Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-100837 · CVE overview and exploitation status

EUVD-2026-87832

GHSA-frqc-cxqj-qxmv

GHSA-6c87-g9pw-78fx

GO-2026-5865

cve-program · CVE-2026-100837

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-6c87-g9pw-78fx
• https://www.vulncheck.com/advisories/edgeless-systems-contrast-through-1.20.0-credential-leak-via-registry-suffix-matching

euvd · EUVD-2026-87832

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-6c87-g9pw-78fx
• https://www.vulncheck.com/advisories/edgeless-systems-contrast-through-1.20.0-credential-leak-via-registry-suffix-matching

nvd · CVE-2026-100837

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-6c87-g9pw-78fx
• https://www.vulncheck.com/advisories/edgeless-systems-contrast-through-1.20.0-credential-leak-via-registry-suffix-matching

osv · GHSA-6c87-g9pw-78fx

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-6c87-g9pw-78fx
• https://github.com/edgelesssys/contrast/commit/10826b1d82613025767fb094e8aa51a7dcfbd2a1
• https://github.com/edgelesssys/contrast
• https://github.com/edgelesssys/contrast/releases/tag/v1.21.0

osv · GO-2026-5865

• https://github.com/edgelesssys/contrast/security/advisories/GHSA-6c87-g9pw-78fx
• https://github.com/edgelesssys/contrast/commit/10826b1d82613025767fb094e8aa51a7dcfbd2a1
• https://github.com/edgelesssys/contrast/releases/tag/v1.21.0

No related changes are available here.