[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-25621":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":27,"downstream":28,"duplicates":53,"related":54,"reserved_at":9,"published_at":118,"modified_at":119,"state":120,"summary":121,"references_raw":130,"kevs":162,"epss":163,"epss_history":166,"metrics":371,"affected":384},"CVE-2024-25621","containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths `/var/lib/containerd`, `/run/containerd/io.containerd.grpc.v1.cri` and `/run/containerd/io.containerd.sandbox.controller.v1.shim` were all created with incorrect permissions. This issue is fixed in versions 1.7.29, 2.0.7, 2.1.5 and 2.2.0. Workarounds include updating system administrator permissions so the host can manually chmod the directories to not have group or world accessible permissions, or to run containerd in rootless mode.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-279","Incorrect Execution-Assigned Permissions","While it is executing, the product sets the permissions of an object in a way that violates the intended permissions that have been specified by the user.","weakness","Draft","Variant",[19],{"id":20,"name":21,"techniques":22},"CAPEC-81","Web Server Logs Tampering",[],[],[25,26],"GHSA-pwhc-rpq9-4c8w","GO-2025-4100",[],[29,31,33,35,37,39,41,43,45,47,49,51],{"_key":30},"UBUNTU-CVE-2024-25621",{"_key":32},"DLA-4467-1",{"_key":34},"SUSE-SU-2025:4288-1",{"_key":36},"OPENSUSE-SU-2025:15726-1",{"_key":38},"DSA-6067-1",{"_key":40},"SUSE-SU-2025:21042-1",{"_key":42},"SUSE-SU-2025:21057-1",{"_key":44},"SUSE-SU-2025:4072-1",{"_key":46},"MGASA-2026-0030",{"_key":48},"USN-7983-1",{"_key":50},"DEBIAN-CVE-2024-25621",{"_key":52},"OPENSUSE-SU-2026:21213-1",[],[55,56,57,58,59,60,61,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116],{"_key":34},{"_key":36},{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":52},{"_key":63},"CGA-2CG9-6PGQ-MJGW",{"_key":65},"CGA-2Q5C-X727-9V2X",{"_key":67},"CGA-33QM-72GG-8W7G",{"_key":69},"CGA-46FG-RJ8C-M788",{"_key":71},"CGA-4MG8-37J5-JJ8W",{"_key":73},"CGA-4RJW-G8GG-H5C2",{"_key":75},"CGA-5GVM-3CHQ-599P",{"_key":77},"CGA-6CV3-2W4X-PR67",{"_key":79},"CGA-6M44-QQJW-W2XH",{"_key":81},"CGA-7XXQ-G6R3-8575",{"_key":83},"CGA-824V-V9WH-H3R4",{"_key":85},"CGA-8PFR-3MCQ-P8W4",{"_key":87},"CGA-C7WR-7CVV-PWQV",{"_key":89},"CGA-FHWQ-RGJC-MJR7",{"_key":91},"CGA-G32F-FV9G-53GR",{"_key":93},"CGA-G3X3-8WGQ-75M7",{"_key":95},"CGA-G7M5-MXWC-M9W9",{"_key":97},"CGA-GCRM-JG5R-JMR6",{"_key":99},"CGA-H3RX-P296-W36V",{"_key":101},"CGA-JJF4-X2J2-4MG3",{"_key":103},"CGA-M4RM-469C-FWMX",{"_key":105},"CGA-MX22-9JW5-FHXR",{"_key":107},"CGA-P6QQ-98RX-W9PP",{"_key":109},"CGA-QG84-42M7-5HX9",{"_key":111},"CGA-R8HR-6C66-HW45",{"_key":113},"CGA-V4XR-492W-8P8H",{"_key":115},"CGA-WP4F-G6MH-4478",{"_key":117},"CGA-XQCG-J7RR-43XJ","2025-11-06T18:36:21.566Z","2025-11-06T19:35:13.415Z","Analyzed",{"cisa_kev":122,"cisa_ransomware":122,"cisa_vendor":9,"epss_severity":123,"epss_score":124,"severity":125,"severity_score":126,"severity_version":127,"severity_source":128,"severity_vector":129,"severity_status":120},false,"low",0.00159,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[131,142,148,153,157],{"url":132,"sources":133,"tags":136},"https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w",[134,128,135],"cve.org","osv_go",[137,138,139,140,141],"X Refsource CONFIRM","Patch","Vendor