Skip to content
OpenAdvisories

Vendor

edgelesssys

15 known vulnerabilities.

Products

contrast 14 constellation 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.6
    CVE-2026-116197

    Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection

    Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller that can prefer wildcard configuration entries over concrete domain matches. When a pull configuration lists both a concrete domain and its…

    edgelesssys contrast
  • Low 3.7
    CVE-2026-100837

    Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching

    Contrast (Edgeless Systems) through 1.20.0 performs unanchored suffix matching when selecting per-registry configuration in the imagepuller. Config.registryFor strips a single trailing dot and then uses strings.HasSuffix(hostname, fqdn) without requiring a DN…

    edgelesssys contrast github.com/edgelesssys/contrast Go
  • Low 3.5
    CVE-2025-71424

    Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount

    Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. The VOLUME directive in a Dockerfile (config.volumes in the OCI image configuration) is only a hint and is not handled specially …

    edgelesssys contrast github.com/edgelesssys/contrast Go