Vulnerability GO-2026-5864
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 months ago
July 07, 2026 at 03:26 PM UTC
Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
v0.1.0 - v1.20.0
v0.1.0 - v1.20.0
Summary
Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
Details
Constrata's coordinator transit engine ciphertextContainer.UnmarshalJSON panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
2 months ago
Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast
v0.1.0 - v1.20.0 GO-2026-5865
v0.1.0 - v1.20.0 GO-2026-5865
Medium Risk
2 months ago
Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts
v0.1.0 - v1.20.0 GHSA-3ccm-4qq2-5wrp
v0.1.0 - v1.20.0 GHSA-3ccm-4qq2-5wrp
Low Risk
2 months ago
Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries
v0.1.0 - v1.20.0 GHSA-6c87-g9pw-78fx
v0.1.0 - v1.20.0 GHSA-6c87-g9pw-78fx
Unknown
3 months ago
Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast
v0.1.0 - v1.19.0 GO-2026-5624
v0.1.0 - v1.19.0 GO-2026-5624
High Risk
5 months ago
Contras Affected by CopyFile Policy Subversion via Symlinks
v0.1.0 - v1.19.0 GHSA-rh99-wc69-c255
v0.1.0 - v1.19.0 GHSA-rh99-wc69-c255
Impacted packages
Timeline
Published
2 months ago
July 07, 2026 at 03:26 PM UTC
Last Modified
23 hours ago
September 27, 2026 at 11:56 AM UTC