Is containerd 1.7.11 affected?

CVSS 4.6

9 known vulnerabilities affect 1.7.11 (highest CVSS 4.6).

Your branch 1.7 has reached end of life (Sep 30, 2026).

72 newer releases in its track, up to 2.4.2. What changed up to 2.4.2

Vulnerabilities affecting 1.7.11

4.6
CVE-2024-40635 Integer overflow in User ID handling fixed in 1.7.27
medium
CVE-2026-53493 Image-pull DoS via crafted OCI index graph amplification
medium
CVE-2026-95838 Unpack DoS via repeated opaque whiteouts fixed in 1.7.35
medium
CVE-2026-53495 containerd CRI plugin: Unbounded I/O draining in ExecSync causes node-level denial of service fixed in 1.7.35
medium
CVE-2026-47262 containerd image-triggered runtime DoS via unbounded group parsing fixed in 1.7.33
critical
CVE-2026-53488 containerd CRI — image-config LABEL flows to host-root command execution from an image pull fixed in 1.7.33
medium
CVE-2025-64329 Host memory exhaustion through goroutine leaks of Attach functionality in CRI server fixed in 1.7.29
medium
CVE-2024-25621 Local privilege escalation via wide permissions on several directories fixed in 1.7.29
medium
GHSA-5j5w-g665-5m35 Ambiguous OCI manifest parsing fixed in 1.14.0