Security
فارسی
All products

github.com/containerd/containerd/v2

Go · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
containerd CRI plugin: Checkpoint restore bypasses destination security contextCVE-2026-95837 · GHSA-P7V4-VR35-MJ6FVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd Go High Fix reported
containerd: Unpack DoS via repeated opaque whiteoutsCVE-2026-95838 · GHSA-RP3H-JF77-Q9P4Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd Go Medium Fix reported
Containerd has image-pull DoS via crafted OCI index graph amplificationCVE-2026-53493 · GHSA-PG57-6JWG-Q645Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd Go Medium Fix reported
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of ServiceCVE-2026-53495 · GHSA-7JXH-36Q5-GCQVVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pullCVE-2026-53488 · GHSA-XHF5-7WJV-PQXPVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat High Fix reported
containerd CRI checkpoint restore CDI annotation smugglingCVE-2026-53492 · GHSA-33VJ-92QQ-66HCVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat High Fix reported
containerd user ID handling bypass allows runAsNonRoot evasionCVE-2026-46680 · GHSA-FQW6-GF59-QR4WVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd Go High Fix reported
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
containerd affected by a local privilege escalation via wide permissions on CRI directoryCVE-2024-25621 · GHSA-PWHC-RPQ9-4C8WVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat High Fix reported
Arbitrary host CRI log file read via symlink following in CRI checkpoint restoreCVE-2026-53489 · GHSA-RGH6-RFWX-V388Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat High Fix reported
containerd image-triggered runtime DoS via unbounded group parsingCVE-2026-47262 · GHSA-JPCC-P29G-P8MQVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd Go Medium Fix reported
containerd: CRI checkpoint import allows local image tag poisoningCVE-2026-50195 · GHSA-CVXM-645Q-P574Version ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd Go Medium Fix reported
containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.CVE-2025-47291 · GHSA-CXFP-7PVR-95FFVersion ranges need review. github.com/containerd/containerd/v2 Go Medium Fix reported
containerd allows host filesystem access on pullCVE-2025-47290 · GHSA-CM76-QM8V-3J95Version ranges need review. github.com/containerd/containerd/v2 Go High Fix reported
containerd has an integer overflow in User ID handlingCVE-2024-40635 · GHSA-265R-HFXG-FHMGVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported