VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/edgelesssys/contrast: vulnerability history, versions and safety

github.com/edgelesssys/contrast is a package in the Go ecosystem. Vulert records 18 vulnerabilities for it across 120 releases, from Feb 2025 to Jul 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
18 vulnerabilities recorded H5 M2 L2 U9
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
10 in the last 12 months

Most recent disclosure 07 Jul 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/edgelesssys/contrast vulnerabilities

Vulert verdict on github.com/edgelesssys/contrast v1.25.1 i

Updated on 23 Oct 2026

Action needed: v1.25.1 has 16 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 53/100
  • Security Unfixed issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.25.1 — affected i
  • Vulnerabilities on record 18 over 1 year · 10 in the last year i
  • Latest disclosure 07 Jul 2026 i
  • Highest CVSS 8.4 i
  • With no published fix 0 i
  • Stars 317 i
  • Last release this month i
  • Licence non-standard i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/edgelesssys/contrast, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20261022115641-0e9d3c0715ef 22 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261022115641-0e9d3c0715ef 22 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261022100255-f3106c457545 22 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261022083005-ddbb4cb6de6e 22 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261022083005-ddbb4cb6de6e 22 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1 21 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261021203626-28c6e576f40f 21 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261021200333-a0b004783f74 21 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261021200333-a0b004783f74 21 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261019115803-aabce51b8466 19 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261019115803-aabce51b8466 19 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261019093502-bb4b4732cff4 19 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261019093502-bb4b4732cff4 19 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261019074627-3fbec91d91dd 19 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261019074627-3fbec91d91dd 19 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261015081557-5bae4dee7648 15 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261015081557-5bae4dee7648 15 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261014151351-84aaf43dc717 14 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261014151351-84aaf43dc717 14 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261013112547-b587963141a8 13 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261013112547-b587963141a8 13 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261012150118-a633a51e63e0 12 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261012150118-a633a51e63e0 12 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261012064112-797df3fbb999 12 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261012063643-c92786aef651 12 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261012050710-108df68bd62f 12 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261012050710-108df68bd62f 12 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261009135806-bf2e271fbf8c 09 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261009135806-bf2e271fbf8c 09 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261009133624-e0b220abe6eb 09 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261008140705-47dcc23be9c0 08 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261008140705-47dcc23be9c0 08 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261008093651-f1d3123a5b7c 08 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261008093651-f1d3123a5b7c 08 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.1-0.20261008093651-f1d3123a5b7c 08 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261008070102-4e89fda0be16 08 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261007172530-2e8d73ca8253 07 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261007172530-2e8d73ca8253 07 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.25.0 07 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261007104759-5493e07fc086 07 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261007104759-5493e07fc086 07 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261006165152-88a6e62a6d01 06 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261006165152-88a6e62a6d01 06 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261006145305-9c1d2eb3cbd7 06 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261006121526-3b79c418ffb9 06 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261006121526-3b79c418ffb9 06 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261005142104-3a93ecd0c93f 05 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261005142104-3a93ecd0c93f 05 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20261001181421-8ad837bd03c5 01 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261001181421-8ad837bd03c5 01 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261001151127-f0b94733ba39 01 Oct 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20261001133416-b3012dfbb992 01 Oct 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260930163643-6cd16faa5c98 30 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260930163643-6cd16faa5c98 30 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260930074206-9f08f66db917 30 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260930074206-9f08f66db917 30 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260929151311-548ef232ead1 29 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260929151311-548ef232ead1 29 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260929074614-5b03f78a388d 29 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260929074614-5b03f78a388d 29 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260928104229-eb17c4da71db 28 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260928104229-eb17c4da71db 28 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260928065538-0c2fc8e1824b 28 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260928065538-0c2fc8e1824b 28 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260925181612-836db6716064 25 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260925181612-836db6716064 25 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260925125616-61efa5c52572 25 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260925125616-61efa5c52572 25 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260925065412-ea9580f7c766 25 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260925065412-ea9580f7c766 25 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260924122705-3ec75d4aa0c6 24 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260924115930-977e736f3f3f 24 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260924115930-977e736f3f3f 24 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260924074541-eba32ae01558 24 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1 23 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260923172003-12726dcfe6e6 23 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260923172003-12726dcfe6e6 23 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260923084542-96045b2854d6 23 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260923084542-96045b2854d6 23 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260922201809-d987f6072b45 22 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260922201809-a2b5757f7ec0 22 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260922201809-d987f6072b45 22 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260922133433-b756df10b600 22 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260922133433-b756df10b600 22 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260921105122-4eabd8051c80 21 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260921105122-4eabd8051c80 21 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260918090151-e332018d5c75 18 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260918090151-e332018d5c75 18 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260916145402-24f99b94bc96 16 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260916145402-24f99b94bc96 16 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260916092057-cefd720c02d1 16 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260916092057-cefd720c02d1 16 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260915063330-a2372487424a 15 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260915063330-a2372487424a 15 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260910074614-340962316af5 10 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260910074614-340962316af5 10 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260909125445-b9614f315824 09 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260909125445-b9614f315824 09 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260908143020-ffa9132900c2 08 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260908143020-ffa9132900c2 08 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260908101224-b0978e3a7712 08 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260908101224-b0978e3a7712 08 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260907112419-c05da32c0f6e 07 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260907112419-c05da32c0f6e 07 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260907044715-2b7b5a5387dd 07 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260907044715-2b7b5a5387dd 07 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260904151555-ef625605dc58 04 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260904151555-ef625605dc58 04 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260903154427-4661c0e61293 03 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260903154427-4661c0e61293 03 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260903092409-27559e6ed8ef 03 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260903092409-27559e6ed8ef 03 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260902101733-476a0ba065f9 02 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260902101733-476a0ba065f9 02 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260902090127-889ea9c8bc45 02 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260901154215-4494a243a347 01 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260901154215-4494a243a347 01 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260901140856-f5acb3c21c75 01 Sep 2026 H4 M2 L2 U8 — Yes Details →
v1.24.1-0.20260901140856-f5acb3c21c75 01 Sep 2026 H4 M2 L2 U8 — Yes Details →
v0.0.0-20260901135105-943b14d2134f 01 Sep 2026 H4 M2 L2 U8 — Yes Details →

