Affected by GO-2022-0278 and 13 other vulnerabilities

GO-2022-0278: Unprivileged pod using `hostPath` can side-step active LSM when it is SELinux in github.com/containerd/containerd

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

GO-2026-6444: containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd

The highest tagged major version is v2.

cri

package

v1.5.3 Latest Latest Go to latest Published: Jul 13, 2021 License: Apache-2.0 Imports: 24 Imported by: 6

Details

There is no documentation for this package.

Path	Synopsis
annotations
config
constants
io
opts
platforms
server
bandwidth Package bandwidth provides utilities for bandwidth shaping	Package bandwidth provides utilities for bandwidth shaping
testing
store
container
image
label
sandbox
snapshot
truncindex Package truncindex provides a general 'index tree', used by Docker in order to be able to reference containers by only a few unambiguous characters of their id.	Package truncindex provides a general 'index tree', used by Docker in order to be able to reference containers by only a few unambiguous characters of their id.
streaming
portforward Package portforward contains server-side logic for handling port forwarding requests.	Package portforward contains server-side logic for handling port forwarding requests.
remotecommand Package remotecommand contains functions related to executing commands in and attaching to pods.	Package remotecommand contains functions related to executing commands in and attaching to pods.
util