{"schema_version":"1.7.3","id":"GO-2025-4078","published":"2025-11-05T18:41:15Z","modified":"2026-09-27T11:55:58.131683901Z","aliases":["CVE-2025-71422","GHSA-f5p4-p5q5-jv3h"],"summary":"Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast","details":"Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast","affected":[{"package":{"name":"github.com/edgelesssys/contrast","ecosystem":"Go","purl":"pkg:golang/github.com/edgelesssys/contrast"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.12.1"}]}],"ecosystem_specific":{},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2025-4078.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/edgelesssys/contrast/security/advisories/GHSA-f5p4-p5q5-jv3h"},{"type":"FIX","url":"https://github.com/edgelesssys/contrast/commit/2252a231d570c2dce10a33660452b0bfc3c43958"},{"type":"FIX","url":"https://github.com/edgelesssys/contrast/pull/1731"}],"database_specific":{"review_status":"UNREVIEWED","url":"https://pkg.go.dev/vuln/GO-2025-4078"}}