{"schema":"threatline.record/2","record":{"id":"CVE-2026-95839","aliases":["GHSA-vwhp-8p66-mq4f"],"summary":"","details":"","categories":["Containers & cloud"],"product":"github.com/containerd/containerd/v2","vendor":"","ecosystem":null,"affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/containerd/containerd/security/advisories/GHSA-vwhp-8p66-mq4f","source_modified_at":"2026-10-13T22:52:05Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"go","name":"github.com/containerd/containerd/v2"},"range":">= 2.2.0, < 2.2.10, >= 2.3.0, < 2.3.7, >= 2.4.0, < 2.4.2"}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/containerd/containerd/security/advisories/GHSA-vwhp-8p66-mq4f","source_modified_at":"2026-10-13T22:52:05Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"go","name":"github.com/containerd/containerd/v2"},"version":"2.2.10"},{"source":"GitHub Advisory Database","source_url":"https://github.com/containerd/containerd/security/advisories/GHSA-vwhp-8p66-mq4f","source_modified_at":"2026-10-13T22:52:05Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"go","name":"github.com/containerd/containerd/v2"},"version":"2.3.7"},{"source":"GitHub Advisory Database","source_url":"https://github.com/containerd/containerd/security/advisories/GHSA-vwhp-8p66-mq4f","source_modified_at":"2026-10-13T22:52:05Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"ecosystem":"go","name":"github.com/containerd/containerd/v2"},"version":"2.4.2"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":null,"modified_at":"2026-10-13T22:52:05Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/containerd/containerd/security/advisories/GHSA-vwhp-8p66-mq4f","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-13T22:52:05Z"}],"sources":["GitHub Advisory Database"],"references":[],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-13T22:52:05Z","content_hash":"431a3a9e86a1fc0952366e929a56d1ab71b92d2355a44b8de664edc43dcd4b84"}}