—
GO-2025-3920
Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast
Quick fix
GO-2025-3920 — github.com/edgelesssys/contrast: upgrade to the fixed version with the command below.
go get github.com/edgelesssys/contrast@v1.12.2Details
Contrast leaks workload secrets to logs on INFO level in github.com/edgelesssys/contrast
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/edgelesssys/contrast
Introduced in:
1.9.0Fixed in: 1.12.2Fix
go get github.com/edgelesssys/contrast@v1.12.2References
- https://github.com/edgelesssys/contrast/security/advisories/GHSA-vxg3-w9rv-rhr2[ADVISORY]
- https://github.com/edgelesssys/contrast/commit/5a5512c4af63c17bb66331e7bd2768a863b2f225[FIX]
- https://github.com/edgelesssys/contrast/commit/cf58026b30c43fe7df91eac5322da02e1725d554[FIX]
- https://github.com/edgelesssys/contrast/pull/1739[FIX]
- https://github.com/edgelesssys/contrast/security/advisories/GHSA-h5f8-crrq-4pw8[WEB]