StackRadar

CVE-2026-47262

Medium

Advisory

Published 19 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
191
of 17,781 indexed, latest versions
Container images
199
deployed by those charts
Fix available
2 of 3
affected packages

containerd image-triggered runtime DoS via unbounded group parsing

Carried by container images the latest versions of 191 of 17,781 indexed charts deploy, on 199 images.

Affected packageAffected versionsFixed inImages
github.com/containerd/containerdgolangv1.7.0, v1.7.1, v1.7.2, v1.7.3+23 more1.7.33175
github.com/containerd/containerd/v2golangv2.0.2, v2.0.4, v2.1.1, v2.1.3+10 more2.0.10, 2.1.9, 2.2.5, 2.3.230
containerddeb1.6.20~ds1-1+deb12u3no fix listed1
OSV records
DEBIAN-CVE-2026-47262GHSA-jpcc-p29g-p8mq
Also known as
GO-2026-5475

Charts affected

191 by stars
ChartLatestAffected imagesRadar Score
agent-control-cdnewrelic1.0.02 of 3See more

agent-control-cd newrelic 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/helm-controller:v1.2.062eaa9c9a929
github.com/containerd/containerd@v1.7.24
1.7.33
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/containerd/containerd@v1.7.24
1.7.33

Open the chart page →

5,034
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
github.com/containerd/containerd@v1.7.27
1.7.33

Open the chart page →

17,070
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
github.com/containerd/containerd/v2@v2.0.4
2.0.10

Open the chart page →

6,037
pro-builderopenfaas0.6.131 of 2See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
github.com/containerd/containerd/v2@v2.2.3
2.2.5

Open the chart page →

2,726
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/containerd/containerd@v1.7.23
1.7.33

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/containerd/containerd@v1.7.29
1.7.33

Open the chart page →

4,127
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/containerd/containerd@v1.7.30
1.7.33
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/containerd/containerd@v1.7.30
1.7.33

Open the chart page →

1,821
opslevelopslevelVerified publisher2025.1.221 of 10See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
replicated/replicated-sdk:1.0.0-beta.318751b4963250
github.com/containerd/containerd@v1.7.12
1.7.33

Open the chart page →

5,554
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
github.com/containerd/containerd@v1.7.11
1.7.33
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/containerd/containerd@v1.7.27
github.com/containerd/containerd/v2@v2.1.1
1.7.33
2.1.9

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
github.com/containerd/containerd@v1.7.11
1.7.33

Open the chart page →

6,583
parcaparca-rr0.1.01 of 2See more

parca parca-rr 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
github.com/containerd/containerd@v1.7.27
1.7.33

Open the chart page →

2,366
pixie-operator-chartpixie0.1.71 of 3See more

pixie-operator-chart pixie 0.1.7

1 of the 3 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned1b6002156f56
github.com/containerd/containerd@v1.7.11
1.7.33

Open the chart page →

1,899
planectlplanectlVerified publisher0.7.03 of 10See more

planectl planectl 0.7.0

3 of the 10 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
github.com/containerd/containerd@v1.7.13
1.7.33
gitea/act_runner:0.2.11c57233403eff
github.com/containerd/containerd@v1.7.13
1.7.33
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/containerd/containerd@v1.7.23
1.7.33

Open the chart page →

25,934
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/containerd/containerd@v1.7.24
1.7.33

Open the chart page →

11,151
tenant-namespace-operatorpnnl-miscscripts0.1.281 of 1See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
github.com/containerd/containerd@v1.7.28
1.7.33

Open the chart page →

12,754
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
github.com/containerd/containerd@v1.7.29
1.7.33

Open the chart page →

2,751
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
github.com/containerd/containerd@v1.7.29
1.7.33

Open the chart page →

3,270
headlampradar-baseVerified publisher1.0.01 of 1See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
github.com/containerd/containerd@v1.7.32
1.7.33

Open the chart page →

613
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
github.com/containerd/containerd@v1.7.27
1.7.33

Open the chart page →

1,837
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/containerd/containerd@v1.7.0
1.7.33

Open the chart page →

16,047
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/containerd/containerd@v1.7.20
1.7.33

Open the chart page →

7,084
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/containerd/containerd@v1.7.11
1.7.33

Open the chart page →

4,038
mailserverrock8sVerified publisher0.1.21 of 1See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
github.com/containerd/containerd@v1.7.6
1.7.33

Open the chart page →

1,946
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/containerd/containerd@v1.7.18
1.7.33

