Contrast before 1.19.1 CopyFile Policy Symlink Subversion

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-100838 · Microsoft / collected KEV context

EUVD-2026-87850

GHSA-h734-rggh-79xq

GHSA-rh99-wc69-c255

GO-2026-5624

cve-program · CVE-2026-100838

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-rh99-wc69-c255
• https://www.vulncheck.com/advisories/contrast-before-1.19.1-copyfile-policy-symlink-subversion

euvd · EUVD-2026-87850

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-rh99-wc69-c255
• https://www.vulncheck.com/advisories/contrast-before-1.19.1-copyfile-policy-symlink-subversion

nvd · CVE-2026-100838

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-rh99-wc69-c255
• https://www.vulncheck.com/advisories/contrast-before-1.19.1-copyfile-policy-symlink-subversion

osv · GHSA-rh99-wc69-c255

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-rh99-wc69-c255
• https://github.com/kata-containers/kata-containers/security/advisories/GHSA-q49m-57vm-c8cc
• https://gist.github.com/burgerdev/304dd0ab0fff1665b7c27e18a30cf96e
• https://github.com/edgelesssys/contrast
• https://github.com/edgelesssys/contrast/releases/tag/v1.19.1

osv · GO-2026-5624

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-rh99-wc69-c255
• https://gist.github.com/burgerdev/304dd0ab0fff1665b7c27e18a30cf96e
• https://github.com/edgelesssys/contrast/releases/tag/v1.19.1
• https://github.com/kata-containers/kata-containers/security/advisories/GHSA-q49m-57vm-c8cc

No related operational record is retained in the current change model.