Is containerd 2.3.6 affected?

Update

4 known vulnerabilities affect 2.3.6.

4 newer releases in its track, up to 2.4.2. What changed up to 2.4.2

Vulnerabilities affecting 2.3.6

medium
GHSA-8647-2jxj-p2rc containerd: daemon crash when pulling an image with a crafted Content-Length header fixed in 2.3.7
medium
CVE-2026-95839 containerd: daemon crash when processing an image manifest with a malformed digest fixed in 2.3.7
medium
GHSA-hc94-p972-ch66 containerd: host disk exhaustion when pulling an image with an unbounded layer stream fixed in 2.3.7
medium
GHSA-5p7c-hggf-c748 containerd CRI plugin: mount and snapshot leak when container checkpoint restore fails fixed in 2.3.7