PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/edgelesssys/contrast Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts Medium Risk 4.3 2 months ago 1 day ago
github.com/edgelesssys/contrast Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast Unknown 2 months ago 1 day ago
github.com/edgelesssys/contrast Contrast has insecure LUKS2 persistent storage partitions may be opened and used Medium Risk 5.7 11 months ago 1 day ago
github.com/edgelesssys/contrast Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast Unknown 10 months ago 1 day ago
github.com/edgelesssys/contrast Contrast's unauthenticated recovery allows Coordinator impersonation High Risk 7.1 1 year ago 1 day ago
github.com/edgelesssys/contrast Contrast's unauthenticated recovery allows Coordinator impersonation in github.com/edgelesssys/contrast Unknown 1 year ago 1 day ago
github.com/edgelesssys/contrast Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points Low Risk 3.5 1 year ago 1 day ago
github.com/edgelesssys/contrast Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast Unknown 1 year ago 1 day ago
github.com/edgelesssys/contrast Contrast workload secrets leak to logs on INFO level High Risk 7.3 1 year ago 1 day ago
github.com/edgelesssys/contrast Contrast leaks workload secrets to logs on INFO level High Risk 7.3 1 year ago 1 day ago
github.com/edgelesssys/contrast Contrast workload secrets leak to logs on INFO level in github.com/edgelesssys/contrast Unknown 1 year ago 1 day ago
github.com/edgelesssys/contrast Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast Unknown 1 year ago 1 day ago
github.com/edgelesssys/contrast Contras Affected by CopyFile Policy Subversion via Symlinks High Risk 8.1 5 months ago 1 day ago
github.com/edgelesssys/contrast Contras Affected by CopyFile Policy Subversion via Symlinks in github.com/edgelesssys/contrast Unknown 3 months ago 1 day ago
github.com/edgelesssys/contrast Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries Low Risk 3.7 2 months ago 1 day ago
github.com/edgelesssys/contrast Contrast's Imagepuller registryFor uses unanchored suffix matching, leaking auth credentials and trusted CA configuration to sibling-domain registries in github.com/edgelesssys/contrast Unknown 2 months ago 1 day ago
github.com/edgelesssys/contrast Contrast BadAML injection allows arbitrary code execution High Risk 8.4 6 months ago 1 day ago
github.com/edgelesssys/contrast Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast Unknown 5 months ago 1 day ago
Data courtesy of OSV.dev
Page 1