Open the chart page →

9,607
devtron-enterpriseromholdings48.0.03 of 28See more

devtron-enterprise romholdings 48.0.0

3 of the 28 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
github.com/containerd/containerd@v1.7.30
1.7.33
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/containerd/containerd@v1.7.5
1.7.33
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
github.com/containerd/containerd@v1.7.29
1.7.33

Open the chart page →

68,240
devtron-operatorromholdings0.23.32 of 11See more

devtron-operator romholdings 0.23.3

2 of the 11 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
github.com/containerd/containerd@v1.7.30
1.7.33
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
github.com/containerd/containerd@v1.7.29
1.7.33

Open the chart page →

32,902
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/containerd/containerd@v1.7.28
1.7.33

Open the chart page →

5,819
olmsikalabs0.3.01 of 2See more

olm sikalabs 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned40d0363f4aa6
github.com/containerd/containerd@v1.7.16
1.7.33

Open the chart page →

1,146
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
github.com/containerd/containerd@v1.7.19
1.7.33

Open the chart page →

2,429
harborsoftonic1.13.01 of 8See more

harbor softonic 1.13.0

1 of the 8 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/containerd/containerd@v1.7.0
1.7.33

Open the chart page →

7,672
trivy-operatorsoftonic0.18.01 of 1See more

trivy-operator softonic 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/containerd/containerd@v1.7.3
1.7.33

Open the chart page →

2,505
switchbladeswitchblade0.0.191 of 1See more

switchblade switchblade 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
github.com/containerd/containerd@v1.7.12
1.7.33

Open the chart page →

1,360
act-runnertektonops0.1.22 of 2See more

act-runner tektonops 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
gitea/act_runner:nightly7940221bcfc9
github.com/containerd/containerd@v1.7.29
1.7.33
library/docker:23.0.6-dindafa5d5134900
github.com/containerd/containerd@v1.7.2
1.7.33

Open the chart page →

4,212
terminusterminusVerified publisher1.1.01 of 1See more

terminus terminus 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
github.com/containerd/containerd/v2@v2.2.2
2.2.5

Open the chart page →

631
orchestratremolo3.1.551 of 5See more

orchestra tremolo 3.1.55

1 of the 5 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.42.0c9754bae1d79
github.com/containerd/containerd@v1.7.30
1.7.33

Open the chart page →

7,637
trident-protecttrident-protect100.2606.01 of 2See more

trident-protect trident-protect 100.2606.0

1 of the 2 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
github.com/containerd/containerd@v1.7.27
1.7.33

Open the chart page →

1,331
trident-protect-consoletrident-protect100.2608.0-console1 of 3See more

trident-protect-console trident-protect 100.2608.0-console

1 of the 3 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
github.com/containerd/containerd@v1.7.27
1.7.33

Open the chart page →

1,322
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/containerd/containerd@v1.7.16
1.7.33

Open the chart page →

2,477
traceetrivy-operator0.24.11 of 1See more

tracee trivy-operator 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
aquasec/tracee:0.24.1cfbbfee972e6
github.com/containerd/containerd@v1.7.29
1.7.33

Open the chart page →

1,074
tfy-karpentertruefoundryVerified publisher0.5.111 of 3See more

tfy-karpenter truefoundry 0.5.11

1 of the 3 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/eks/eks-node-monitoring-agent:v1.5.1-eksbuild.1988c8e1a273a
github.com/containerd/containerd@v1.7.30
1.7.33

Open the chart page →

645
rancherwenerme2.15.12 of 2See more

rancher wenerme 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-47262.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
github.com/containerd/containerd/v2@v2.3.2-k3s2
2.3.2
rancher/shell:v0.8.1f293af9c635f
github.com/containerd/containerd@v1.7.32
github.com/containerd/containerd/v2@v2.2.4
1.7.33
2.2.5

