github.com/edgelesssys/contrast vulnerabilities (Go)

9 vulnerabilities.

• github.com/edgelesssys/contrast Go Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer CVE-2026-100836 Fix available 5.3 MediumJuly 1, 2026
• github.com/edgelesssys/contrast Go Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching CVE-2026-100837 Fix available 6.3 MediumJuly 1, 2026
• github.com/edgelesssys/contrast Go Contrast before 1.19.1 CopyFile Policy Symlink Subversion CVE-2026-100838 Fix available 8.6 HighApril 30, 2026
• github.com/edgelesssys/contrast Go Contrast before 1.18.0 AML Injection Remote Code Execution CVE-2026-100839 Fix available 8.4 HighMarch 26, 2026
• github.com/edgelesssys/contrast Go Contrast before 1.12.1 Insecure LUKS2 Persistent Storage CVE-2025-71422 Fix available 6.9 MediumOctober 28, 2025
• github.com/edgelesssys/contrast Go Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure CVE-2025-71423 Fix available 8.5 HighAugust 28, 2025
• github.com/edgelesssys/contrast Go Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount CVE-2025-71424 Fix available 5.1 MediumJuly 9, 2025
• github.com/edgelesssys/contrast Go Contrast before 1.8.1 Information Disclosure via Logging CVE-2025-71425 Fix available 8.5 HighMay 28, 2025
• github.com/edgelesssys/contrast Go Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery CVE-2025-71426 Fix available 7.1 HighFebruary 5, 2025