CVE-2026-71482

stargz-snapshotter estargz v0.10.0 through v0.18.2: getSource in estargz.go follows hardlinks recursively without tracking visited entries, so an eStargz layer with cyclic hardlinks causes unbounded recursion and a stack overflow denial of service. Fixed in v0.19.0...