Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-6791
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd CRI plugin: Checkpoint restore bypasses destination security context... 2 days ago
  • Fix available
GO-2026-6796
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd: Unpack DoS via repeated opaque whiteouts in... 2 days ago
  • Fix available
GHSA-rp3h-jf77-q9p4
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd: Unpack DoS via repeated opaque whiteouts 6 days ago
  • Fix available
  • Severity - 4.6 (Medium)
GO-2026-6597
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd 01 Oct
  • Fix available
GHSA-pg57-6jwg-q645
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 Containerd has image-pull DoS via crafted OCI index graph amplification 25 Sep
  • Fix available
  • Severity - 6.9 (Medium)
GO-2026-6444
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd 16 Sep
  • Fix available
GHSA-7jxh-36q5-gcqv
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service 09 Sep
  • Fix available
  • Severity - 6.8 (Medium)
GO-2026-5758
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd 25 Jun
  • Fix available
GO-2026-5622
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd 25 Jun
  • Fix available
GO-2026-5475
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd 25 Jun
  • Fix available
GO-2026-5338
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd 25 Jun
  • Fix available
GO-2026-5378
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd 25 Jun
  • Fix available
GO-2026-5064
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd 22 Jun
  • Fix available
GHSA-xhf5-7wjv-pqxp
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull 19 Jun
  • Fix available
  • Severity - 8.7 (High)
GHSA-jpcc-p29g-p8mq
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd image-triggered runtime DoS via unbounded group parsing 19 Jun
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-fqw6-gf59-qr4w
  • Go/github.com/containerd/containerd
  • Go/github.com/containerd/containerd/v2
 containerd user ID handling bypass allows runAsNonRoot evasion 21 May
  • Fix available
  • Severity - 7.3 (High)
Load more...