The newest 120 of 1,021 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2025 10
  • 2026 8

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 10 of the 18 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/edgelesssys/contrast

The 5 most severe of 18 vulnerabilities recorded for this package

Search all 18 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Arbitrary Code Execution Vulnerability in Contrast Package Due to BadAML Injection 8.4 high 1.18.0 26 Mar 2026
Critical Symlink Vulnerability in Contrast Package Allows Arbitrary File Overwrites 8.1 high 1.19.1 30 Apr 2026
High Severity Vulnerability in Contrast Package: Workload Secrets Leakage 7.3 high 1.12.2 28 Aug 2025
Workload Secrets Exposure in Contrast Package - High Severity Vulnerability 7.3 high 1.8.1 28 May 2025
Coordinator Impersonation Vulnerability in Contrast Package 7.1 high 1.4.1 05 Feb 2025

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/edgelesssys/contrast

Is github.com/edgelesssys/contrast safe to use?

Vulert records 18 vulnerabilities for github.com/edgelesssys/contrast in Go: 0 critical, 5 high, 2 medium and 2 low, plus 9 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/edgelesssys/contrast's Vulert package health score?

Vulert scores github.com/edgelesssys/contrast 53/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/edgelesssys/contrast affected?

Yes. v1.25.1, the version you would install today, has 16 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does github.com/edgelesssys/contrast have?

18 vulnerabilities are recorded for github.com/edgelesssys/contrast in the Go ecosystem: 0 critical, 5 high, 2 medium and 2 low, plus 9 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/edgelesssys/contrast vulnerabilities disclosed?

10 vulnerabilities were recorded for github.com/edgelesssys/contrast in the last 12 months, and the oldest entry in this database dates to 05 Feb 2025. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/edgelesssys/contrast are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/edgelesssys/contrast for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/edgelesssys/contrast version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.