CVE-2026-65388

Apple's containerization library (apple/container) is vulnerable to a credential disclosure attack. A remote attacker who controls a container registry can redirect a client's token request to an attacker-chosen host, leaking the victim's registry credentials . Rapid7 classifies the issue as URL ...