Affected by GO-2025-3455 and 3 other vulnerabilities

GO-2025-3455: Contrast's unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/contrast

GO-2025-3718: Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast

GO-2025-3807: Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast

GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast

cmd

package

v0.9.0 Latest Latest Go to latest Published: Aug 7, 2024 License: AGPL-3.0 Imports: 41 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/edgelesssys/contrast

Links

Open Source Insights

Documentation ¶

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	// ReleaseImageReplacements contains the image replacements used by contrast.
	//go:embed assets/image-replacements.txt
	ReleaseImageReplacements []byte
	// DefaultCoordinatorPolicyHash is derived from the coordinator release candidate and injected at release build time.
	//
	// It is intentionally left empty for dev builds.
	DefaultCoordinatorPolicyHash = ""
)