lima
v2.3.0Linux virtual machines, with a focus on running containers
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- Apache-2.0Permissive · OSI-approved
- Security
- 4 advisories1 high, 1 medium, 2 low · Scorecard 8.7/10
- Supported versions
- No scheduleendoflife.date does not track this project
22.4k stars · 1k forks · 519 open issues · last release 8 days ago · data checked 52 minutes ago
Security advisories
All advisories on GitHubThe 4 most recent advisories published by the maintainers: 1 high, 1 medium, 2 low. Check the patched version against the one you run.
- lowGHSA-4wvf-9pjc-cpfpNov 6, 2026limactl shell --sync applies unreviewed guest changes to host (TOCTOU)
- Affected
- >= 2.1.0-alpha.0, < 2.3.0
- Patched in
- 2.3.0
- mediumGHSA-566x-598w-h7w7Nov 6, 2026Guest can read host files as QEMU option ROMs loaded from limactl's cwd
- Affected
- < 2.3.0
- Patched in
- 2.3.0
- highCVE-2026-53657Jun 19, 2026An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket
- Affected
- <= 2.1.2
- Patched in
- 2.1.3
- lowCVE-2023-32684May 30, 2023A malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file
- Affected
- < 0.16.0
- Patched in
- 0.16.0