github.com/containerd/containerd/v2 vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-53492Highgithub.com/containerd/containerd/v2: containerd CRI checkpoint restore CDI annotation smuggling CVE-2026-53489Highgithub.com/containerd/containerd/v2: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore CVE-2026-53488Highgithub.com/containerd/containerd: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull CVE-2026-50195Mediumgithub.com/containerd/containerd/v2: containerd: CRI checkpoint import allows local image tag poisoning CVE-2026-47262Mediumgithub.com/containerd/containerd/v2: containerd image-triggered runtime DoS via unbounded group parsing CVE-2026-46680Highgithub.com/containerd/containerd: containerd user ID handling bypass allows runAsNonRoot evasion CVE-2025-64329Mediumgithub.com/containerd/containerd: containerd CRI server: Host memory exhaustion through Attach goroutine leak CVE-2024-25621Highgithub.com/containerd/containerd: containerd affected by a local privilege escalation via wide permissions on CRI directory CVE-2025-47291Mediumgithub.com/containerd/containerd/v2: containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.CVE-2025-47290Highgithub.com/containerd/containerd/v2: containerd allows host filesystem access on pull CVE-2024-40635Mediumgithub.com/containerd/containerd/v2: containerd has an integer overflow in User ID handling

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo