github.com/projectcontour/contour vulnerabilities (Go)

3 vulnerabilities.

• github.com/projectcontour/contour Go Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled CVE-2026-50149 Fix available 6.5 MediumJuly 2, 2026
• github.com/projectcontour/contour Go Contour: Lua code injection via Cookie Path Rewrite Policy CVE-2026-41246 Fix available 8.1 HighApril 23, 2026
• github.com/projectcontour/contour Go Authorization bypass in Contour CVE-2021-32783 Fix available 8.5 HighJuly 23, 2021