CVE-2026-53493

UNKNOWN

Description

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability. Versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1 fix the issue.

Timeline

Published:September 25th, 2026 1:16 AM

Last modified:September 28th, 2026 3:17 PM

CVSS Scoring

No CVSS v3 score available

Weaknesses (CWE)

CWE-400 CWE-770 CWE-834

References & Reports

Advisories, patches, and third-party reports

https://github.com/containerd/containerd/security/advisories/GHSA-pg57-6jwg-q645

Source: NIST NVD · Data may lag official sources by up to one minute