Package
k8sgpt
Component
github.com/containerd/containerd
Latest update
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
GHSA-rgh6-rfwx-v388 (CVE-2026-53489) affects only the Go module github.com/containerd/containerd/v2 (versions 2.1.0-2.1.8, 2.2.0-2.2.4, 2.3.0-2.3.1), a distinct module path from github.com/containerd/containerd (v1.x) that this component vendors. The vulnerable CRI checkpoint/restore functionality was introduced in containerd 2.x and does not exist in the 1.x codebase; CheckpointContainer is an unimplemented stub through the final 1.7.x release, 1.7.35. No upstream containerd 1.x release, including 1.7.35, lists this CVE in its security advisories.
Status
Status
Fixed version
0.4.38-r3Status
Impact
Waiting on upstream to publish a fixed version for this vulnerability.
Status
Status
Fixed version
0.4.35-r0Status