—
GO-2026-5758
containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd
Details
containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/containerd/containerd
Introduced in:
1.7.0 Fixed in: 1.7.33 Fix
go get github.com/containerd/containerd@v1.7.33 Go / github.com/containerd/containerd/v2
Introduced in:
2.0.0 Fixed in: 2.0.10 Fix
go get github.com/containerd/containerd/v2@v2.0.10