CVE-2026-100836

2 advisories.

Go/github.com/edgelesssys/contrast CVE-2026-100836: medium 4.3, EPSS 0.15%

Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts

Action: Upgrade github.com/edgelesssys/contrast to 1.21.0 or later.

go get github.com/edgelesssys/contrast@v1.21.0

Affected

introduced	fixed	last affected
0	1.21.0	-

Fixed versions

1.21.0

Sources

CVE-2026-100836 · published 2026-07-01T18:47:53Z · modified 2026-09-27T11:56:00.527174184Z · JSON

Go/github.com/edgelesssys/contrast CVE-2026-100836: unknown, EPSS 0.15%

Constrata's coordinator transit engine `ciphertextContainer.UnmarshalJSON` panics on attacker-controlled short ciphertexts in github.com/edgelesssys/contrast

Action: Upgrade github.com/edgelesssys/contrast to 1.21.0 or later.

go get github.com/edgelesssys/contrast@v1.21.0

Affected

introduced	fixed	last affected
0	1.21.0	-

Fixed versions

1.21.0

Sources

CVE-2026-100836 · published 2026-07-07T15:26:37Z · modified 2026-09-27T11:56:00.527174184Z · JSON