Executive brief
Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
Affected products
- Go github.com/edgelesssys/contrast
Junglewise Threat Intelligence
GO-2025-4078 - Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast
Severity: info · Published 2025-11-05
Technologies: github.com/edgelesssys/contrast (Go). Vendors: Go.
Related threats
- GO-2026-5864 - Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edg
- GO-2026-5865 - Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain
- Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts
- Edgeless Systems Contrast panic in transit engine UnmarshalJSON
- Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain