Go/github.com/projectcontour/contour CVE-2026-50149: medium 6.5, EPSS 0.18%
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled
Action: Upgrade github.com/projectcontour/contour to 1.33.5 or later.
go get github.com/projectcontour/contour@v1.33.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.23.0 | 1.33.5 | - |
Fixed versions
| 1.33.5 |
Sources
- osv: GHSA-g3xr-5w5j-w4q4
- https://github.com/projectcontour/contour/security/advisories/GHSA-g3xr-5w5j-w4q4
- https://github.com/projectcontour/contour
CVE-2026-50149 · published · modified · JSON