Skip to main content
Threat Radar animated logo

Threat Intelligence Database

Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Package: pkg:github/apple/container

Threat Intelligence

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-64777: A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. in Apple containerCVE-2026-64777
0

A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.

MediumVulnerability#cve#cve-2026-64777
Join the discussion
CVE-2026-28909: Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. in Apple macOSCVE-2026-28909
0

CVE-2026-28909 is a vulnerability in Apple macOS where users connecting to malicious registries with hostnames that match certain bypass patterns may have their registry credentials exposed in plaintext. This issue affects container version 0.12.1 and is fixed in version 0.12.3. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. There are no known exploits in the wild at this time.

MediumVulnerability#cve#cve-2026-28909
Join the discussion
CVE-2026-20613: The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This means that a carelessly or maliciously constructed archive can extract a file into any user-writable location on the system using relative pathnames. in Apple ContainerCVE-2026-20613
0

CVE-2026-20613 is a high-severity vulnerability in Apple's Container product affecting the ArchiveReader.extractContents() function used by cctl image load and container image load. The function fails to validate pathnames before extracting archive members, allowing maliciously crafted archives to write files to arbitrary user-writable locations via relative pathnames. This can lead to full compromise of confidentiality, integrity, and availability of affected systems. Exploitation requires local access and user interaction but no privileges. The issue is addressed in container 0.8.0 and containerization 0.21.0.

HighVulnerabilityGermanyGermanyFranceFranceNetherlandsNetherlands+5#cve#cve-2026-20613
Join the discussion

Showing 1 to 3 of 3 results

Filters:Package: pkg:github/apple/container
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses