CVE-2024-10846

Medium

Advisory

Published 21 Jan 2025In the index since 8 Sept 2026

Excessive Platform Resource Consumption within a Loop when unmarshalling Compose file having recursive loop

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
github.com/compose-spec/compose-go/v2golang	v2.1.5, v2.1.6	2.4.1	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 1 container images this version deploys carry CVE-2024-10846.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	github.com/compose-spec/compose-go/v2@v2.1.6	2.4.1

2,590

1 of the 3 container images this version deploys carry CVE-2024-10846.

Container image	Digest	Package	Fixed in
library/docker :26.1-dind	dd43b430341a	github.com/compose-spec/compose-go/v2@v2.1.5	2.4.1

2,429

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	github.com/compose-spec/compose-go/v2@v2.1.6	2.4.1	1
library/docker :26.1-dind	dd43b430341a	github.com/compose-spec/compose-go/v2@v2.1.5	2.4.1	1