CVE-2026-28909 — Apple / macOS

Description (CNA)

Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3.

Affected (CNA)

Vendor / product	Versions
Apple / macOS	affected 0.12.1 before 0.12.3

CWE

No CWE identifiers supplied.

References

https://github.com/apple/container/security/advisories/GHSA-m5rp-xcpf-r8m7

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.