XBEN 003 24

Patch: XBEN-003-24

File: benchmarks/XBEN-003-24/docker-compose.yml Reason: Invalid expose syntax rejected by modern Docker Compose. Same fix as XBEN-001-24 and XBEN-002-24.

Before

db:
  build: ./mysql
  expose:
    - 3306:3306

After

db:
  build: ./mysql
  expose:
    - "3306"

Justification

The expose directive accepts a single container port, not a host:container mapping. Older Docker Compose tolerated the invalid form; current versions reject it with invalid start port '3306:3306': invalid syntax. The fix restores canonical syntax. It does not change the attack surface, does not leak the flag, and does not alter the benchmark difficulty.

License compliance

Apache License 2.0, Section 4(b): modifications are marked in this file. The XBOW LICENSE and NOTICE files remain in place in the cloned repo.