MEDIUM6.9
GO-2026-6597
Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd
Quick fix
GO-2026-6597 — github.com/containerd/containerd: upgrade to the fixed version with the command below.
go get github.com/containerd/containerd@v1.7.36Details
Containerd has image-pull DoS via crafted OCI index graph amplification in github.com/containerd/containerd
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/containerd/containerd
Introduced in:
0Fixed in: 1.7.36Fix
go get github.com/containerd/containerd@v1.7.36Go/github.com/containerd/containerd/v2
Introduced in:
2.0.0Fixed in: 2.0.13Fix
go get github.com/containerd/containerd/v2@v2.0.13References
- https://github.com/containerd/containerd/security/advisories/GHSA-pg57-6jwg-q645[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-53493[ADVISORY]
- https://github.com/containerd/containerd/commit/4f5f32636d47f051751065cf824a10da70c619fe[FIX]
- https://github.com/containerd/containerd/commit/94e83c14c8aac963e24e28105dab9c9af812a2a8[FIX]
- https://github.com/containerd/containerd/releases/tag/v1.7.36[WEB]
- https://github.com/containerd/containerd/releases/tag/v2.0.13[WEB]
- https://github.com/containerd/containerd/releases/tag/v2.2.9[WEB]
- https://github.com/containerd/containerd/releases/tag/v2.3.6[WEB]
- https://github.com/containerd/containerd/releases/tag/v2.4.1[WEB]