Advisory","WEB","Advisory",{"url":143,"sources":144,"tags":145},"https://github.com/containerd/containerd/commit/7c59e8e9e970d38061a77b586b23655c352bfec5",[134,128,135],[146,138,140,147],"X Refsource MISC","FIX",{"url":149,"sources":150,"tags":151},"https://github.com/containerd/containerd/blob/main/docs/rootless.md",[134,128,135],[146,152,140],"Product",{"url":154,"sources":155,"tags":156},"https://nvd.nist.gov/vuln/detail/CVE-2024-25621",[135],[141],{"url":158,"sources":159,"tags":160},"https://github.com/containerd/containerd",[135],[161],"PACKAGE",[],{"date":164,"score":124,"percentile":165},"2026-07-06",0.05472,[167,171,174,177,179,182,185,187,189,191,193,195,199,202,205,207,209,211,214,216,218,220,223,225,227,229,231,233,235,237,239,241,245,248,251,253,255,257,260,262,264,266,268,270,272,274,276,278,280,282,284,287,289,291,293,295,297,299,301,303,305,307,309,311,313,315,317,320,323,326,328,330,332,335,337,339,342,344,346,348,350,353,355,357,359,361,363,365,367,369],{"date":168,"score":169,"percentile":170},"2025-11-07",0.00004,0.00153,{"date":172,"score":169,"percentile":173},"2025-11-08",0.00154,{"date":175,"score":169,"percentile":176},"2025-11-09",0.00155,{"date":178,"score":169,"percentile":170},"2025-11-10",{"date":180,"score":169,"percentile":181},"2025-11-11",0.00156,{"date":183,"score":169,"percentile":184},"2025-11-12",0.0016,{"date":186,"score":169,"percentile":184},"2025-11-13",{"date":188,"score":169,"percentile":184},"2025-11-14",{"date":190,"score":169,"percentile":184},"2025-11-15",{"date":192,"score":169,"percentile":184},"2025-11-16",{"date":194,"score":169,"percentile":184},"2025-11-17",{"date":196,"score":197,"percentile":198},"2025-11-18",0.00009,0.00323,{"date":200,"score":197,"percentile":201},"2025-11-19",0.00326,{"date":203,"score":169,"percentile":204},"2025-11-20",0.00121,{"date":206,"score":169,"percentile":124},"2025-11-21",{"date":208,"score":169,"percentile":124},"2025-11-22",{"date":210,"score":169,"percentile":124},"2025-11-23",{"date":212,"score":169,"percentile":213},"2025-11-24",0.00158,{"date":215,"score":169,"percentile":213},"2025-11-25",{"date":217,"score":169,"percentile":213},"2025-11-26",{"date":219,"score":169,"percentile":213},"2025-11-27",{"date":221,"score":169,"percentile":222},"2025-11-28",0.00157,{"date":224,"score":169,"percentile":213},"2025-11-29",{"date":226,"score":169,"percentile":213},"2025-11-30",{"date":228,"score":169,"percentile":213},"2025-12-01",{"date":230,"score":169,"percentile":181},"2025-12-02",{"date":232,"score":169,"percentile":222},"2025-12-03",{"date":234,"score":169,"percentile":181},"2025-12-04",{"date":236,"score":169,"percentile":181},"2025-12-05",{"date":238,"score":169,"percentile":222},"2025-12-06",{"date":240,"score":169,"percentile":222},"2025-12-07",{"date":242,"score":243,"percentile":244},"2025-12-08",0.00005,0.00184,{"date":246,"score":243,"percentile":247},"2025-12-09",0.00186,{"date":249,"score":243,"percentile":250},"2025-12-10",0.00185,{"date":252,"score":243,"percentile":250},"2025-12-11",{"date":254,"score":243,"percentile":247},"2025-12-12",{"date":256,"score":243,"percentile":250},"2025-12-13",{"date":258,"score":243,"percentile":259},"2025-12-14",0.00183,{"date":261,"score":243,"percentile":259},"2025-12-15",{"date":263,"score":243,"percentile":259},"2025-12-16",{"date":265,"score":243,"percentile":259},