6.5Medium

CVE-2026-28909

Apple macOS Published: (6 months ago)

Description

Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3.

Weakness (CWE): CWE-522

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
apple container < 0.12.3
Apple macOS 0.12.1 – < 0.12.3

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:apple:container:*:*:*:*:*:swift:*:* < 0.12.3