{"id":"CGA-4j33-245q-3774","modified":"2026-09-21T22:30:11.303052714Z","published":"2026-09-10T12:39:32Z","upstream":["CVE-2026-53495","GHSA-7jxh-36q5-gcqv","GO-2026-6444"],"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53495.json"},{"type":"FIX","url":"https://github.com/containerd/containerd/commit/22ccf4314d1fe0834f8e28f10d37d5305ef9880c"},{"type":"FIX","url":"https://github.com/containerd/containerd/commit/5a2a3a759b0d2ad8c821b33c3afc20890daf6d81"},{"type":"FIX","url":"https://github.com/containerd/containerd/commit/9ec55f024041d0641f6d79841e45c8781141ddaa"},{"type":"FIX","url":"https://github.com/containerd/containerd/commit/eebea8c4c912f44b656c8295c9e6607a19b76650"},{"type":"FIX","url":"https://github.com/containerd/containerd/commit/ff39a972369e2f12fae561a58d658bbf8f2bc318"},{"type":"WEB","url":"https://github.com/containerd/containerd/releases/tag/v2.0.12"},{"type":"WEB","url":"https://github.com/containerd/containerd/releases/tag/v2.2.8"},{"type":"WEB","url":"https://github.com/containerd/containerd/releases/tag/v2.3.5"},{"type":"ADVISORY","url":"https://github.com/containerd/containerd/security/advisories/GHSA-7jxh-36q5-gcqv"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53495"}],"affected":[{"package":{"name":"k3s-static","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/k3s-static?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"component_purl":"pkg:golang/github.com/containerd/containerd/v2@v2.2.5%2Bdirty","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-09-21T11:41:17Z","component_name":"github.com/containerd/containerd/v2","component_version":"v2.2.5+dirty","component_type":"go-module","component_location":"/usr/bin/containerd-shim-runc-v2"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4j33-245q-3774.json"}},{"package":{"name":"k3s-static","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/k3s-static?arch=x86_64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"ecosystem_specific":{"components":[{"component_name":"github.com/containerd/containerd/v2","component_version":"v2.2.5+dirty","component_type":"go-module","component_location":"/usr/bin/containerd-shim-runc-v2","component_purl":"pkg:golang/github.com/containerd/containerd/v2@v2.2.5%2Bdirty","latest_event_status":"pending_upstream_fix","latest_event_timestamp":"2026-09-21T11:41:17Z"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-4j33-245q-3774.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}