proc

Sep 26, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Apr 5, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Feb 14, 2019 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Nov 21, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Sep 25, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Aug 22, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Jul 13, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Jul 9, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Jun 27, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Jun 18, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

May 31, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Apr 24, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Changes in this version

+ type Mount struct

+ Options []string

+ Source string

+ Target string

+ Type string

Apr 13, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Apr 5, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Mar 27, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Apr 2, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Mar 29, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Feb 13, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Feb 6, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Jan 30, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Jan 17, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Jan 11, 2018 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Dec 5, 2017 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

Changes in this version

+ const InitPidFile — darwin/amd64, js/wasm, linux/amd64

+ const RuncRoot — darwin/amd64, js/wasm, linux/amd64

+ func NewRunc(root, path, namespace, runtime, criu string, systemd bool) *runc.Runc — darwin/amd64, js/wasm, linux/amd64

+ type CheckpointConfig struct

+ Options *google_protobuf.Any

+ Path string

+ type CreateConfig struct

+ Bundle string

+ Checkpoint string

+ ID string

+ Options *google_protobuf.Any

+ ParentCheckpoint string

+ Rootfs []*containerd_types.Mount

+ Runtime string

+ Stderr string

+ Stdin string

+ Stdout string

+ Terminal bool

+ type ExecConfig struct

+ ID string

+ Spec *google_protobuf.Any

+ Stderr string

+ Stdin string

+ Stdout string

+ Terminal bool

+ type Init struct — darwin/amd64, js/wasm, linux/amd64

+ IoGID int

+ IoUID int

+ func New(context context.Context, path, workDir, runtimeRoot, namespace, criu string, ...) (*Init, error)

+ func (p *Init) Exec(context context.Context, path string, r *ExecConfig) (Process, error)

+ func (p *Init) ExitStatus() int

+ func (p *Init) ExitedAt() time.Time

+ func (p *Init) ID() string

+ func (p *Init) KillAll(context context.Context) error

+ func (p *Init) Pid() int

+ func (p *Init) Runtime() *runc.Runc

+ func (p *Init) Status(ctx context.Context) (string, error)

+ func (p *Init) Stdin() io.Closer

+ func (p *Init) Stdio() Stdio

+ func (p *Init) Wait()

+ type Platform interface — darwin/amd64, js/wasm, linux/amd64

+ Close func() error

+ CopyConsole func(ctx context.Context, console console.Console, stdin, stdout, stderr string, ...) (console.Console, error)

+ ShutdownConsole func(ctx context.Context, console console.Console) error

+ type Process interface — darwin/amd64, js/wasm, linux/amd64

+ ExitStatus func() int

+ ExitedAt func() time.Time

+ ID func() string

+ Pid func() int

+ Status func(context.Context) (string, error)

+ Stdin func() io.Closer

+ Stdio func() Stdio

+ Wait func()

+ type State interface — darwin/amd64, js/wasm, linux/amd64

+ Delete func(context.Context) error

+ Kill func(context.Context, uint32, bool) error

+ Resize func(ws console.WinSize) error

+ SetExited func(status int)

+ Start func(context.Context) error

+ type Stdio struct — darwin/amd64, js/wasm, linux/amd64

+ Stderr string

+ Stdin string

+ Stdout string

+ Terminal bool

+ func (s Stdio) IsNull() bool

Dec 1, 2017 GO-2022-0344 +14 more

  GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

  GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

  GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

  GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

  GO-2022-0803: containerd v1.2.x can be coerced into leaking credentials during image pull in github.com/containerd/containerd

  GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

  GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

  GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

  GO-2023-1573: Memory exhaustion via OCI image importer in github.com/containerd/containerd

  GO-2023-1574: Privilege escalation via supplementary groups in github.com/containerd/containerd

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2024-2846: Containers started with non-empty inheritable Linux process capabilities in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd