tocsin

Go/github.com/containerd/containerd/v2 CVE-2025-64329: medium 5.5, EPSS 0.17%

containerd CRI server: Host memory exhaustion through Attach goroutine leak

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.7 or later.

go get github.com/containerd/containerd/v2@v2.0.7
go get github.com/containerd/containerd/v2@v2.1.5
go get github.com/containerd/containerd/v2@v2.2.0

Affected

introducedfixedlast affected
02.0.7-
2.1.0-beta.02.1.5-
2.2.0-beta.02.2.0-

Fixed versions

2.0.72.1.52.2.0

Sources

CVE-2025-64329 · published · modified · JSON