Go to main page
Versions in this module
v1
Oct 7, 2026
Sep 23, 2026
Aug 21, 2026
Aug 20, 2026
Aug 4, 2026
Jul 1, 2026
May 21, 2026
Apr 27, 2026 GO-2026-5864 +1 more
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Apr 22, 2026 GO-2026-5864 +1 more
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Apr 2, 2026 GO-2026-5624 +2 more
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Mar 18, 2026 GO-2026-5624 +2 more
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Feb 20, 2026 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Jan 22, 2026 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Jan 14, 2026 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Dec 2, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Nov 21, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Oct 23, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast