github.com/projectcontour/contour
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled | github.com/projectcontour/contourExternalDNS Operator/edo/external-dns-rhel8 | GoRed Hat | Medium | Fix reported | |
| Contour has Lua code injection via Cookie Path Rewrite Policy | github.com/projectcontour/contour | Go | High | Fix reported | |
| ExternalName Services can be used to gain access to Envoy's admin interface | github.com/projectcontour/contour | Go | High | Fix reported |