nerdctl vulnerabilities

Known vulnerabilities in the nerdctl package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L GHSA-vvgc-356p-c3xw	<2.0.4-r2
L CVE-2025-22872	<2.0.4-r2
L GHSA-g9pc-8g42-g6vq	<2.0.4-r1
L CVE-2025-22871	<2.0.4-r1
L GHSA-4v7x-pqxf-cx7m	<2.0.3-r5
L CVE-2023-45288	<2.0.3-r5
L Integer Overflow or Wraparound	<2.0.3-r5
L GHSA-265r-hfxg-fhmg	<2.0.3-r5
L CVE-2025-22870	<2.0.3-r4
L GHSA-qxp5-gwg8-xv66	<2.0.3-r4
L CVE-2025-22869	<2.0.3-r3
L GHSA-c6gw-w398-hv78	<2.0.3-r2
L Allocation of Resources Without Limits or Throttling	<2.0.3-r2
L GHSA-3whm-j4xm-rv8x	<2.0.3-r1
L CVE-2025-22866	<2.0.3-r1
L GHSA-w32m-9786-jp63	<2.0.2-r2
L CVE-2024-45338	<2.0.2-r2
L CVE-2024-45337	<2.0.2-r1
L GHSA-v778-237x-gjrc	<2.0.2-r1
L CVE-2024-34155	<1.7.7-r0
L CVE-2024-34158	<1.7.7-r0
L GHSA-8xfx-rj4p-23jm	<1.7.7-r0
L GHSA-j7vj-rw65-4v26	<1.7.7-r0
L CVE-2024-34156	<1.7.7-r0
L GHSA-crqm-pwhx-j97f	<1.7.7-r0
L CVE-2024-41110	<1.7.6-r7
L GHSA-v23v-6jw2-98fq	<1.7.6-r7
L CVE-2024-24791	<1.7.6-r6
L GHSA-hw49-2p59-3mhj	<1.7.6-r6
L GHSA-49gw-vxvf-fc2g	<1.7.6-r5
L GHSA-236w-p7wf-5ph8	<1.7.6-r5
M CVE-2024-24789	<1.7.6-r5
C CVE-2024-24790	<1.7.6-r5
L GHSA-xw73-rw38-6vjc	<1.7.5-r2
H Origin Validation Error	<1.7.5-r2
L GHSA-c5q2-7r4c-mv6g	<1.7.5-r0
L CVE-2024-28180	<1.7.5-r0
L CVE-2024-24786	<1.7.5-r0
L GHSA-8r3f-844c-mc37	<1.7.5-r0
L GHSA-3q2c-pvp5-3cqp	<1.7.4-r1
L GHSA-j6m3-gc37-6r6q	<1.7.4-r1
L CVE-2024-24784	<1.7.4-r1
L CVE-2024-24783	<1.7.4-r1
L CVE-2023-45290	<1.7.4-r1
L CVE-2023-45289	<1.7.4-r1
L GHSA-32ch-6x54-q4h9	<1.7.4-r1
L GHSA-rr6r-cfgf-gc6h	<1.7.4-r1
L GHSA-fgq5-q76c-gx78	<1.7.4-r1
L CVE-2024-24785	<1.7.4-r1
H Exposure of Resource to Wrong Sphere	<1.7.3-r0
L GHSA-45x7-px36-x8w8	<1.7.3-r0
M Improper Validation of Integrity Check Value	<1.7.3-r0
L GHSA-xr7r-f8xq-vfvv	<1.7.3-r0

Vulnerability

Vulnerable Version

<2.0.4-r2

<2.0.4-r2

<2.0.4-r1

<2.0.4-r1

<2.0.3-r5