Skip to content
OpenAdvisories

Vendor

edgelesssys

15 known vulnerabilities.

Products

contrast 14 constellation 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-100833 Public exploit

    Contrast before 1.23.1 Image Substitution via Policy Generation

    Contrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an `allow_storage` rule that accepts storage en…

    edgelesssys contrast