EUVD-2025-211010Published
Contrast before 1.12.1 Insecure LUKS2 Persistent Storage
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-71422 · Microsoft / collected KEV context
cve-program · CVE-2025-71422
- https://github.com/edgelesssys/contrast/security/advisories/GHSA-f5p4-p5q5-jv3h
- https://www.vulncheck.com/advisories/contrast-before-1.12.1-insecure-luks2-persistent-storage
euvd · EUVD-2025-211010
- https://github.com/edgelesssys/contrast/security/advisories/GHSA-f5p4-p5q5-jv3h
- https://www.vulncheck.com/advisories/contrast-before-1.12.1-insecure-luks2-persistent-storage
nvd · CVE-2025-71422
- https://github.com/edgelesssys/contrast/security/advisories/GHSA-f5p4-p5q5-jv3h
- https://www.vulncheck.com/advisories/contrast-before-1.12.1-insecure-luks2-persistent-storage
osv · GHSA-f5p4-p5q5-jv3h
- https://github.com/edgelesssys/contrast/security/advisories/GHSA-f5p4-p5q5-jv3h
- https://github.com/edgelesssys/contrast/pull/1731
- https://github.com/edgelesssys/contrast/commit/2252a231d570c2dce10a33660452b0bfc3c43958
- https://github.com/edgelesssys/contrast
- https://pkg.go.dev/vuln/GO-2025-4078
osv · GO-2025-4078
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.