Skip to content
OpenAdvisories

Package · Go

github.com/edgelesssys/contrast

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-100837

    Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching

    Contrast (Edgeless Systems) through 1.20.0 performs unanchored suffix matching when selecting per-registry configuration in the imagepuller. Config.registryFor strips a single trailing dot and then uses strings.HasSuffix(hostname, fqdn) without requiring a DN…

    edgelesssys contrast github.com/edgelesssys/contrast Go
  • Low 3.5
    CVE-2025-71424

    Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount

    Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. The VOLUME directive in a Dockerfile (config.volumes in the OCI image configuration) is only a hint and is not handled specially …

    edgelesssys contrast github.com/edgelesssys/contrast Go