apple/container

apple/container

apple.github.io

Releases19

Frequency3 weeks 18 hours

Last Release18 days ago

Stars48.3K

A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2026-28909NVD↗	< 0.12.3	Apr 30, 2026Thursday, 30 April 2026, 23:16	6.5 MEDIUM	—
Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3.
CVE-2026-20613NVD↗	< 0.8.0	Jan 23, 2026Friday, 23 January 2026, 00:15	7.8 HIGH	—
The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This means that a carelessly or maliciously constructed archive can extract a file into any user-writable location on the system using relative pathnames. This issue is addressed in container 0.8.0 and containerization 0.21.0.