tocsin

Go/github.com/containerd/containerd/v2 CVE-2026-53495: medium, EPSS 0.16%

containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.12 or later.

go get github.com/containerd/containerd/v2@v2.0.12
go get github.com/containerd/containerd/v2@v2.2.8
go get github.com/containerd/containerd/v2@v2.3.5

Affected

introducedfixedlast affected
02.0.12-
2.2.02.2.8-
2.3.02.3.5-

Fixed versions

2.0.122.2.82.3.5

Sources

CVE-2026-53495 · published · modified · JSON