VULN UPGRADE: github.com/containerd/containerd (patch → v1.7.30)

[campaigner-prod]

Summary: High-severity security update — 1 package upgraded (patch changes only)

Manifests changed:

• . (go)

Updates

Package	From	To	Type	Vulnerabilities Fixed
github.com/containerd/containerd	v1.7.20	v1.7.30	patch	1 HIGH, 2 MODERATE, 2 UNKNOWN

---

Security Details

🚨 Critical & High Severity (1 fixed)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In
github.com/containerd/containerd	GHSA-pwhc-rpq9-4c8w	HIGH	containerd affected by a local privilege escalation via wide permissions on CRI directory	v1.7.20	1.7.29

ℹ️ Other Vulnerabilities (4)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In
github.com/containerd/containerd	GHSA-265r-hfxg-fhmg	MODERATE	containerd has an integer overflow in User ID handling	v1.7.20	1.7.27
github.com/containerd/containerd	GHSA-m6hq-p25p-ffr2	MODERATE	containerd CRI server: Host memory exhaustion through Attach goroutine leak	v1.7.20	1.7.29
github.com/containerd/containerd	GO-2025-4108	unknown	containerd CRI server: Host memory exhaustion through Attach goroutine leak in github.com/containerd/containerd	v1.7.20	1.7.29
github.com/containerd/containerd	GO-2025-4100	unknown	containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd	v1.7.20	1.7.29

---

Review Checklist

Enhanced review recommended for this update:

• Review changes for compatibility with your code
• Check release notes for breaking changes
• Run integration tests to verify service behavior
• Test in staging environment before production
• Monitor key metrics after deployment

---

Update Mode: Vulnerability Remediation (High)

🤖 Generated by DataDog Automated Dependency Management System