Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/edgelesssys/contrast

9 known vulnerabilities (5 high, 4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
9 · 5 high, 4 medium
Registry
pkg.go.dev

Advisories 9

  • CVE-2026-100837Medium 6.3

    Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching

    Affected: fixed in 1.21.0.

  • CVE-2026-100836Medium 5.3

    Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer

    Affected: fixed in 1.21.0.

  • Contrast before 1.18.0 AML Injection Remote Code Execution

    Affected: fixed in 1.18.0.

  • Contrast before 1.19.1 CopyFile Policy Symlink Subversion

    Affected: fixed in 1.19.1.

  • Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery

    Affected: fixed in 1.4.1.

  • Contrast before 1.8.1 Information Disclosure via Logging

    Affected: fixed in 1.8.1.

  • CVE-2025-71424Medium 5.1

    Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount

    Affected: fixed in 1.9.1.

  • Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure

    Affected: from 1.9.0, fixed in 1.12.2.

  • CVE-2025-71422Medium 6.9

    Contrast before 1.12.1 Insecure LUKS2 Persistent Storage

    Affected: fixed in 1.12.1.