CVE-2026-64777 - A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0. - 漏洞详情

漏洞编号：CVE-2026-64777

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-64777

CNNVD 编号：-

厂商/产品：apple / container

影响范围：cpe:2.3:a:apple:container:*:*:*:*:*:swift:*:*

CWE：CWE-22

发布/更新时间：2026-08-20 / 2026-08-27

漏洞描述

A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.

CVE-2026-64777 - A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0. - 漏洞详情

漏洞描述

相关链接

相关漏洞