Security: apple/containerization
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Image-layer extraction restores setuid/setgid and arbitrary ownership on the host (fchmod/fchown after the create-time 0o777 mask)GHSA-5h49-6pr7-9mv4 published
Aug 11, 2026 by jgloganModerate -
Archive extraction does not guard against escapes from extraction base directory.GHSA-cq3j-qj2h-6rv3 published
Jan 22, 2026 by madrobLow