"2025-12-17",{"date":267,"score":243,"percentile":244},"2025-12-18",{"date":269,"score":243,"percentile":259},"2025-12-19",{"date":271,"score":243,"percentile":259},"2025-12-20",{"date":273,"score":243,"percentile":259},"2025-12-21",{"date":275,"score":243,"percentile":259},"2025-12-22",{"date":277,"score":243,"percentile":259},"2025-12-23",{"date":279,"score":243,"percentile":259},"2025-12-24",{"date":281,"score":243,"percentile":244},"2025-12-25",{"date":283,"score":243,"percentile":244},"2025-12-26",{"date":285,"score":243,"percentile":286},"2025-12-27",0.00189,{"date":288,"score":243,"percentile":244},"2025-12-28",{"date":290,"score":243,"percentile":244},"2025-12-29",{"date":292,"score":243,"percentile":244},"2025-12-30",{"date":294,"score":243,"percentile":244},"2025-12-31",{"date":296,"score":243,"percentile":259},"2026-01-01",{"date":298,"score":243,"percentile":259},"2026-01-02",{"date":300,"score":243,"percentile":244},"2026-01-03",{"date":302,"score":169,"percentile":170},"2026-01-04",{"date":304,"score":169,"percentile":170},"2026-01-05",{"date":306,"score":169,"percentile":173},"2026-01-06",{"date":308,"score":169,"percentile":170},"2026-01-07",{"date":310,"score":169,"percentile":170},"2026-01-08",{"date":312,"score":169,"percentile":170},"2026-01-09",{"date":314,"score":169,"percentile":170},"2026-01-10",{"date":316,"score":169,"percentile":170},"2026-01-11",{"date":318,"score":169,"percentile":319},"2026-01-12",0.00152,{"date":321,"score":243,"percentile":322},"2026-01-13",0.0018,{"date":324,"score":243,"percentile":325},"2026-01-14",0.00178,{"date":327,"score":243,"percentile":325},"2026-01-15",{"date":329,"score":243,"percentile":322},"2026-01-16",{"date":331,"score":243,"percentile":322},"2026-01-17",{"date":333,"score":243,"percentile":334},"2026-01-18",0.00181,{"date":336,"score":243,"percentile":334},"2026-01-19",{"date":338,"score":243,"percentile":322},"2026-01-20",{"date":340,"score":243,"percentile":341},"2026-01-21",0.00179,{"date":343,"score":243,"percentile":322},"2026-01-22",{"date":345,"score":243,"percentile":334},"2026-01-23",{"date":347,"score":243,"percentile":334},"2026-01-24",{"date":349,"score":243,"percentile":334},"2026-01-25",{"date":351,"score":243,"percentile":352},"2026-01-26",0.00182,{"date":354,"score":243,"percentile":352},"2026-01-27",{"date":356,"score":243,"percentile":322},"2026-01-28",{"date":358,"score":243,"percentile":322},"2026-01-29",{"date":360,"score":243,"percentile":352},"2026-01-30",{"date":362,"score":243,"percentile":352},"2026-01-31",{"date":364,"score":243,"percentile":352},"2026-02-01",{"date":366,"score":243,"percentile":334},"2026-02-02",{"date":368,"score":243,"percentile":259},"2026-02-03",{"date":370,"score":243,"percentile":259},"2026-02-04",[372,379,382],{"source":134,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":373,"cvss_v4_0":9},{"baseScore":374,"baseSeverity":375,"vectorString":376,"impactScore":377,"exploitabilityScore":378},7.3,"HIGH","CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",9.8,3.3,{"source":128,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":380,"cvss_v4_0":9},{"baseScore":126,"baseSeverity":375,"vectorString":129,"impactScore":377,"exploitabilityScore":381},4.6,{"source":135,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":383,"cvss_v4_0":9},{"baseScore":374,"baseSeverity":9,"vectorString":376,"impactScore":377,"exploitabilityScore":378},[385,407,416,426],{"ecosystem":9,"name":386,"vendor":386,"product":386,"cpe_part":387,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":388},"containerd","a",[389,394,399,403],{"version":390,"is_range":391,"range_type":134,"version_start":9,"version_start_type":9,"version_end":392,"version_end_type":393,"fixed_in":9},"\u003C 