github.com/cri-o/cri-o vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-4437Mediumgithub.com/cri-o/cri-o: CRI-O has Potential High Memory Consumption from File Read CVE-2025-0750Mediumgithub.com/cri-o/cri-o: CRI-O Path Traversal vulnerability CVE-2024-8676Mediumgithub.com/cri-o/cri-o: CRI-O: Maliciously structured checkpoint file can gain arbitrary node access CVE-2024-5154Highgithub.com/cri-o/cri-o: malicious container creates symlink "mtab" on the host External CVE-2024-3154Highgithub.com/cri-o/cri-o: CRI-O vulnerable to an arbitrary systemd property injection CVE-2023-6476Mediumgithub.com/cri-o/cri-o: CRI-O's pods can break out of resource confinement on cgroupv2 CVE-2022-4318Mediumgithub.com/cri-o/cri-o: CRI-O vulnerable to /etc/passwd tampering resulting in Privilege Escalation CVE-2022-2995Highgithub.com/cri-o/cri-o: CRI-O incorrect handling of supplementary groups may lead to sensitive information disclosure CVE-2022-1708Highgithub.com/cri-o/cri-o: Node DOS by way of memory exhaustion through ExecSync request in CRI-O CVE-2022-27652Mediumgithub.com/cri-o/cri-o: Incorrect Default Permissions in CRI-O CVE-2022-0811Highgithub.com/cri-o/cri-o: Code Injection in CRI-O GHSA-W2J5-3RCX-VX7XMediumgithub.com/cri-o/cri-o: Sysctls applied to containers with host IPC or host network namespaces can affect the host CVE-2022-0532Mediumgithub.com/cri-o/cri-o: Incorrect Permission Assignment for Critical Resource in CRI-O

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo