tocsin

Go/github.com/containerd/containerd CVE-2022-23648: high 7.5, EPSS 27.39%

containerd CRI plugin: Insecure handling of image volumes

Action: Upgrade github.com/containerd/containerd to 1.4.13 or later.

go get github.com/containerd/containerd@v1.4.13
go get github.com/containerd/containerd@v1.5.10
go get github.com/containerd/containerd@v1.6.1

Affected

introducedfixedlast affected
01.4.13-
1.5.01.5.10-
1.6.01.6.1-

Fixed versions

1.4.131.5.101.6.1

Sources

CVE-2022-23648 · published · modified · JSON