container
1.7.1A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- Apache-2.0Permissive · OSI-approved
- Security
- 8 advisories1 high, 5 medium, 2 low
- Supported versions
- No scheduleendoflife.date does not track this project
51.5k stars · 1.8k forks · 620 open issues · last release 8 days ago · data checked 38 minutes ago
Security advisories
All advisories on GitHubThe 8 most recent advisories published by the maintainers: 1 high, 5 medium, 2 low. Check the patched version against the one you run.
- mediumGHSA-fqxg-rrf3-358vOct 20, 2026`container build` may serve files outside the build context when a symlink is swapped during a read
- Affected
- >= 1.2.0, < 1.6.0
- Patched in
- 1.6.0
- highCVE-2026-113951Sep 29, 2026K8s plugin: Container-controlled kubeconfig enables arbitrary command execution on the macOS host
- Affected
- < 1.5.0
- Patched in
- 1.5.0
- lowGHSA-g57j-434g-5xj2Aug 12, 2026`BuildFSSync.walk()`'s JSON response mode reports the resolved host path of build-context symlinks that point outside the context.
- Affected
- < 1.2.0
- Patched in
- 1.2.0
- mediumCVE-2026-64777Aug 12, 2026Build filesystem sync discloses host files outside the build context via symlinks
- Affected
- <= 1.1.0
- Patched in
- 1.2.0
- mediumCVE-2026-64773Aug 12, 2026TCP port forwarder buffers unbounded pre-connect data from published container ports
- Affected
- >= 0.3.0, <= 1.1.0
- Patched in
- 1.2.0
- mediumCVE-2026-64786Aug 11, 2026`container run`/`create` inherits bare-name image `Config.Env` entries from the launching process's environment
- Affected
- < 1.2.0
- Patched in
- 1.2.0
- lowGHSA-39g5-644c-qwcgApr 30, 2026`container system dns create` unvalidated domain name allows pf rule injection
- Affected
- <= 0.12.2
- Patched in
- 0.12.3
- mediumCVE-2026-28909Apr 30, 2026Insecure Hostname Validation Allows HTTP Downgrade Attack
- Affected
- <=0.12.1
- Patched in
- 0.12.3