Security: apple/container
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
`container run`/`create` inherits bare-name image `Config.Env` entries from the launching process's environmentGHSA-xwgf-4rc5-p4m4 published
Aug 11, 2026 by jgloganModerate -
`container system dns create` unvalidated domain name allows pf rule injectionGHSA-39g5-644c-qwcg published
Apr 30, 2026 by madrobLow -
Insecure Hostname Validation Allows HTTP Downgrade AttackGHSA-m5rp-xcpf-r8m7 published
Apr 30, 2026 by madrobModerate