Open the chart page →

1,456

Container images carrying it

199 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
beopenit/door-agent:v3.0.5d24c323fe7c3
github.com/containerd/containerd@v1.7.24
1.7.33
1
concourse/concourse:8.3.040a143ce5873
github.com/containerd/containerd/v2@v2.3.1
2.3.2
1
datadog/agent:6aad9994de6a7
github.com/containerd/containerd@v1.7.13
1.7.33
1
drone/drone:2.28.255897c8fb22d
github.com/containerd/containerd@v1.7.29
1.7.33
1
epamedp/edp-headlamp:0.25.093417e18bb1a
github.com/containerd/containerd@v1.7.13
1.7.33
1
falcosecurity/falco:0.44.1d0cfe422d6ac
github.com/containerd/containerd/v2@v2.1.5
2.1.9
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
github.com/containerd/containerd/v2@v2.1.5
2.1.9
1
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/containerd/containerd@v1.7.27
1.7.33
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/containerd/containerd@v1.7.22
1.7.33
1
gitea/act_runner:nightly7940221bcfc9
github.com/containerd/containerd@v1.7.29
1.7.33
1
gitea/act_runner:0.3.1c2a169c5e998
github.com/containerd/containerd@v1.7.29
1.7.33
1
gitea/act_runner:0.2.11c57233403eff
github.com/containerd/containerd@v1.7.13
1.7.33
1
goharbor/harbor-acceld:0.2.13451103a6c8d8
github.com/containerd/containerd@v1.7.11
1.7.33
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/containerd/containerd@v1.7.29
github.com/containerd/containerd/v2@v2.2.0
1.7.33
2.2.5
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/containerd/containerd@v1.7.0
1.7.33
1
hiversh/controller:0.1.45b0b85f8942c7
containerd@1.6.20~ds1-1+deb12u3
no fix listed
1
inseefrlab/shelly:cloudshell31f04ca7436b
github.com/containerd/containerd@v1.7.6
1.7.33
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/containerd/containerd@v1.7.28
1.7.33
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
github.com/containerd/containerd@v1.7.7
1.7.33
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
github.com/containerd/containerd/v2@v2.1.3
2.1.9
1
kubesphere/ks-extensions-museum:latest29681958f220
github.com/containerd/containerd@v1.7.11
1.7.33
1
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/containerd/containerd@v1.7.11
1.7.33
1
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/containerd/containerd@v1.7.23
1.7.33
1
layer5/meshery:stable-latest78a8be21bef3
github.com/containerd/containerd@v1.7.27
1.7.33
1
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/containerd/containerd@v1.7.6
1.7.33
1
layer5/meshery-istio:stable-latestfde47c141ec6
github.com/containerd/containerd@v1.7.11
1.7.33
1
layer5/meshery-linkerd:stable-latestb99c73bac1f5
github.com/containerd/containerd@v1.7.11
1.7.33
1
library/docker:24.0.2-dind1d148deae16a
github.com/containerd/containerd@v1.7.2
1.7.33
1
library/docker:28.5.2-dind2a232a42256f
github.com/containerd/containerd/v2@v2.1.4
2.1.9
1
library/docker:27-cli851f91d24121
github.com/containerd/containerd/v2@v2.0.2
2.0.10
1
library/docker:27-dindaa3df78ecf32
github.com/containerd/containerd@v1.7.24
github.com/containerd/containerd/v2@v2.0.2
1.7.33
2.0.10
1
library/docker:23.0.6-dindafa5d5134900
github.com/containerd/containerd@v1.7.2
1.7.33
1
library/docker:26.1-dinddd43b430341a
github.com/containerd/containerd@v1.7.19
1.7.33
1
library/telegraf:1.27507a3eecf809
github.com/containerd/containerd@v1.7.3
1.7.33
1
logiqai/flash:v3.10.265b996bc7bdc
github.com/containerd/containerd@v1.7.11
1.7.33
1
mavrick1/kubestellar-b:latest45ca0429a1d4
github.com/containerd/containerd@v1.7.27
1.7.33
1
moby/buildkit:v0.31.0a095b3d11ce1
github.com/containerd/containerd/v2@v2.2.4
2.2.5
1
netbirdio/management:0.45.10c9994b393ea
github.com/containerd/containerd@v1.7.26
1.7.33
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
github.com/containerd/containerd@v1.7.27
1.7.33
1
phntom/chartmuseum:v0.16.053883b65d9b7
github.com/containerd/containerd@v1.7.0
1.7.33
1
platzio/backend:v0.6.5d5e5972f344b
github.com/containerd/containerd@v1.7.27
1.7.33
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/containerd/containerd@v1.7.24
1.7.33
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
github.com/containerd/containerd@v1.7.28
1.7.33
1
prowlercloud/prowler-api:5.31.14f252d579be2
github.com/containerd/containerd/v2@v2.3.1
2.3.2
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/containerd/containerd@v1.7.6-k3s1
1.7.33
1
replicated/replicated-sdk:1.0.0-beta.318751b4963250
github.com/containerd/containerd@v1.7.12
1.7.33
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
github.com/containerd/containerd@v1.7.12
1.7.33
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/containerd/containerd@v1.7.12
1.7.33
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
github.com/containerd/containerd@v1.7.12
1.7.33
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/containerd/containerd@v1.7.27
github.com/containerd/containerd/v2@v2.1.1
1.7.33
2.1.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.