Go to main page
Versions in this module
v1
Aug 4, 2026
Jul 1, 2026
May 21, 2026
Apr 27, 2026 GO-2026-5864 +1 more
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Apr 22, 2026 GO-2026-5864 +1 more
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Apr 2, 2026 GO-2026-5624 +2 more
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Mar 18, 2026 GO-2026-5624 +2 more
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Feb 20, 2026 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Jan 22, 2026 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Jan 14, 2026 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Dec 2, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Nov 21, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Oct 23, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Sep 5, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Aug 28, 2025 GO-2026-4863 +3 more
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Aug 20, 2025 GO-2025-3920 +4 more
GO-2025-3920: Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Aug 12, 2025 GO-2025-3920 +5 more
GO-2025-3920: Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast
GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Jul 28, 2025 GO-2025-3920 +5 more
GO-2025-3920: Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast
GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Jul 9, 2025 GO-2025-3920 +5 more
GO-2025-3920: Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast
GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Jul 9, 2025 GO-2025-3920 +5 more
GO-2025-3920: Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast
GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Jun 4, 2025 GO-2025-3807 +6 more
GO-2025-3807: Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast
GO-2025-3920: Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast
GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
May 27, 2025 GO-2025-3807 +5 more
GO-2025-3807: Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast
GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
May 15, 2025 GO-2025-3718 +6 more
GO-2025-3718: Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast
GO-2025-3807: Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast
GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Apr 7, 2025 GO-2025-3718 +6 more
GO-2025-3718: Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast
GO-2025-3807: Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast
GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
Mar 12, 2025 GO-2025-3718 +6 more
GO-2025-3718: Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast
GO-2025-3807: Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast
GO-2025-4078: Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
GO-2026-4863: Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast
GO-2026-5624: Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
GO-2026-5864: Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
GO-2026-5865: Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast