Go to main page
Versions in this module
v1
Aug 4, 2026
Jul 1, 2026
May 21, 2026
Apr 27, 2026 GO-2026-5864 +1 more
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Apr 22, 2026 GO-2026-5864 +1 more
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Apr 2, 2026 GO-2026-5624 +2 more
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Mar 18, 2026 GO-2026-5624 +2 more
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Feb 20, 2026 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Jan 22, 2026 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Jan 14, 2026 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Dec 2, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Nov 21, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Oct 23, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Sep 5, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast