tocsin

Go/github.com/containerd/containerd/v2 CVE-2026-47262: medium, EPSS 0.27%

containerd image-triggered runtime DoS via unbounded group parsing

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.10 or later.

go get github.com/containerd/containerd/v2@v2.0.10
go get github.com/containerd/containerd/v2@v2.1.9
go get github.com/containerd/containerd/v2@v2.2.5
go get github.com/containerd/containerd/v2@v2.3.2

Affected

introducedfixedlast affected
2.0.02.0.10-
2.1.02.1.9-
2.2.02.2.5-
2.3.02.3.2-

Fixed versions

2.0.102.1.92.2.52.3.2

Sources

CVE-2026-47262 · published · modified · JSON