Hi,
containerd package that node agent uses as of now is old and in v1 version. Here are the list of CVE's
CVE-2026-50195, 53489, 53492
containerd has v2 version which is primary now. It has few code changes as well but bumping packages was not straightforward. It has a dependency lock with k8s.io/client-go. Bumping this also requires cilium package bump as well (which might introduce new code refactors)
Need help to upgrade and (or refactor code) safely
Hi,
containerd package that node agent uses as of now is old and in v1 version. Here are the list of CVE's
CVE-2026-50195, 53489, 53492
containerd has v2 version which is primary now. It has few code changes as well but bumping packages was not straightforward. It has a dependency lock with k8s.io/client-go. Bumping this also requires cilium package bump as well (which might introduce new code refactors)
Need help to upgrade and (or refactor code) safely