Github.com/containerd/containerd
This hub aggregates every CVE we track for Github.com/containerd/containerd, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
14
CVEs tracked
0
Critical
4
High
0
In CISA KEV
Severity distribution
MEDIUM10HIGH4
Monthly trend
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
2
0
0
0
0
0
0
0
2024-072026-06
Latest CVEs
The 14 most recently published vulnerabilities affecting Github.com/containerd/containerd.
- CVE-2025-64329containerd CRI server: Host memory exhaustion through Attach goroutine leak5.5
- CVE-2024-25621containerd affected by a local privilege escalation via wide permissions on CRI directory7.3
- CVE-2024-40635containerd has an integer overflow in User ID handling4.6
- CVE-2023-25173containerd supplementary groups are not set up properly5.3
- CVE-2023-25153containerd OCI image importer memory exhaustion6.2
- CVE-2022-23471containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak5.7
- CVE-2022-31030containerd CRI plugin: Host memory exhaustion through ExecSync5.5
- CVE-2022-23648Insecure handling of image volumes in containerd CRI plugin7.5
- CVE-2021-43816Improper Preservation of Permissions in containerd8.0
- CVE-2021-41103Insufficiently restricted permissions on plugin directories7.8
- CVE-2021-32760Archive package allows chmod of file outside of unpack target directory5.0
- CVE-2021-21334environment variable leak6.3
- CVE-2020-15257containerd-shim API Exposed to Host Network Containers5.2
- CVE-2020-15157containerd can be coerced into leaking credentials during image pull6.1
Product normalization is registry-driven with AI assist and human review. How it works