Github.com/containerd/containerd

This hub aggregates every CVE we track for Github.com/containerd/containerd, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Github.com/containerd/containerd.

• CVE-2025-64329containerd CRI server: Host memory exhaustion through Attach goroutine leak5.5Nov 7, 2025
• CVE-2024-25621containerd affected by a local privilege escalation via wide permissions on CRI directory7.3Nov 6, 2025
• CVE-2024-40635containerd has an integer overflow in User ID handling4.6Mar 17, 2025
• GHSA-c9cp-9c75-9v8ccontainerd started with non-empty inheritable Linux process capabilitiesMay 14, 2024
• GHSA-7ww5-4wqc-m92ccontainerd allows RAPL to be accessible to a containerDec 19, 2023
• CVE-2023-25173containerd supplementary groups are not set up properly5.3Feb 16, 2023
• CVE-2023-25153containerd OCI image importer memory exhaustion6.2Feb 16, 2023
• CVE-2022-23471containerd CRI stream server: Host memory exhaustion through terminal resize goroutine leak5.7Dec 7, 2022
• CVE-2022-31030containerd CRI plugin: Host memory exhaustion through ExecSync5.5Jun 6, 2022
• CVE-2022-23648Insecure handling of image volumes in containerd CRI plugin7.5Mar 3, 2022
• CVE-2021-43816Improper Preservation of Permissions in containerd8.0Jan 5, 2022
• GHSA-5j5w-g665-5m35Ambiguous OCI manifest parsingNov 18, 2021
• CVE-2021-41103Insufficiently restricted permissions on plugin directories7.8Oct 4, 2021
• CVE-2021-32760Archive package allows chmod of file outside of unpack target directory5.0Jul 19, 2021
• CVE-2021-21334environment variable leak6.3Mar 10, 2021