{"schema_version":1,"title":"github.com/edgelesssys/contrast (Go) vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 20 vulnerabilities in github.com/edgelesssys/contrast (Go): 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, GO-2026-5864 - Constrata's coordinator transit engine…, was published on 7 July 2026.","url":"https://junglewise.ai/threats/technologies/github-com-edgelesssys-contrast","json_url":"https://junglewise.ai/threats/technologies/github-com-edgelesssys-contrast.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/github-com-edgelesssys-contrast","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":20,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":12},"latest":[{"slug":"go-2026-5864-constrata-s-coordinator-transit-engine-ciphertextcontainer-c5be25a1","title":"GO-2026-5864 - Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edg","severity":"info","exploited":false,"published_at":"2026-07-07T15:26:37+00:00","url":"https://junglewise.ai/threats/go-2026-5864-constrata-s-coordinator-transit-engine-ciphertextcontainer-c5be25a1"},{"slug":"go-2026-5865-contrast-s-imagepuller-registryfor-uses-unanchored-suffix-d277ae67","title":"GO-2026-5865 - Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain","severity":"info","exploited":false,"published_at":"2026-07-07T15:26:37+00:00","url":"https://junglewise.ai/threats/go-2026-5865-contrast-s-imagepuller-registryfor-uses-unanchored-suffix-d277ae67"},{"cvss":3.1,"slug":"constrata-s-coordinator-transit-engine-ciphertextcontainer-d83e92dc","title":"Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts","severity":"low","exploited":false,"published_at":"2026-07-01T18:47:53+00:00","url":"https://junglewise.ai/threats/constrata-s-coordinator-transit-engine-ciphertextcontainer-d83e92dc"},{"cvss":4.3,"slug":"edgeless-systems-contrast-panic-in-transit-engine-unmarshaljson-f1fe367f","title":"Edgeless Systems Contrast panic in transit engine UnmarshalJSON","severity":"medium","exploited":false,"published_at":"2026-07-01T18:47:53+00:00","url":"https://junglewise.ai/threats/edgeless-systems-contrast-panic-in-transit-engine-unmarshaljson-f1fe367f"},{"cvss":3.7,"slug":"edgeless-systems-contrast-credential-leak-via-unanchored-suffix-9d4532bc","title":"Edgeless Systems Contrast credential leak via unanchored suffix matching in Imagepuller","severity":"low","exploited":false,"published_at":"2026-07-01T18:43:55+00:00","url":"https://junglewise.ai/threats/edgeless-systems-contrast-credential-leak-via-unanchored-suffix-9d4532bc"},{"cvss":3.1,"slug":"contrast-s-imagepuller-registryfor-uses-unanchored-suffix-matching-731cabf0","title":"Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain","severity":"low","exploited":false,"published_at":"2026-07-01T18:43:55+00:00","url":"https://junglewise.ai/threats/contrast-s-imagepuller-registryfor-uses-unanchored-suffix-matching-731cabf0"},{"slug":"go-2026-5624-contras-affected-by-copyfile-policy-subversion-via-12460907","title":"GO-2026-5624 - Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast","severity":"info","exploited":false,"published_at":"2026-06-25T22:34:34+00:00","url":"https://junglewise.ai/threats/go-2026-5624-contras-affected-by-copyfile-policy-subversion-via-12460907"},{"cvss":3.1,"slug":"contras-affected-by-copyfile-policy-subversion-via-symlinks-0d6ca43d","title":"Contras Affected by CopyFile Policy Subversion via Symlinks","severity":"low","exploited":false,"published_at":"2026-04-30T20:57:17+00:00","url":"https://junglewise.ai/threats/contras-affected-by-copyfile-policy-subversion-via-symlinks-0d6ca43d"},{"slug":"go-2026-4863-contrast-badaml-injection-allows-arbitrary-code-execution-79066b49","title":"GO-2026-4863 - Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast","severity":"info","exploited":false,"published_at":"2026-04-02T18:42:30+00:00","url":"https://junglewise.ai/threats/go-2026-4863-contrast-badaml-injection-allows-arbitrary-code-execution-79066b49"},{"cvss":3.1,"slug":"contrast-badaml-injection-allows-arbitrary-code-execution-bb9129e6","title":"Contrast BadAML injection allows arbitrary code execution","severity":"low","exploited":false,"published_at":"2026-03-26T19:49:27+00:00","url":"https://junglewise.ai/threats/contrast-badaml-injection-allows-arbitrary-code-execution-bb9129e6"},{"slug":"go-2025-4078-contrast-has-insecure-luks2-persistent-storage-partitions-98e214f7","title":"GO-2025-4078 - Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast","severity":"info","exploited":false,"published_at":"2025-11-05T18:41:15+00:00","url":"https://junglewise.ai/threats/go-2025-4078-contrast-has-insecure-luks2-persistent-storage-partitions-98e214f7"},{"cvss":3.1,"slug":"contrast-has-insecure-luks2-persistent-storage-partitions-may-be-opened-5c0eb66a","title":"Contrast has insecure LUKS2 persistent storage partitions may be opened and used","severity":"low","exploited":false,"published_at":"2025-10-28T17:49:59+00:00","url":"https://junglewise.ai/threats/contrast-has-insecure-luks2-persistent-storage-partitions-may-be-opened-5c0eb66a"},{"slug":"go-2025-3920-contrast-leaks-workload-secrets-to-logs-on-info-level-in-a30a42e0","title":"GO-2025-3920 - Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast","severity":"info","exploited":false,"published_at":"2025-09-08T14:13:10+00:00","url":"https://junglewise.ai/threats/go-2025-3920-contrast-leaks-workload-secrets-to-logs-on-info-level-in-a30a42e0"},{"cvss":3.1,"slug":"contrast-leaks-workload-secrets-to-logs-on-info-level-7a4229e4","title":"Contrast leaks workload secrets to logs on INFO level","severity":"low","exploited":false,"published_at":"2025-08-28T16:46:40+00:00","url":"https://junglewise.ai/threats/contrast-leaks-workload-secrets-to-logs-on-info-level-7a4229e4"},{"slug":"go-2025-3807-contrast-vulnerability-allows-arbitrary-host-data-c06f6e07","title":"GO-2025-3807 - Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast","severity":"info","exploited":false,"published_at":"2025-07-28T19:57:13+00:00","url":"https://junglewise.ai/threats/go-2025-3807-contrast-vulnerability-allows-arbitrary-host-data-c06f6e07"},{"cvss":3.1,"slug":"contrast-vulnerability-allows-arbitrary-host-data-injection-into-51171df5","title":"Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points","severity":"low","exploited":false,"published_at":"2025-07-09T17:56:24+00:00","url":"https://junglewise.ai/threats/contrast-vulnerability-allows-arbitrary-host-data-injection-into-51171df5"},{"slug":"go-2025-3718-contrast-workload-secrets-leak-to-logs-on-info-level-in-0c5c92b0","title":"GO-2025-3718 - Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast","severity":"info","exploited":false,"published_at":"2025-05-29T20:59:03+00:00","url":"https://junglewise.ai/threats/go-2025-3718-contrast-workload-secrets-leak-to-logs-on-info-level-in-0c5c92b0"},{"cvss":3.1,"slug":"contrast-workload-secrets-leak-to-logs-on-info-level-ef0d231a","title":"Contrast workload secrets leak to logs on INFO level","severity":"low","exploited":false,"published_at":"2025-05-28T14:40:25+00:00","url":"https://junglewise.ai/threats/contrast-workload-secrets-leak-to-logs-on-info-level-ef0d231a"},{"slug":"go-2025-3455-contrast-s-unauthenticated-recovery-allows-coordinator-03aa6e94","title":"GO-2025-3455 - Contrast's unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/contrast","severity":"info","exploited":false,"published_at":"2025-02-05T23:27:43+00:00","url":"https://junglewise.ai/threats/go-2025-3455-contrast-s-unauthenticated-recovery-allows-coordinator-03aa6e94"},{"cvss":3.1,"slug":"contrast-s-unauthenticated-recovery-allows-coordinator-impersonation-38d15ce0","title":"Contrast's unauthenticated recovery allows Coordinator impersonation","severity":"low","exploited":false,"published_at":"2025-02-05T21:30:35+00:00","url":"https://junglewise.ai/threats/contrast-s-unauthenticated-recovery-allows-coordinator-impersonation-38d15ce0"}],"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"github.com/mattermost/mattermost-server (Go)","slug":"github-com-mattermost-mattermost-server","vulnerabilities":274,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server"},{"name":"github.com/mattermost/mattermost-server/v6 (Go)","slug":"github-com-mattermost-mattermost-server-v6","vulnerabilities":188,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v6"},{"name":"github.com/mattermost/mattermost-server/v5 (Go)","slug":"github-com-mattermost-mattermost-server-v5","vulnerabilities":186,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v5"},{"name":"github.com/mattermost/mattermost/server/v8 (Go)","slug":"github-com-mattermost-mattermost-server-v8","vulnerabilities":182,"url":"https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v8"},{"name":"stdlib (Go)","slug":"go-stdlib","vulnerabilities":161,"url":"https://junglewise.ai/threats/technologies/go-stdlib"},{"name":"github.com/siyuan-note/siyuan/kernel (Go)","slug":"github-com-siyuan-note-siyuan-kernel","vulnerabilities":158,"url":"https://junglewise.ai/threats/technologies/github-com-siyuan-note-siyuan-kernel"},{"name":"code.gitea.io/gitea (Go)","slug":"code-gitea-io-gitea","vulnerabilities":128,"url":"https://junglewise.ai/threats/technologies/code-gitea-io-gitea"},{"name":"gogs.io/gogs (Go)","slug":"gogs-io-gogs","vulnerabilities":82,"url":"https://junglewise.ai/threats/technologies/gogs-io-gogs"},{"name":"github.com/traefik/traefik (Go)","slug":"github-com-traefik-traefik","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/github-com-traefik-traefik"},{"name":"github.com/usememos/memos (Go)","slug":"github-com-usememos-memos","vulnerabilities":75,"url":"https://junglewise.ai/threats/technologies/github-com-usememos-memos"},{"name":"github.com/traefik/traefik/v2 (Go)","slug":"github-com-traefik-traefik-v2","vulnerabilities":73,"url":"https://junglewise.ai/threats/technologies/github-com-traefik-traefik-v2"},{"name":"github.com/traefik/traefik/v3 (Go)","slug":"github-com-traefik-traefik-v3","vulnerabilities":68,"url":"https://junglewise.ai/threats/technologies/github-com-traefik-traefik-v3"}],"technology":{"hub":true,"name":"github.com/edgelesssys/contrast (Go)","slug":"github-com-edgelesssys-contrast","vendor":{"name":"Go","slug":"go","url":"https://junglewise.ai/threats/vendors/go"},"aliases":[],"homepage":"https://github.com/edgelesssys/contrast","repo_url":"https://github.com/edgelesssys/contrast","description":"A confidential computing tool for deploying and managing encrypted Kubernetes clusters.","url":"https://junglewise.ai/threats/technologies/github-com-edgelesssys-contrast"},"most_severe":[{"cvss":4.3,"slug":"edgeless-systems-contrast-panic-in-transit-engine-unmarshaljson-f1fe367f","title":"Edgeless Systems Contrast panic in transit engine UnmarshalJSON","severity":"medium","exploited":false,"published_at":"2026-07-01T18:47:53+00:00","url":"https://junglewise.ai/threats/edgeless-systems-contrast-panic-in-transit-engine-unmarshaljson-f1fe367f"},{"cvss":3.7,"slug":"edgeless-systems-contrast-credential-leak-via-unanchored-suffix-9d4532bc","title":"Edgeless Systems Contrast credential leak via unanchored suffix matching in Imagepuller","severity":"low","exploited":false,"published_at":"2026-07-01T18:43:55+00:00","url":"https://junglewise.ai/threats/edgeless-systems-contrast-credential-leak-via-unanchored-suffix-9d4532bc"},{"cvss":3.1,"slug":"constrata-s-coordinator-transit-engine-ciphertextcontainer-d83e92dc","title":"Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts","severity":"low","exploited":false,"published_at":"2026-07-01T18:47:53+00:00","url":"https://junglewise.ai/threats/constrata-s-coordinator-transit-engine-ciphertextcontainer-d83e92dc"},{"cvss":3.1,"slug":"contrast-s-imagepuller-registryfor-uses-unanchored-suffix-matching-731cabf0","title":"Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain","severity":"low","exploited":false,"published_at":"2026-07-01T18:43:55+00:00","url":"https://junglewise.ai/threats/contrast-s-imagepuller-registryfor-uses-unanchored-suffix-matching-731cabf0"},{"cvss":3.1,"slug":"contras-affected-by-copyfile-policy-subversion-via-symlinks-0d6ca43d","title":"Contras Affected by CopyFile Policy Subversion via Symlinks","severity":"low","exploited":false,"published_at":"2026-04-30T20:57:17+00:00","url":"https://junglewise.ai/threats/contras-affected-by-copyfile-policy-subversion-via-symlinks-0d6ca43d"},{"cvss":3.1,"slug":"contrast-badaml-injection-allows-arbitrary-code-execution-bb9129e6","title":"Contrast BadAML injection allows arbitrary code execution","severity":"low","exploited":false,"published_at":"2026-03-26T19:49:27+00:00","url":"https://junglewise.ai/threats/contrast-badaml-injection-allows-arbitrary-code-execution-bb9129e6"},{"cvss":3.1,"slug":"contrast-has-insecure-luks2-persistent-storage-partitions-may-be-opened-5c0eb66a","title":"Contrast has insecure LUKS2 persistent storage partitions may be opened and used","severity":"low","exploited":false,"published_at":"2025-10-28T17:49:59+00:00","url":"https://junglewise.ai/threats/contrast-has-insecure-luks2-persistent-storage-partitions-may-be-opened-5c0eb66a"},{"cvss":3.1,"slug":"contrast-leaks-workload-secrets-to-logs-on-info-level-7a4229e4","title":"Contrast leaks workload secrets to logs on INFO level","severity":"low","exploited":false,"published_at":"2025-08-28T16:46:40+00:00","url":"https://junglewise.ai/threats/contrast-leaks-workload-secrets-to-logs-on-info-level-7a4229e4"},{"cvss":3.1,"slug":"contrast-vulnerability-allows-arbitrary-host-data-injection-into-51171df5","title":"Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points","severity":"low","exploited":false,"published_at":"2025-07-09T17:56:24+00:00","url":"https://junglewise.ai/threats/contrast-vulnerability-allows-arbitrary-host-data-injection-into-51171df5"},{"cvss":3.1,"slug":"contrast-workload-secrets-leak-to-logs-on-info-level-ef0d231a","title":"Contrast workload secrets leak to logs on INFO level","severity":"low","exploited":false,"published_at":"2025-05-28T14:40:25+00:00","url":"https://junglewise.ai/threats/contrast-workload-secrets-leak-to-logs-on-info-level-ef0d231a"}],"generated_at":"2026-09-28T03:07:00.154823+00:00"}