All vulnerabilities
CVE-2026-95839GHSA-vwhp-8p66-mq4f

github.com/containerd/containerd/v2: CVE-2026-95839

github.com/containerd/containerd/v2Containers & cloud
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in2.2.10Also 2.3.7, 2.4.2GitHub
PublishedunknownUpdated 13 Oct 2026GitHub

What fixes it

  • 2.2.10github.com/containerd/containerd/v2, goGitHubgo get github.com/containerd/containerd/v2@v2.2.10
  • 2.3.7github.com/containerd/containerd/v2, goGitHubgo get github.com/containerd/containerd/v2@v2.3.7
  • 2.4.2github.com/containerd/containerd/v2, goGitHubgo get github.com/containerd/containerd/v2@v2.4.2

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Affected versions 1

  • github.com/containerd/containerd/v2, go>= 2.2.0, < 2.2.10, >= 2.3.0, < 2.3.7, >= 2.4.0, < 2.4.2GitHub