Skip to content
OpenAdvisories

Package · SwiftURL

github.com/apple/container

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low —
    GHSA-39g5-644c-qwcg

    container: pf Rule Injection via Domain Name Argument in `container system dns create --localhost` Command

    #### Product Name: container Github Link: https://github.com/apple/container Version: <= 0.12.2 #### Summary The `container system dns create --localhost` command accepts a `domainName` argument and passes it unsanitized into the pf anchor file (`/etc/pf.anch…

    github.com/apple/container SwiftURL
  • High 7.8
    CVE-2026-20613

    Container and Containerization archive extraction does not guard against escapes from extraction base directory.

    The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This means that a carelessly or maliciously constructed archive can extract a file into any user…

    Apple Container Containerization github.com/apple/container SwiftURL