id: GO-2025-3807
modules:
    - module: github.com/edgelesssys/contrast
      versions:
        - fixed: 1.9.1
      vulnerable_at: 1.9.0
summary: |-
    Contrast vulnerability allows arbitrary host data Injection into container
    VOLUME mount points in github.com/edgelesssys/contrast
ghsas:
    - GHSA-phhq-63jg-fp7r
references:
    - advisory: https://github.com/edgelesssys/contrast/security/advisories/GHSA-phhq-63jg-fp7r
    - fix: https://github.com/edgelesssys/contrast/commit/635b471ddbb512b6661e6f1d767aab818bd50bda
    - web: https://github.com/edgelesssys/contrast/releases/tag/v1.9.1
source:
    id: GHSA-phhq-63jg-fp7r
    created: 2025-07-21T16:53:56.528055016Z
review_status: UNREVIEWED