Is containerd 1.6.13 affected?

EOL

10 known vulnerabilities affect 1.6.13 (highest CVSS 4.6).

Your branch 1.6 has reached end of life (Aug 23, 2025).

109 newer releases in its track, up to 2.4.2. What changed up to 2.4.2

Vulnerabilities affecting 1.6.13

4.6
CVE-2024-40635 Integer overflow in User ID handling fixed in 1.6.38
medium
CVE-2026-53493 Image-pull DoS via crafted OCI index graph amplification
medium
CVE-2026-95838 Unpack DoS via repeated opaque whiteouts fixed in 1.7.35
medium
CVE-2026-53495 containerd CRI plugin: Unbounded I/O draining in ExecSync causes node-level denial of service fixed in 1.7.35
medium
CVE-2025-64329 Host memory exhaustion through goroutine leaks of Attach functionality in CRI server fixed in 1.7.29
medium
CVE-2024-25621 Local privilege escalation via wide permissions on several directories fixed in 1.7.29
medium
GHSA-7ww5-4wqc-m92c RAPL accessible to a container fixed in 1.6.26
medium
CVE-2023-25173 Supplementary groups are not set up properly fixed in 1.6.18
medium
CVE-2023-25153 OCI image importer memory exhaustion fixed in 1.6.18
medium
GHSA-5j5w-g665-5m35 Ambiguous OCI manifest parsing fixed in 1.14.0