https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:46:12.917418+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01715 bdu:2022-01715 2026-10-04T05:46:13.207315+00:00 bdu:2022-01715 https://cve.radiocsirt.org/vuln/bell-cve-2022-23648 Withdrawn: BELL-CVE-2022-23648 — CVE-2022-23648 does not affect BellSoft software 2026-10-04T05:46:13.207359+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-0199 certfr-2024-avi-0199 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-04T05:46:13.207378+00:00 certfr-2024-avi-0199 https://cve.radiocsirt.org/vuln/cleanstart-2025-xk69277 CLEANSTART-2025-XK69277 — containerd is a container runtime available as a daemon for Linux and Windows 2026-10-04T05:46:13.207393+00:00

Affected: CleanStart: containerd

Security vulnerability affects the containerd package. containerd is a container runtime available as a daemon for Linux and Windows.

 https://cve.radiocsirt.org/vuln/cnvd-2022-29292 cnvd-2022-29292 2026-10-04T05:46:13.207420+00:00 cnvd-2022-29292 https://cve.radiocsirt.org/vuln/euvd-2026-13838 EUVD-2026-13838 2026-10-04T05:46:13.207432+00:00 EUVD-2026-13838 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23648 fkie_cve-2022-23648 2026-10-04T05:46:13.207442+00:00

containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd’s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.

 https://cve.radiocsirt.org/vuln/ghsa-crp2-qrr5-8pq7 GHSA-crp2-qrr5-8pq7 — containerd CRI plugin: Insecure handling of image volumes 2026-10-04T05:46:13.207468+00:00

Affected: Go: github.com/containerd/containerd

### Impact

A bug was found in containerd where containers launched through containerd’s CRI implementation with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd’s CRI implementation.

### Patches

This bug has been fixed in containerd 1.6.1, 1.5.10 and 1.4.13. Users should update to these versions to resolve the issue.

### Workarounds

Ensure that only trusted images are used.

### Credits

The containerd project would like to thank Felix Wilhelm of Google Project Zero for responsibly disclosing this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md).

### For more information

If you have any questions or comments about this advisory:

* Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose) * Email us at [security@containerd.io](mailto:security@containerd.io)

 https://cve.radiocsirt.org/vuln/gsd-2022-23648 gsd-2022-23648 2026-10-04T05:46:13.207533+00:00 gsd-2022-23648 https://cve.radiocsirt.org/vuln/msrc_cve-2022-23648 msrc_CVE-2022-23648 — Insecure handling of image volumes in containerd CRI plugin 2026-10-04T05:46:13.207559+00:00 msrc_CVE-2022-23648 https://cve.radiocsirt.org/vuln/oesa-2022-1671 OESA-2022-1671 — containerd security update 2026-10-04T05:46:13.207573+00:00

Affected: openEuler:20.03-LTS-SP1: containerd, openEuler:20.03-LTS-SP3: containerd, openEuler:22.03-LTS: containerd

containerd is an industry-standard container runtime with an emphasis on simplicity, robustness and portability. It is available as a daemon for Linux and Windows, which can manage the complete container lifecycle of its host system: image transfer and storage, container execution and supervision, low-level storage and network attachments, etc.

Security Fix(es):

containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd’s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.(CVE-2022-23648)

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0720-1 openSUSE-SU-2022:0720-1 — Security update for containerd 2026-10-04T05:46:13.207605+00:00

Security update for containerd

 https://cve.radiocsirt.org/vuln/suse-su-2022:0719-1 SUSE-SU-2022:0719-1 — Security update for containerd 2026-10-04T05:46:13.207620+00:00

Security update for containerd

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23648 UBUNTU-CVE-2022-23648 2026-10-04T05:46:13.207633+00:00

Affected: Ubuntu:18.04:LTS: containerd, Ubuntu:20.04:LTS: containerd, Ubuntu:22.04:LTS: containerd

containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd’s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 WID-SEC-W-2022-1375 — JFrog Artifactory: Mehrere Schwachstellen 2026-10-04T05:46:13.207658+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.