1.7.29",true,"1.7.29","excluding",{"version":395,"is_range":391,"range_type":134,"version_start":396,"version_start_type":397,"version_end":398,"version_end_type":393,"fixed_in":9},">= 2.0.0-beta.0, \u003C 2.0.7","2.0.0-beta.0","including","2.0.7",{"version":400,"is_range":391,"range_type":134,"version_start":401,"version_start_type":397,"version_end":402,"version_end_type":393,"fixed_in":9},">= 2.1.0-beta.0, \u003C 2.1.5","2.1.0-beta.0","2.1.5",{"version":404,"is_range":391,"range_type":134,"version_start":405,"version_start_type":397,"version_end":406,"version_end_type":393,"fixed_in":9},">= 2.2.0-beta.0, \u003C 2.2.0","2.2.0-beta.0","2.2.0",{"ecosystem":408,"name":409,"vendor":410,"product":386,"cpe_part":9,"purl_type":411,"purl_namespace":410,"purl_name":386,"source":9,"versions":412},"Go","github.com/containerd/containerd","github.com/containerd","golang",[413],{"version":414,"is_range":391,"range_type":415,"version_start":9,"version_start_type":9,"version_end":392,"version_end_type":393,"fixed_in":9},"lt1_7_29","semver",{"ecosystem":408,"name":417,"vendor":409,"product":418,"cpe_part":9,"purl_type":411,"purl_namespace":409,"purl_name":418,"source":9,"versions":419},"github.com/containerd/containerd/v2","v2",[420,422,424],{"version":421,"is_range":391,"range_type":415,"version_start":9,"version_start_type":9,"version_end":398,"version_end_type":393,"fixed_in":9},"lt2_0_7",{"version":423,"is_range":391,"range_type":415,"version_start":401,"version_start_type":397,"version_end":402,"version_end_type":393,"fixed_in":9},"gte2_1_0_beta_0_lt2_1_5",{"version":425,"is_range":391,"range_type":415,"version_start":405,"version_start_type":397,"version_end":406,"version_end_type":393,"fixed_in":9},"gte2_2_0_beta_0_lt2_2_0",{"ecosystem":9,"name":386,"vendor":427,"product":386,"cpe_part":387,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":428},"linuxfoundation",[429,432,435,438,440,442,444,446],{"version":430,"is_range":391,"range_type":431,"version_start":9,"version_start_type":9,"version_end":392,"version_end_type":393,"fixed_in":9},"lt1.7.29","cpe",{"version":433,"is_range":391,"range_type":431,"version_start":434,"version_start_type":397,"version_end":398,"version_end_type":393,"fixed_in":9},"gte2.0.0_lt2.0.7","2.0.0",{"version":436,"is_range":391,"range_type":431,"version_start":437,"version_start_type":397,"version_end":402,"version_end_type":393,"fixed_in":9},"gte2.1.0_lt2.1.5","2.1.0",{"version":439,"is_range":122,"range_type":431,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.2.0:beta0",{"version":441,"is_range":122,"range_type":431,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.2.0:beta1",{"version":443,"is_range":122,"range_type":431,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.2.0:beta2",{"version":445,"is_range":122,"range_type":431,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.2.0:rc0",{"version":447,"is_range":122,"range_type":431,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.2.0:rc1"]