{"action":"Upgrade github.com/edgelesssys/contrast to 1.9.1 or later.","affected":[{"fixed":"1.9.1","introduced":"0"}],"component":"github.com/edgelesssys/contrast","cve_ids":["CVE-2025-71424"],"ecosystem":"Go","epss":0.00163,"exploited":false,"fixed_versions":["1.9.1"],"ghsa_id":"GHSA-phhq-63jg-fp7r","id":"tcs_01M5KG9DBPM6S5G4HHHYWVVTMG","modified_at":"2026-09-27T11:55:50.735097148Z","published_at":"2025-07-28T19:57:13Z","references":["https://osv.dev/vulnerability/GO-2025-3807","https://github.com/edgelesssys/contrast/security/advisories/GHSA-phhq-63jg-fp7r","https://github.com/edgelesssys/contrast/commit/635b471ddbb512b6661e6f1d767aab818bd50bda","https://github.com/edgelesssys/contrast/releases/tag/v1.9.1"],"severity":{"label":"low","score":3.5},"sources":[{"source":"osv","source_id":"GO-2025-3807","url":"https://osv.dev/vulnerability/GO-2025-3807"},{"source":"nvd","source_id":"CVE-2025-71424","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71424"}],"summary":"Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points in github.com/edgelesssys/contrast"}