Security
فارسی
All products

github.com/edgelesssys/contrast

Go · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertextsCVE-2026-100836 · GHSA-3CCM-4QQ2-5WRPVersion ranges need review. github.com/edgelesssys/contrast Go Medium Fix reported
Contrast has insecure LUKS2 persistent storage partitions may be opened and usedCVE-2025-71422 · GHSA-F5P4-P5Q5-JV3HVersion ranges need review. github.com/edgelesssys/contrast Go Medium Fix reported
Contrast's unauthenticated recovery allows Coordinator impersonationCVE-2025-71426 · GHSA-VQV5-385R-2HF8Version ranges need review. github.com/edgelesssys/contrast Go High Fix reported
Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount pointsCVE-2025-71424 · GHSA-PHHQ-63JG-FP7RVersion ranges need review. github.com/edgelesssys/contrast Go Low Fix reported
Contrast leaks workload secrets to logs on INFO levelCVE-2025-71423 · GHSA-VXG3-W9RV-RHR2Version ranges need review. github.com/edgelesssys/contrast Go High Fix reported
Contrast workload secrets leak to logs on INFO levelCVE-2025-71425 · GHSA-H5F8-CRRQ-4PW8Version ranges need review. github.com/edgelesssys/contrast Go High Fix reported
Contras Affected by CopyFile Policy Subversion via SymlinksCVE-2026-100838 · GHSA-RH99-WC69-C255Version ranges need review. github.com/edgelesssys/contrast Go High Fix reported
Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registriesCVE-2026-100837 · GHSA-6C87-G9PW-78FXVersion ranges need review. github.com/edgelesssys/contrast Go Low Fix reported
Contrast BadAML injection allows arbitrary code executionCVE-2026-100839 · GHSA-G9WW-X58F-9G6MVersion ranges need review. github.com/edgelesssys/contrast Go High Fix reported