CVE-2026-77395

stargz-snapshotter before v0.19.0 commits remote snapshots under the layer chainID without checking that each layer's DiffID matches its TOCDigest, so a malicious image can advertise another image's DiffIDs and poison the snapshot cache; other containers on a containerd CRI node then run the...