tocsin

Go/github.com/containerd/containerd/v2 CVE-2026-95838: medium 4.6

containerd: Unpack DoS via repeated opaque whiteouts

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.12 or later.

go get github.com/containerd/containerd/v2@v2.0.12
go get github.com/containerd/containerd/v2@v2.2.8
go get github.com/containerd/containerd/v2@v2.3.5

Affected

introducedfixedlast affected
02.0.12-
2.2.02.2.8-
2.3.02.3.5-

Fixed versions

2.0.122.2.82.3.5

Sources

CVE-2026-95838 · published · modified · JSON