Affected by GO-2025-3455
and 7 other vulnerabilities
GO-2025-3455: Contrast's unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/contrast
GO-2025-3718: Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast
GO-2025-3807: Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast
GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
CopyOnDiff copies a file from src to dst.
It will only modify the destination file if the contents are different.
It returns true if the file was modified, or an error if any occurred.
Affected by 
Documentation
¶
Source Files