StackRadar

CVE-2024-40635

Medium

Advisory

Published 17 Mar 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.6
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
292
of 17,781 indexed, latest versions
Container images
279
deployed by those charts
Fix available
2 of 2
affected packages

containerd has an integer overflow in User ID handling

Carried by container images the latest versions of 292 of 17,781 indexed charts deploy, on 279 images.

Affected packageAffected versionsFixed inImages
github.com/containerd/containerdgolangv1.3.0, v1.3.2, v1.3.3, v1.3.4+56 more1.6.38, 1.7.27277
github.com/containerd/containerd/v2golangv2.0.22.0.43
OSV records
GHSA-265r-hfxg-fhmg
Also known as
GO-2025-3528

Charts affected

292 by stars
ChartLatestAffected imagesRadar Score
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/containerd/containerd@v1.6.12-k3s1
1.6.38

Open the chart page →

2,453
keelkeel1.2.21 of 1See more

keel keel 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
ghcr.io/keel-hq/keel:0.22.3315e188a07c2
github.com/containerd/containerd@v1.7.24
1.7.27

Open the chart page →

809
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/containerd/containerd@v1.5.10
1.6.38

Open the chart page →

16,251
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/containerd/containerd@v1.3.3
1.6.38

Open the chart page →

11,384
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
netbirdio/management:0.45.10c9994b393ea
github.com/containerd/containerd@v1.7.26
1.7.27

Open the chart page →

8,390
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/containerd/containerd@v1.6.6
1.6.38

Open the chart page →

4,167
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/containerd/containerd@v1.6.6
1.6.38

Open the chart page →

32,902
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
github.com/containerd/containerd@v1.7.24
1.7.27

Open the chart page →

23,228
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/containerd/containerd@v1.5.4
1.6.38

Open the chart page →

14,893
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/containerd/containerd@v1.3.0
1.6.38

Open the chart page →

4,154
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
github.com/containerd/containerd@v1.6.8
1.6.38

Open the chart page →

6,849
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
github.com/containerd/containerd@v1.7.12
1.7.27

Open the chart page →

4,531
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/containerd/containerd@v1.4.4
1.6.38

Open the chart page →

2,409
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/containerd/containerd@v1.3.3
1.6.38

Open the chart page →

6,168
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
library/traefik:2.5.47d0228d19042
github.com/containerd/containerd@v1.3.2
1.6.38

Open the chart page →

52,919
drone-runner-dockerdroneVerified publisher0.7.02 of 3See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
github.com/containerd/containerd@v1.3.4
1.6.38
library/docker:20-dindaf96c680a7e1
github.com/containerd/containerd@v1.6.16-0.20230124210447-1709cfe273d9
1.6.38

Open the chart page →

5,674
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.11 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

1 of the 2 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
github.com/containerd/containerd@v1.7.18
1.7.27

Open the chart page →

5,468
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.24d9fce2c050e
github.com/containerd/containerd@v1.7.1
1.7.27

Open the chart page →

19,337
aperture-controlleraperture2.34.01 of 5See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/containerd/containerd@v1.6.1
1.6.38

Open the chart page →

4,663
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/containerd/containerd@v1.5.7
1.6.38

Open the chart page →

9,052
cert-managerchoerodon1.8.21 of 4See more

cert-manager choerodon 1.8.2

1 of the 4 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/containerd/containerd@v1.5.10
1.6.38

Open the chart page →

7,775
dapr-dashboarddapr0.15.01 of 1See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
daprio/dashboard:0.15.04be696707bd1
github.com/containerd/containerd@v1.6.18
1.6.38

Open the chart page →

1,301
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/containerd/containerd@v1.7.1
1.7.27

Open the chart page →

11,582
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/containerd/containerd@v1.6.15
1.6.38

Open the chart page →

3,675
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
github.com/containerd/containerd@v1.7.12
1.7.27

Open the chart page →

2,160
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/containerd/containerd@v1.6.26
1.6.38

Open the chart page →

3,793
feedbacksystemthm-mni-iiVerified publisher0.47.12 of 10See more

feedbacksystem thm-mni-ii 0.47.1

2 of the 10 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
library/docker:20.10.21-dind3153fa63f546
github.com/containerd/containerd@v1.6.10
1.6.38
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/containerd/containerd@v1.7.12
1.7.27

Open the chart page →

28,534
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
github.com/containerd/containerd@v1.3.2
1.6.38

Open the chart page →

4,136
traefik-meshtraefikOfficialVerified publisher4.1.11 of 7See more

traefik-mesh traefik 4.1.1

1 of the 7 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
github.com/containerd/containerd@v1.5.8
1.6.38

Open the chart page →

9,257
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/containerd/containerd@v1.7.0
1.7.27

Open the chart page →

10,315
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/containerd/containerd@v1.6.2
1.6.38

