://github.com/docker/compose/issues/12235","https://github.com/compose-spec/compose-go/pull/618","https://github.com/compose-spec/compose-go/pull/703","https://github.com/docker/compose/commit/d239f0f3187a2ed5404c61f83bd5e995c81600ff#diff-33ef32bf6c23acb95f5902d7097b7a1d5128ca061167ec0716715b0b9eeaa5f6R10","https://github.com/compose-spec/compose-go","https://security.netapp.com/advisory/ntap-20250425-0008"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-36gq-35j3-p9r9","url":"https://osv.dev/vulnerability/GHSA-36gq-35j3-p9r9"}],"summary":"Excessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop"}