{"action":"Upgrade github.com/containerd/containerd to 1.5.18 or later.","affected":[{"fixed":"1.5.18","introduced":"0"},{"fixed":"1.6.18","introduced":"1.6.0"}],"component":"github.com/containerd/containerd","cve_ids":["CVE-2023-25153"],"ecosystem":"Go","epss":0.00363,"exploited":false,"fixed_versions":["1.5.18","1.6.18"],"ghsa_id":"GHSA-259w-8hf6-59c2","id":"tcs_01M5KFYN6K4JGVRJ0ARJA0YN3X","modified_at":"2026-02-04T03:32:17.418915Z","published_at":"2023-02-17T19:16:59Z","references":["https://osv.dev/vulnerability/GO-2023-1573","https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2","https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4","https://github.com/containerd/containerd/releases/tag/v1.5.18","https://github.com/containerd/containerd/releases/tag/v1.6.18"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2023-1573","url":"https://osv.dev/vulnerability/GO-2023-1573"}],"summary":"Memory exhaustion via OCI image importer in github.com/containerd/containerd"}