Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/edgelesssys/contrast

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/edgelesssys/contrast in go

Moderate
about 1 month ago

Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts GSA_kwCzR0hTQS0zY2NtLTRxcTItNXdycM4ABZ_B

go github.com/edgelesssys/contrast
Low
about 1 month ago

Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries GSA_kwCzR0hTQS02Yzg3LWc5cHctNzhmeM4ABZ_A

go github.com/edgelesssys/contrast
High
3 months ago

Contras Affected by CopyFile Policy Subversion via Symlinks GSA_kwCzR0hTQS1yaDk5LXdjNjktYzI1Nc4ABV-u

go github.com/edgelesssys/contrast
High
5 months ago

Contrast BadAML injection allows arbitrary code execution GSA_kwCzR0hTQS1nOXd3LXg1OGYtOWc2bc4ABUVd

go github.com/edgelesssys/contrast
Moderate
10 months ago

Contrast has insecure LUKS2 persistent storage partitions may be opened and used GSA_kwCzR0hTQS1mNXA0LXA1cTUtanYzaM4ABN8K

go github.com/edgelesssys/contrast
High
12 months ago

Contrast leaks workload secrets to logs on INFO level GSA_kwCzR0hTQS12eGczLXc5cnYtcmhyMs4ABLhw

go github.com/edgelesssys/contrast
Low
about 1 year ago

Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points GSA_kwCzR0hTQS1waGhxLTYzamctZnA3cs4ABJ9v

go github.com/edgelesssys/contrast
High
about 1 year ago

Contrast workload secrets leak to logs on INFO level GSA_kwCzR0hTQS1oNWY4LWNycnEtNHB3OM4ABIbd

go github.com/edgelesssys/contrast
High
over 1 year ago

Contrast's unauthenticated recovery allows Coordinator impersonation GSA_kwCzR0hTQS12cXY1LTM4NXItMmhmOM4ABEKp

go github.com/edgelesssys/contrast

Filter by Severity

High 5 Moderate 2 Low 2