Affected by GO-2025-3528
and 11 other vulnerabilities
GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd
GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd
GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd
GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd
GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd
GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd
GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd
GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd
GO-2026-6444: containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service in github.com/containerd/containerd
GO-2026-6597: Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd
type Image struct {
// Id of the image. Normally the digest of image config. ID string// References are references to the image, e.g. RepoTag and RepoDigest. References []string// ChainID is the chainID of the image. ChainID string// Size is the compressed size of the image. Size int64// ImageSpec is the oci image structure which describes basic information about the image. ImageSpec imagespec.Image
}
Image contains all resources associated with the image. All fields
MUST not be mutated directly after created.
Get gets image metadata by image id. The id can be truncated.
Returns various validation errors if the image id is invalid.
Returns errdefs.ErrNotFound if the image doesn't exist.