GO-2025-3699
Allows host filesystem access on pull in github.com/containerd/containerd
At a glance
- Published
- Updated
- CVE
- CVE-2025-47290
- Aliases
- GHSA-cm76-qm8v-3j95
Description
Allows host filesystem access on pull in github.com/containerd/containerd
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/containerd/containerd/v2 | introduced 2.1.0, fixed 2.1.1 |
References
- https://github.com/containerd/containerd/security/advisories/GHSA-cm76-qm8v-3j95 ADVISORY
- https://github.com/containerd/containerd/commit/cada13298fba85493badb6fecb6ccf80e49673cc FIX
- https://github.com/containerd/containerd/releases/tag/v2.1.1 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |