GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-6444: containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd

  GO-2026-6597: Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd

  GO-2026-6791: containerd CRI plugin: Checkpoint restore bypasses destination security context in github.com/containerd/containerd

  GO-2026-6796: containerd: Unpack DoS via repeated opaque whiteouts in github.com/containerd/containerd