Affected by GO-2022-0344 and 6 other vulnerabilities

GO-2022-0344: containerd CRI plugin: Insecure handling of image volumes in github.com/containerd/containerd

GO-2022-0360: Ambiguous OCI manifest parsing in github.com/containerd/containerd

GO-2022-0482: containerd CRI plugin: Host memory exhaustion through ExecSync in github.com/containerd/containerd

GO-2022-0784: containerd-shim API Exposed to Host Network Containers in github.com/containerd/containerd

GO-2022-0921: Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd

GO-2022-0938: Insufficiently restricted permissions on plugin directories in github.com/containerd/containerd

GO-2022-1147: containerd CRI stream server vulnerable to host memory exhaustion via terminal in github.com/containerd/containerd

The highest tagged major version is v2.

identifiers

package

v1.3.8 Latest Latest Go to latest Published: Nov 30, 2020 License: Apache-2.0 Imports: 3 Imported by: 433

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Package identifiers provides common validation for identifiers and keys across containerd.

Identifiers in containerd must be a alphanumeric, allowing limited underscores, dashes and dots.

While the character set may be expanded in the future, identifiers are guaranteed to be safely used as filesystem path components.

This section is empty.

This section is empty.

func Validate(s string) error

Validate return nil if the string s is a valid identifier.

identifiers must be valid domain names according to RFC 1035, section 2.3.1. To enforce case insensitivity, all characters must be lower case.

In general, identifiers that pass this validation, should be safe for use as a domain names or filesystem path component.

This section is empty.