[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-53489":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T00:21:03.480Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":25,"duplicate_of":9,"upstream":28,"downstream":29,"duplicates":48,"related":49,"reserved_at":9,"published_at":54,"modified_at":55,"state":56,"summary":57,"references_raw":66,"kevs":80,"epss":81,"epss_history":84,"metrics":96,"affected":104},"CVE-2026-53489","containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-61","UNIX Symbolic Link (Symlink) Following","The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.","weakness","Incomplete","Compound","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-27","Leveraging Race Conditions via Symbolic Links",[],[],[26,27],"GHSA-rgh6-rfwx-v388","GO-2026-5622",[],[30,32,34,36,38,40,42,44,46],{"_key":31},"OPENSUSE-SU-2026:11102-1",{"_key":33},"USN-8472-1",{"_key":35},"USN-8473-1",{"_key":37},"UBUNTU-CVE-2026-53489",{"_key":39},"DEBIAN-CVE-2026-53489",{"_key":41},"OPENSUSE-SU-2026:21072-1",{"_key":43},"RHSA-2026:15862",{"_key":45},"RHSA-2026:32963",{"_key":47},"RHSA-2026:32974",[],[50,51,52],{"_key":31},{"_key":41},{"_key":53},"CGA-M8Q9-38P9-C4G7","2026-07-01T18:10:41.802Z","2026-07-02T14:34:50.018Z","PUBLISHED",{"cisa_kev":58,"cisa_ransomware":58,"cisa_vendor":9,"epss_severity":59,"epss_score":60,"severity":61,"severity_score":62,"severity_version":63,"severity_source":64,"severity_vector":65,"severity_status":56},false,"low",0.00208,"high",8.2,"v4.0","cve.org","CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",[67,75],{"url":68,"sources":69,"tags":71},"https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388",[70,64],"osv_go",[72,73,74],"WEB","Advisory","X Refsource CONFIRM",{"url":76,"sources":77,"tags":78},"https://github.com/containerd/containerd",[70],[79],"PACKAGE",[],{"date":82,"score":60,"percentile":83},"2026-07-05",0.10936,[85,89,92,95],{"date":86,"score":87,"percentile":88},"2026-07-02",0.00245,0.15573,{"date":90,"score":60,"percentile":91},"2026-07-03",0.10934,{"date":93,"score":60,"percentile":94},"2026-07-04",0.1093,{"date":82,"score":60,"percentile":83},[97,101],{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":98},{"baseScore":99,"baseSeverity":9,"vectorString":100,"impactScore":9,"exploitabilityScore":9},7.1,"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",{"source":64,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":102},{"baseScore":62,"baseSeverity":103,"vectorString":65,"impactScore":9,"exploitabilityScore":9},"HIGH",[105,124,133],{"ecosystem":9,"name":106,"vendor":106,"product":106,"cpe_part":107,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":108},"containerd","a",[109,116,120],{"version":110,"is_range":111,"range_type":64,"version_start":112,"version_start_type":113,"version_end":114,"version_end_type":115,"fixed_in":9},">= 2.1.0, \u003C 2.1.9",true,"2.1.0","including","2.1.9","excluding",{"version":117,"is_range":111,"range_type":64,"version_start":118,"version_start_type":113,"version_end":119,"version_end_type":115,"fixed_in":9},">= 2.2.0, \u003C 2.2.5","2.2.0","2.2.5",{"version":121,"is_range":111,"range_type":64,"version_start":122,"version_start_type":113,"version_end":123,"version_end_type":115,"fixed_in":9},">= 2.3.0, \u003C 2.3.2","2.3.0","2.3.2",{"ecosystem":125,"name":126,"vendor":127,"product":106,"cpe_part":9,"purl_type":128,"purl_namespace":127,"purl_name":106,"source":9,"versions":129},"Go","github.com/containerd/containerd","github.com/containerd","golang",[130],{"version":131,"is_range":111,"range_type":132,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all","semver",{"ecosystem":125,"name":134,"vendor":126,"product":135,"cpe_part":9,"purl_type":128,"purl_namespace":126,"purl_name":135,"source":9,"versions":136},"github.com/containerd/containerd/v2","v2",[137,139,141],{"version":138,"is_range":111,"range_type":132,"version_start":112,"version_start_type":113,"version_end":114,"version_end_type":115,"fixed_in":9},"gte2_1_0_lt2_1_9",{"version":140,"is_range":111,"range_type":132,"version_start":118,"version_start_type":113,"version_end":119,"version_end_type":115,"fixed_in":9},"gte2_2_0_lt2_2_5",{"version":142,"is_range":111,"range_type":132,"version_start":122,"version_start_type":113,"version_end":123,"version_end_type":115,"fixed_in":9},"gte2_3_0_lt2_3_2"]