CVE Intelligence

Vulnerabilidades do Apple Containerization

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Apple Containerization: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:apple:containerization

CVE-2026-20613 Alta · 7.8 CWE-22 22/01/2026
Path Traversal em Apple Container
The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This means that a carelessly or maliciously constructed archive can extract a file into any user-writable location on the system using relative pathnames. This issue is addressed in container 0.8.0 and containerization 0.21.0.