Is containerd 2.2.7 affected?
Aug 12, 2026 · Release notes ↗
7 known vulnerabilities affect 2.2.7.
14 newer releases in its track, up to 2.4.2. What changed up to 2.4.2
Vulnerabilities affecting 2.2.7
- medium GHSA-8647-2jxj-p2rc containerd: daemon crash when pulling an image with a crafted Content-Length header fixed in 2.2.10
- medium CVE-2026-95839 containerd: daemon crash when processing an image manifest with a malformed digest fixed in 2.2.10
- medium GHSA-hc94-p972-ch66 containerd: host disk exhaustion when pulling an image with an unbounded layer stream fixed in 2.2.10
- medium GHSA-5p7c-hggf-c748 containerd CRI plugin: mount and snapshot leak when container checkpoint restore fails fixed in 2.2.10
- medium
- medium
- medium CVE-2026-53495 containerd CRI plugin: Unbounded I/O draining in ExecSync causes node-level denial of service fixed in 2.2.8
Newer releases
| 2.4.2 | Oct 13, 2026 | 2.2.7 → 2.4.2 |
| 2.4.1 | Sep 24, 2026 | 2.2.7 → 2.4.1 |
| 2.4.0 | Sep 16, 2026 | 2.2.7 → 2.4.0 |
| 2.3.7 | Oct 13, 2026 | 2.2.7 → 2.3.7 |
| 2.3.6 | Sep 24, 2026 | 2.2.7 → 2.3.6 |
| 2.3.5 | Sep 4, 2026 | 2.2.7 → 2.3.5 |
| 2.3.4 | Aug 12, 2026 | 2.2.7 → 2.3.4 |
| 2.3.3 | Jul 10, 2026 | 2.2.7 → 2.3.3 |
| 2.3.2 | Jun 18, 2026 | 2.2.7 → 2.3.2 |
| 2.3.1 | May 20, 2026 | 2.2.7 → 2.3.1 |
| 2.3.0 | Apr 30, 2026 | 2.2.7 → 2.3.0 |
| 2.2.10 | Oct 13, 2026 | 2.2.7 → 2.2.10 |
| 2.2.9 | Sep 24, 2026 | 2.2.7 → 2.2.9 |
| 2.2.8 | Sep 4, 2026 | 2.2.7 → 2.2.8 |