Skip to content
OpenAdvisories

Package · Go

github.com/lima-vm/lima

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.7

    In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file

    Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to version 0.16.0, a virtual machine instance with a malicious disk image could read a single file on the host filesystem, even when no filesystem is mounted from the host…