{"action":"Upgrade github.com/edgelesssys/contrast to 1.9.1 or later.","affected":[{"fixed":"1.9.1","introduced":"0"}],"component":"github.com/edgelesssys/contrast","cve_ids":["CVE-2025-71424"],"ecosystem":"Go","epss":0.00163,"exploited":false,"fixed_versions":["1.9.1"],"ghsa_id":"GHSA-phhq-63jg-fp7r","id":"tcs_01M5KFHECMCS4DZRWH6JWW4N0X","modified_at":"2026-09-27T11:55:50.735097148Z","published_at":"2025-07-09T17:56:24Z","references":["https://osv.dev/vulnerability/GHSA-phhq-63jg-fp7r","https://github.com/edgelesssys/contrast/security/advisories/GHSA-phhq-63jg-fp7r","https://github.com/edgelesssys/contrast/commit/635b471ddbb512b6661e6f1d767aab818bd50bda","https://github.com/edgelesssys/contrast","https://github.com/edgelesssys/contrast/releases/tag/v1.9.1"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GHSA-phhq-63jg-fp7r","url":"https://osv.dev/vulnerability/GHSA-phhq-63jg-fp7r"}],"summary":"Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points"}