Skip to content
OpenAdvisories

Vendor

edgelesssys

15 known vulnerabilities.

Products

contrast 14 constellation 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-100836

    Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer

    Contrast through 1.20.0 contains a panic vulnerability in the transit-engine endpoint's ciphertextContainer.UnmarshalJSON function that fails to validate decoded ciphertext length before slicing. An authenticated workload with a valid mesh certificate can tri…

    edgelesssys contrast github.com/edgelesssys/contrast Go
  • Medium 5.7
    CVE-2025-71422

    Contrast before 1.12.1 Insecure LUKS2 Persistent Storage

    Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the secure persistent volume feature is vulnerable to a malicious host supplying a crafted LUKS2 volume to a pod VM. LUKS2 volume metadata is not authenticated and, with …

    edgelesssys contrast github.com/edgelesssys/contrast Go