CVE-2026-113957
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned. The fix compares the returned digest to the pinned digest and fails the pull on a mismatch. Tag pulls are exempt, because a tag is mutable by design. The fix also verifies the hash of manifests and blobs when they are fetched. This vulnerability is addressed in container version 1.6.0 and containerization version 0.52.1.
| Vendor | apple |
| Product | container |
| Ecosystems | |
| Industries | Technology |
| Published | Oct 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for apple container
Be the first to know when new unknown vulnerabilities affecting apple container are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apple / container
0 < 1.6.0
Apple / containerization
0 < 0.52.1