CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6

CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6. A patched version of the package is available...

AZL-93150 CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4

CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4. A patched version of the package is available...

CVE-2026-42502 affecting package containerd2 for versions less than 2.2.4-4

CVE-2026-42502 affecting package containerd2 for versions less than 2.2.4-4. A patched version of the package is available...

CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4

CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4. A patched version of the package is available...

CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3

CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...

CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3

CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...

CVE-2026-50195 affecting package containerd2 for versions less than 2.2.4-3

CVE-2026-50195 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...

CVE-2026-53492 affecting package containerd2 for versions less than 2.2.4-3

CVE-2026-53492 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...

CVE-2026-53489 affecting package containerd2 for versions less than 2.2.4-3

CVE-2026-53489 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...

CVE-2026-33814 affecting package containerd2 for versions less than 2.2.4-2

CVE-2026-33814 affecting package containerd2 for versions less than 2.2.4-2. A patched version of the package is available...

CVE-2026-39882 affecting package containerd2 for versions less than 2.2.4-2

CVE-2026-39882 affecting package containerd2 for versions less than 2.2.4-2. A patched version of the package is available...

CVE-2026-42506 affecting package containerd2 for versions less than 2.1.6-3

CVE-2026-42506 affecting package containerd2 for versions less than 2.1.6-3. A patched version of the package is available...

CVE-2026-27136 affecting package containerd2 for versions less than 2.1.6-3

CVE-2026-27136 affecting package containerd2 for versions less than 2.1.6-3. A patched version of the package is available...

CVE-2026-39821 affecting package containerd2 for versions less than 2.1.6-3

CVE-2026-39821 affecting package containerd2 for versions less than 2.1.6-3. A patched version of the package is available...

AZL-87531 CVE-2026-42502 affecting package containerd2 for versions less than 2.2.4-4

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87534 CVE-2026-27136 affecting package containerd2 for versions less than 2.2.4-2

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87528 CVE-2026-42506 affecting package containerd2 for versions less than 2.2.4-2

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87522 CVE-2026-39821 affecting package containerd2 for versions less than 2.2.4-2

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

AZL-87540 CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...