# containerd v2.0.13

> Kubernetes Core · 2026-09-24

A maintenance release with an advisory-backed security fix and a changed container security default. It also corrects image layer fetching in `core/unpack` for every config-sharing manifest.

## Action needed
- **[security · medium]** `CVE-2026-53493` security fix
  - containerd includes a security fix identified as `CVE-2026-53493` and `GHSA-pg57-6jwg-q645`.
- **[breaking]** Default masking of Linux container paths
  - Linux containers mask `/proc/interrupts` and CPU thermal throttle sysfs paths by default.

## Other recorded changes
- 1 (defect_corrected 1)

[Full analysis](https://ratatosk.io/en/releases/containerd/v2.0.13)

[Original release notes](https://github.com/containerd/containerd/releases/tag/v2.0.13)