Please see https://github.com/containerd/project/blob/main/SECURITY.md
Security: containerd/containerd
Security
SECURITY.md
-
CDI annotation smuggling during CRI checkpoint restoreGHSA-33vj-92qq-66hc published
Jun 18, 2026 by samuelkarpCritical -
containerd CRI — image-config LABEL flows to host-root command execution from an image pullGHSA-xhf5-7wjv-pqxp published
Jun 18, 2026 by samuelkarpCritical -
CRI checkpoint import allows local image tag poisoningGHSA-cvxm-645q-p574 published
Jun 18, 2026 by samuelkarpCritical -
Arbitrary host file read via symlink following in CRI checkpoint restoreGHSA-rgh6-rfwx-v388 published
Jun 18, 2026 by samuelkarpHigh -
containerd image-triggered runtime DoS via unbounded group parsingGHSA-jpcc-p29g-p8mq published
Jun 18, 2026 by samuelkarpModerate -
containerd user ID handling bypass allows runAsNonRoot evasionGHSA-fqw6-gf59-qr4w published
May 20, 2026 by samuelkarpModerate -
Host filesystem access during image unpackGHSA-cm76-qm8v-3j95 published
May 20, 2025 by dmcgowanCritical -
containerd CRI plugin: Incorrect cgroup hierarchy assignment for containers running in usernamespaced Kubernetes pods.GHSA-cxfp-7pvr-95ff published
May 21, 2025 by dmcgowanModerate -
Host memory exhaustion through goroutine leaks of Attach functionality in CRI serverGHSA-m6hq-p25p-ffr2 published
Nov 6, 2025 by dmcgowanModerate -
Integer overflow in User ID handlingGHSA-265r-hfxg-fhmg published
Mar 17, 2025 by dmcgowanModerate
Learn more about advisories related to containerd/containerd in the GitHub Advisory Database