transfer

Jun 18, 2026 GO-2026-5064 +2 more

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

May 20, 2026 GO-2026-5064 +4 more

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Apr 14, 2026 GO-2026-5064 +5 more

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5378: containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Dec 18, 2025 GO-2026-5064 +5 more

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5378: containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Nov 5, 2025 GO-2026-5064 +5 more

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5378: containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Jul 26, 2025 GO-2025-4100 +7 more

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5378: containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Mar 17, 2025 GO-2025-4100 +7 more

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5378: containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Feb 27, 2025 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Jan 10, 2025 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Nov 21, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Oct 14, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Sep 9, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Aug 26, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Jul 18, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Jul 2, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Jun 5, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

May 16, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Apr 25, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Apr 5, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Mar 11, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Jan 31, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Jan 12, 2024 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Dec 8, 2023 GO-2025-3528 +7 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Nov 29, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Nov 16, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Oct 26, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Oct 9, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Sep 12, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Aug 25, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Aug 24, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Jul 27, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Jun 2, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

May 10, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Mar 10, 2023 GO-2023-2412 +8 more

  GO-2023-2412: RAPL accessibility in github.com/containerd/containerd

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5475: containerd image-triggered runtime DoS via unbounded group parsing in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

  GO-2026-5758: containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Changes in this version

+ type Config struct

+ Progress ProgressFunc

+ type Fetcher interface

+ Fetch func(context.Context, ocispec.Descriptor) (io.ReadCloser, error)

+ type ImageExportStreamer interface

+ ExportStream func(context.Context) (io.WriteCloser, string, error)

+ type ImageExporter interface

+ Export func(context.Context, content.Store, []images.Image) error

+ type ImageFetcher interface

+ Fetcher func(ctx context.Context, ref string) (Fetcher, error)

+ type ImageFilterer interface

+ ImageFilter func(images.HandlerFunc, content.Store) images.HandlerFunc

+ type ImageGetter interface

+ Get func(context.Context, images.Store) (images.Image, error)

+ type ImageImportStreamer interface

+ ImportStream func(context.Context) (io.Reader, string, error)

+ type ImageImporter interface

+ Import func(context.Context, content.Store) (ocispec.Descriptor, error)

+ type ImageLookup interface

+ Lookup func(context.Context, images.Store) ([]images.Image, error)

+ type ImagePusher interface

+ Pusher func(context.Context, ocispec.Descriptor) (Pusher, error)

+ type ImageResolver interface

+ Resolve func(ctx context.Context) (name string, desc ocispec.Descriptor, err error)

+ type ImageStorer interface

+ Store func(context.Context, ocispec.Descriptor, images.Store) ([]images.Image, error)

+ type ImageUnpacker interface

+ UnpackPlatforms func() []UnpackConfiguration

+ type Opt func(*Config)

+ func WithProgress(f ProgressFunc) Opt

+ type Progress struct

+ Event string

+ Name string

+ Parents []string

+ Progress int64

+ Total int64

+ type ProgressFunc func(Progress)

+ type Pusher interface

+ Push func(context.Context, ocispec.Descriptor) (content.Writer, error)

+ type Transferrer interface

+ Transfer func(ctx context.Context, source interface{}, destination interface{}, opts ...Opt) error

+ type UnpackConfiguration struct

+ Platform ocispec.Platform

+ Snapshotter string

Mar 9, 2023 GO-2025-3528 +5 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

Mar 7, 2023 GO-2025-3528 +5 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

Mar 2, 2023 GO-2025-3528 +5 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

Feb 27, 2023 GO-2025-3528 +5 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

Feb 16, 2023 GO-2025-3528 +5 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

Jan 28, 2023 GO-2025-3528 +5 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

Jan 4, 2023 GO-2025-3528 +5 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

Dec 13, 2022 GO-2025-3528 +5 more

  GO-2025-3528: containerd has an integer overflow in User ID handling in github.com/containerd/containerd

  GO-2025-4100: containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd

  GO-2025-4108: containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd

  GO-2026-5064: containerd CRI checkpoint restore CDI annotation smuggling in github.com/containerd/containerd

  GO-2026-5338: containerd: CRI checkpoint import allows local image tag poisoning in github.com/containerd/containerd

  GO-2026-5622: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd