Please see https://github.com/containerd/project/blob/main/SECURITY.md
Repository navigation
Security: containerd/containerd
Security
SECURITY.md
-
containerd: daemon crash when pulling an image with a crafted Content-Length headerGHSA-8647-2jxj-p2rc published
Oct 13, 2026 by samuelkarpModerate -
containerd: daemon crash when processing an image manifest with a malformed digestGHSA-vwhp-8p66-mq4f published
Oct 13, 2026 by samuelkarpModerate -
containerd CRI plugin: mount and snapshot leak when container checkpoint restore failsGHSA-5p7c-hggf-c748 published
Oct 13, 2026 by samuelkarpModerate -
containerd CRI plugin: Checkpoint restore bypasses destination security contextGHSA-p7v4-vr35-mj6f published
Sep 1, 2026 by samuelkarpCritical -
CDI annotation smuggling during CRI checkpoint restoreGHSA-33vj-92qq-66hc published
Jun 18, 2026 by samuelkarpCritical -
containerd CRI — image-config LABEL flows to host-root command execution from an image pullGHSA-xhf5-7wjv-pqxp published
Jun 18, 2026 by samuelkarpCritical -
containerd CRI plugin: Unbounded I/O draining in ExecSync causes node-level denial of serviceGHSA-7jxh-36q5-gcqv published
Sep 4, 2026 by samuelkarpModerate -
CRI checkpoint import allows local image tag poisoningGHSA-cvxm-645q-p574 published
Jun 18, 2026 by samuelkarpCritical -
Arbitrary host file read via symlink following in CRI checkpoint restoreGHSA-rgh6-rfwx-v388 published
Jun 18, 2026 by samuelkarpHigh -
Unpack DoS via repeated opaque whiteoutsGHSA-rp3h-jf77-q9p4 published
Sep 4, 2026 by samuelkarpModerate
Learn more about advisories related to containerd/containerd in the GitHub Advisory Database