HIGH8.5Go
GHSA-5ph6-qq5x-7jwc· BIT-contour-2021-32783, CVE-2021-32783ExternalName Services can be used to gain access to Envoy's admin interface
Modified: 7/8/2026
package
Go/github.com/projectcontour/contour
pkg:go/github.com/projectcontour/contour
MEDIUM6.5Go
GHSA-g3xr-5w5j-w4q4· BIT-contour-2026-50149, CVE-2026-50149Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled
Modified: 9/10/2026
HIGH8.1Go
GHSA-x4mj-7f9g-29h4· BIT-contour-2026-41246, CVE-2026-41246Contour has Lua code injection via Cookie Path Rewrite Policy
Modified: 9/10/2026
—Go
GO-2022-0922· BIT-contour-2021-32783, CVE-2021-32783ExternalName Services can be used to gain access to Envoy's admin interface in github.com/projectcontour/contour
Modified: 3/3/2026
—Go
GO-2026-5738· BIT-contour-2026-41246, CVE-2026-41246Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour
Modified: 6/25/2026
—Go
GO-2026-5889· BIT-contour-2026-50149, CVE-2026-50149Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour
Modified: 8/26/2026