containerd patched CVE-2026-53493: a crafted image can pin a node's CPU and memory during the pull, before any container runs. Moderate, not yet exploited. Pull untrusted images? Update: 1.7.36, 2.0.13, 2.2.9, 2.3.6, 2.4.1. https://suriq.io/blog/containerd-cve-2026-53493-image-pull-dos #CVE #infosec #cybersecurity