tocsin

Go/github.com/containerd/containerd/v2 CVE-2026-95837: high 7.8, EPSS 0.11%

containerd CRI plugin: Checkpoint restore bypasses destination security context in github.com/containerd/containerd

Action: Upgrade github.com/containerd/containerd/v2 to 2.2.7 or later.

go get github.com/containerd/containerd/v2@v2.2.7
go get github.com/containerd/containerd/v2@v2.3.4

Affected

introducedfixedlast affected
2.1.02.2.7-
2.3.02.3.4-

Fixed versions

2.2.72.3.4

Sources

CVE-2026-95837 · published · modified · JSON