{"id":"GO-2025-4078","revision":"624e2e5449a34621984a2fb60b985ce4","records":[{"revision":"624e2e5449a34621984a2fb60b985ce4","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4078","aliases":["CVE-2025-71422","GHSA-f5p4-p5q5-jv3h"],"title":"Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast","description":"Contrast has insecure LUKS2 persistent storage partitions may be opened and used in github.com/edgelesssys/contrast","state":0,"publishedAt":"2025-11-05T18:41:15+00:00","modifiedAt":"2026-09-27T11:55:58.1316839+00:00","affected":[{"ecosystem":"Go","name":"github.com/edgelesssys/contrast","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.12.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/edgelesssys/contrast/security/advisories/GHSA-f5p4-p5q5-jv3h","https://github.com/edgelesssys/contrast/commit/2252a231d570c2dce10a33660452b0bfc3c43958","https://github.com/edgelesssys/contrast/pull/1731"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4078","license":"OSV · upstream source license applies","key":"osv:GO-2025-4078","identifiers":["GO-2025-4078","CVE-2025-71422","GHSA-f5p4-p5q5-jv3h"]},"retained":false,"historicalAffected":[]}],"coverage":[]}