CLEANSTART-2025-ZG19712 Improper input validation in the Kubernetes API server in versions v1

Security vulnerability affects the containerd package. Improper input validation in the Kubernetes API server in versions v1...

CLEANSTART-2025-WZ56191 Go before 1

Security vulnerability affects the containerd package. Go before 1...

CLEANSTART-2025-WA86088 spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32

Security vulnerability affects the containerd package. A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32...

CLEANSTART-2025-NR50910 runc through 1

Security vulnerability affects the containerd package. runc through 1...

CLEANSTART-2025-IA92737 containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows

Security vulnerability affects the containerd package. containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows...

CLEANSTART-2025-BS91981 In containerd (an industry-standard container runtime) before versions 1

Security vulnerability affects the containerd package. In containerd an industry-standard container runtime before versions 1...

CLEANSTART-2025-OM13781 containerd is a container runtime

Security vulnerability affects the containerd package. containerd is a container runtime...

CLEANSTART-2025-SC08629 containerd is an open source container runtime with an emphasis on simplicity, robustness and portability

Security vulnerability affects the containerd package. containerd is an open source container runtime with an emphasis on simplicity, robustness and portability...

CLEANSTART-2025-HQ55158 OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content

Security vulnerability affects the containerd package. The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content...

CLEANSTART-2025-GQ42610 containerd is an open source container runtime

Security vulnerability affects the containerd package. containerd is an open source container runtime...

CLEANSTART-2025-XK69277 containerd is a container runtime available as a daemon for Linux and Windows

Security vulnerability affects the containerd package. containerd is a container runtime available as a daemon for Linux and Windows...

CLEANSTART-2025-DA74849 Moby is an open-source project created by Docker to enable and accelerate software containerization

Security vulnerability affects the containerd package. Moby is an open-source project created by Docker to enable and accelerate software containerization...

CLEANSTART-2025-UG08794 containerd is an open source container runtime

Security vulnerability affects the containerd package. containerd is an open source container runtime...

CLEANSTART-2025-SX71346 containerd is an open source container runtime

Security vulnerability affects the containerd package. containerd is an open source container runtime...

CLEANSTART-2025-PN33710 containerd is an open source container runtime

Security vulnerability affects the containerd package. containerd is an open source container runtime...

CLEANSTART-2025-OB15168 containerd is an open source container runtime

Security vulnerability affects the containerd package. containerd is an open source container runtime...

Important: runfinch-finch

Issue Overview: A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

Important: runfinch-finch

Issue Overview: A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc...

SUSE CVE-2026-53493

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage before container start, causing long ContainerCreating stalls and, at larger sizes, node/runtime instability...

Excessive Iteration

Overview Affected versions of this package are vulnerable to Excessive Iteration in the PullImage process. An attacker can cause excessive CPU and memory consumption by supplying a crafted OCI image index with deeply nested or heavily fanned-out descriptor graphs, leading to prolonged stalls and...