Go/github.com/containerd/containerd CVE-2026-95838: medium 4.6

containerd: Unpack DoS via repeated opaque whiteouts in github.com/containerd/containerd

Action: Upgrade github.com/containerd/containerd to 1.7.35 or later.

go get github.com/containerd/containerd@v1.7.35

Affected

Fixed versions

Sources

• osv: GO-2026-6796
• nvd: CVE-2026-95838
• https://github.com/containerd/containerd/security/advisories/GHSA-rp3h-jf77-q9p4
• https://github.com/containerd/containerd/commit/e6ca378dcfa610d06589a3ac96aa992de866e4f0

CVE-2026-95838 · published 2026-10-19T21:08:35Z · modified 2026-10-19T21:31:38.305997328Z · JSON