Go/github.com/containerd/containerd CVE-2026-53495: medium, EPSS 0.16%
containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of Service
Action: Upgrade github.com/containerd/containerd to 1.7.35 or later.
go get github.com/containerd/containerd@v1.7.35Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.35 | - |
Fixed versions
| 1.7.35 |
Sources
- osv: GHSA-7jxh-36q5-gcqv#Go/github.com/containerd/containerd
- https://github.com/containerd/containerd/security/advisories/GHSA-7jxh-36q5-gcqv
- https://github.com/containerd/containerd
- https://github.com/containerd/containerd/releases/tag/v1.7.35
- https://github.com/containerd/containerd/releases/tag/v2.0.12
- https://github.com/containerd/containerd/releases/tag/v2.2.8
- https://github.com/containerd/containerd/releases/tag/v2.3.5
CVE-2026-53495 · published · modified · JSON