Start for Free
go

github.com/edgelesssys/contrast

View on go registry
18 Total advisories
18 Vulnerabilities
0 Malware

Vulnerabilities

MEDIUM 4.3
Go

GO-2026-5864

Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts
LOW 3.7
Go

GO-2026-5865

Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries
UNKNOWN
Go

GHSA-3ccm-4qq2-5wrp

Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
UNKNOWN
Go

GHSA-6c87-g9pw-78fx

Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
HIGH 8.1
Go

GO-2026-5624

Contras Affected by CopyFile Policy Subversion via Symlinks
UNKNOWN
Go

GHSA-rh99-wc69-c255

Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
HIGH 8.4
Go

GO-2026-4863

Contrast BadAML injection allows arbitrary code execution
UNKNOWN
Go

GHSA-g9ww-x58f-9g6m

Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
UNKNOWN
Go

GHSA-f5p4-p5q5-jv3h

Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
UNKNOWN
Go

GHSA-vqv5-385r-2hf8

Contrast's unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/contrast
UNKNOWN
Go

GHSA-vxg3-w9rv-rhr2

Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast
UNKNOWN
Go

GHSA-phhq-63jg-fp7r

Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast
UNKNOWN
Go

GHSA-h5f8-crrq-4pw8

Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast
MEDIUM 5.7
Go

GO-2025-4078

Contrast has insecure LUKS2 persistent storage partitions may be opened and used
HIGH 7.3
Go

GO-2025-3920

Contrast leaks workload secrets to logs on INFO level
LOW 3.5
Go

GO-2025-3807

Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points
HIGH 7.3
Go

GO-2025-3718

Contrast workload secrets leak to logs on INFO level
HIGH 7.1
Go

GO-2025-3455

Contrast's unauthenticated recovery allows Coordinator impersonation

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes