PT-2026-107792

containerd overlaybd through 1.0.18 has a do load index LSMT index loading integer overflow and resultant out-of-bounds heap access for index bytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple overlaybd-backed containers...

EulerOS 2.0 SP15 : containerd (EulerOS-SA-2026-3902)

According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...

EulerOS 2.0 SP15 : docker-runc (EulerOS-SA-2026-3907)

According to the versions of the docker-runc package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'This is a PUBLIC release of a low-severity vulnerability in runc which\nhas been fixed in runc 1.3.6, runc 1.4.3, and runc 1.5.0-rc.3. There...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in the containerd and runc executor run paths. An attacker can make a build succeed, block cleanup, or leave cleanup operating outside the intended rootfs by mutating the injected CA bundl...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in the containerd and runc executor run paths. An attacker can make a build succeed, block cleanup, or leave cleanup operating outside the intended rootfs by mutating the injected CA bundl...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition in the containerd and runc executor run paths. An attacker can make a build succeed, block cleanup, or leave cleanup operating outside the intended rootfs by mutating the injected CA bundl...

Containerd Execution Environment Input Validation

The vulnerability of Containerd’s execution environment is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...

Containerd Execution Environment Disclosure

The vulnerability of the Containerd execution environment is related to errors in handling links. Exploiting this vulnerability can allow an attacker to disclose protected information...

Containerd Code Execution

The vulnerability of the Containerd process for importing the CRI of the runtime environment is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: timestamp-authority, gptscript, flux-notification-controller, migrate, rancher-fleet, flux-kustomize-controller, step-issuer, ferretdb, gitness, rancher-agent, cadvisor, victoriametrics-operator, grafana, juicefs, headlamp, promxy, grafana-image-renderer,...

GO-2026-6597 Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd

Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd...

CVE-2026-37236 affecting package moby-containerd-cc for versions less than 1.7.7-17

CVE-2026-37236 affecting package moby-containerd-cc for versions less than 1.7.7-17. A patched version of the package is available...

Rocky Linux 8 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc Multiple Vulnerabilities (crlsa-2023_6939)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20236939 advisory. go-yaml: Improve heuristics preventing CPU/memory abuse by parsing malicious or large YAML documents CVE-2022-3064 golang: html/template: improper handling...

PT-2026-105613

Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd...

CLEANSTART-2026-WS51251 Security fix for GHSA-9h8m-3fm2-qjrq applied in: buildkitd 0.26.3-r1, containerd 2.1.3-r2, cosign 3.0.5-r0

GHSA-9h8m-3fm2-qjrq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UK29360 Security fix for GHSA-xmrv-pmrh-hhx2 applied in: containerd 2.1.3-r2

Security vulnerability affects the containerd package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QD72588 Security fix for GHSA-hfvc-g4fc-pqhx applied in: containerd 2.1.3-r2

Security vulnerability affects the containerd package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YV21606 Security fix for GHSA-pc3f-x583-g7j2 applied in: containerd 2.1.3-r2

Security vulnerability affects the containerd package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QO04531 Security fix for GHSA-cgrx-mc8f-2prm applied in: buildkitd 0.26.3-r0, containerd 2.1.3-r2

GHSA-cgrx-mc8f-2prm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CX03241 Security fix for GHSA-jv3w-x3r3-g6rm applied in: containerd 2.1.3-r2

Security vulnerability affects the containerd package. This issue is resolved in later releases. See references for vulnerability details...