Open the chart page →

4,039
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
github.com/containerd/containerd@v1.6.15
1.6.38

Open the chart page →

14,917
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/containerd/containerd@v1.3.3
1.6.38

Open the chart page →

10,730
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/containerd/containerd@v1.4.1
1.6.38
hyperledger/fabric-tools:2.4b1194f509085
github.com/containerd/containerd@v1.4.1
1.6.38

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/containerd/containerd@v1.4.1
1.6.38
hyperledger/fabric-tools:2.4b1194f509085
github.com/containerd/containerd@v1.4.1
1.6.38

Open the chart page →

77,687
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/containerd/containerd@v1.7.6
1.7.27

Open the chart page →

2,898
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/containerd/containerd@v1.3.2
1.6.38

Open the chart page →

7,830
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220201 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

1 of the 9 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/containerd/containerd@v1.3.4
1.6.38

Open the chart page →

4,256
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/containerd/containerd@v1.7.24
1.7.27

Open the chart page →

10,037
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/containerd/containerd@v1.3.2
1.6.38

Open the chart page →

7,303
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/containerd/containerd@v1.6.3
1.6.38

Open the chart page →

2,969
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/containerd/containerd@v1.6.14
1.6.38

Open the chart page →

5,598
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/containerd/containerd@v1.3.2
1.6.38

Open the chart page →

7,779
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
prom/prometheus:v2.21.0d43417c260e5
github.com/containerd/containerd@v1.3.4
1.6.38

Open the chart page →

10,454
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
github.com/containerd/containerd@v1.7.2
1.7.27

Open the chart page →

2,576
dockyarddockyardVerified publisher0.4.01 of 1See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/containerd/containerd@v1.7.22
1.7.27

Open the chart page →

1,542
dragonfly-stackdragonflyVerified publisher0.1.22 of 7See more

dragonfly-stack dragonfly 0.1.2

2 of the 7 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/containerd/containerd@v1.6.26
1.6.38
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/containerd/containerd@v1.6.6
1.6.38

Open the chart page →

18,376
nydus-snapshotterdragonflyVerified publisher0.0.101 of 2See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/containerd/containerd@v1.6.6
1.6.38

Open the chart page →

3,658
fsmfsmOfficialVerified publisher0.2.111 of 5See more

fsm fsm 0.2.11

1 of the 5 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
flomesh/fsm-manager:0.2.1122f849c70b25
github.com/containerd/containerd@v1.6.18
1.6.38

Open the chart page →

4,215
otel-collectorgeek-cookbookVerified publisher1.2.21 of 1See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-40635.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/containerd/containerd@v1.5.9
1.6.38

Open the chart page →

2,556

Container images carrying it

279 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/containerd/containerd@v1.5.1
1.6.38
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/containerd/containerd@v1.4.3
1.6.38
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
github.com/containerd/containerd@v1.6.19
1.6.38
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/containerd/containerd@v1.5.13
1.6.38
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/containerd/containerd@v1.7.23
1.7.27
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/containerd/containerd@v1.3.2
1.6.38
1
quay.io/jetstack/cert-manager-ctl:v1.13.24d9fce2c050e
github.com/containerd/containerd@v1.7.1
1.7.27
1
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/containerd/containerd@v1.5.10
1.6.38
1
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/containerd/containerd@v1.5.10
1.6.38
1
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/containerd/containerd@v1.7.0
1.7.27
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/containerd/containerd@v1.6.26
1.6.38
1
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/containerd/containerd@v1.4.1
1.6.38
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/containerd/containerd@v1.7.6
1.7.27
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
github.com/containerd/containerd@v1.4.11
1.6.38
1
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
github.com/containerd/containerd@v1.7.12
1.7.27
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/containerd/containerd@v1.3.3
1.6.38
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/containerd/containerd@v1.5.7
1.6.38
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/containerd/containerd@v1.7.0
1.7.27
1
quay.io/operator-framework/olm1b6002156f56
github.com/containerd/containerd@v1.7.11
1.7.27
1
quay.io/operator-framework/olm40d0363f4aa6
github.com/containerd/containerd@v1.7.16
1.7.27
1
quay.io/operator-framework/olmf9ea8cef95ac
github.com/containerd/containerd@v1.6.18
1.6.38
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/containerd/containerd@v1.6.1
1.6.38
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/containerd/containerd@v1.6.1
1.6.38
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/containerd/containerd@v1.5.1
1.6.38
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/containerd/containerd@v1.4.3
1.6.38
1
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
github.com/containerd/containerd@v1.4.13
1.6.38
1
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
github.com/containerd/containerd@v1.4.13
1.6.38
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/containerd/containerd@v1.7.6
1.7.27
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/containerd/containerd@v1.5.7
1.6.38
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.