PT-2025-36645 · Go · Github.Com/Edgelesssys/Contrast

Published 2025-09-08 · Updated 2025-09-08

OSV

Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast

Related Identifiers

GO-2025-3920

Affected Products

Github.Com/Edgelesssys/Contrast

References · 6

• https://osv.dev/vulnerability/GO-2025-3920 · Vendor Advisory
• https://github.com/edgelesssys/contrast/security/advisories/GHSA-h5f8-crrq-4pw8 · Note
• https://github.com/edgelesssys/contrast/commit/cf58026b30c43fe7df91eac5322da02e1725d554 · Note
• https://github.com/edgelesssys/contrast/commit/5a5512c4af63c17bb66331e7bd2768a863b2f225 · Note
• https://github.com/edgelesssys/contrast/security/advisories/GHSA-vxg3-w9rv-rhr2 · Note
• https://github.com/edgelesssys/contrast/pull/1739 · Note