{"id":"GO-2025-3807","revision":"fe9c80f2d1014b08bfedebc9adb89fff","records":[{"revision":"fe9c80f2d1014b08bfedebc9adb89fff","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-3807","aliases":["CVE-2025-71424","GHSA-phhq-63jg-fp7r"],"title":"Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast","description":"Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast","state":0,"publishedAt":"2025-07-28T19:57:13+00:00","modifiedAt":"2026-09-27T11:55:50.7350971+00:00","affected":[{"ecosystem":"Go","name":"github.com/edgelesssys/contrast","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.9.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/edgelesssys/contrast/security/advisories/GHSA-phhq-63jg-fp7r","https://github.com/edgelesssys/contrast/commit/635b471ddbb512b6661e6f1d767aab818bd50bda","https://github.com/edgelesssys/contrast/releases/tag/v1.9.1"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-3807","license":"OSV · upstream source license applies","key":"osv:GO-2025-3807","identifiers":["GO-2025-3807","CVE-2025-71424","GHSA-phhq-63jg-fp7r"]},"retained":false,"historicalAffected":[]}],"coverage":[]}