Containerd has image-pull DoS via crafted OCI index graph amplification
cve-program ·
Vendor product: containerd
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: containerd
cve-program ·
Vendor product: habitica
cve-program ·
Vendor product: zitadel
cve-program ·
Vendor product: dozzle
cve-program ·
Vendor product: TREK
cve-program ·
Vendor product: kyverno
cve-program ·
Vendor product: froxlor
cve-program ·
Vendor product: Boot Optimized Server Storage (BOSS)
cve-program ·
Vendor product: froxlor
cve-program ·
Vendor product: froxlor
cve-program ·
Vendor product: DIR-895L
cve-program ·
Vendor product: dbgate
cve-program ·
Vendor product: InvoicePlane
cve-program ·
Vendor product: redis-parser
cve-program ·
Vendor product: Piwigo
cve-program ·
Vendor product: horilla-hr
cve-program ·
Vendor product: sharp
cve-program ·
Vendor product: LibreOffice
cve-program ·
Vendor product: REST API
cve-program ·
Vendor product: heym
osv ·
npm: code-ollama
osv · CVE-2026-61834
npm: scim-patch
cve-program ·
Vendor product: cloudreve
cve-program ·
Vendor product: python-utcp
cve-program ·
Vendor product: LibreOffice
cve-program ·
Vendor product: CloudClassroom-PHP-Project
cve-program ·
Vendor product: NR289-GE
cve-program ·
Vendor product: AzuraCast
cve-program ·
Vendor product: MONAI
cve-program ·
Vendor product: MONAI
cve-program ·
Vendor product: CloudClassroom-PHP-Project
cve-program ·
Vendor product: vm2
cve-program ·
Vendor product: InvoicePlane
cve-program ·
Vendor product: obot
cve-program ·
Vendor product: horilla-hr
cve-program ·
Vendor product: Coolify
cve-program ·
Vendor product: contrast
cve-program ·
Vendor product: nezha
cve-program ·
Vendor product: nezha
cve-program ·
Vendor product: rabbitmq-server
cve-program ·
Vendor product: CliInvoke · Vendor product: AlastairLundy.CliInvoke
cve-program ·
Vendor product: StarTraining
cve-program ·
Vendor product: rabbitmq-server
cve-program ·
Vendor product: heym
cve-program ·
Vendor product: glpi
cve-program ·
Vendor product: heym
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.