{"id":"containerd-releases-e41328c63044","seq":233487,"kind":"release","title":"containerd 2.3.7","url":"https://github.com/containerd/containerd/releases/tag/v2.3.7","permalink":"https://vulnpulse.app/items/containerd-releases-e41328c63044","summary":"Welcome to the v2.3.7 release of containerd! The seventh patch release for containerd 2.3 contains various fixes and updates including security patches. Security Updates containerd CVE-2026-95839 GHSA-5p7c-hggf-c748 GHSA-8647-2jxj-p2rc GHSA-hc94-p972-ch66 Highlights Container Runtime Interface (CRI) Apply hardening to not follow symlinks for container log files ( #14301 ) Image Distribution Apply hardening to reject image references with \"..\" path components ( #14281 ) Runtime Apply hardening to allowlist socket domains in the default seccomp profile ( #14248 ) Snapshotters Apply hardening to…","severity":null,"techs":["containerd"],"cves":["CVE-2026-95839"],"tags":["security"],"source":{"id":"containerd-releases","name":"containerd Releases"},"published_at":"2026-10-13T22:46:58.000Z","fetched_at":"2026-10-22T13:27:31.223Z"}