ghcr.io/projectcontour/contour:v1.33.3
23 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/projectcontour/contour:v1.33.3
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/projectcontour/contour:v1.33.3
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/projectcontour/contour:v1.33.3 \ --owner verity-org
Before patching
Found 31 vulnerabilities in the original image. 23 fixed by Copa. 8 remaining after patching.
17 HIGH12 MEDIUM1 LOW1 UNKNOWN
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2026-41246HIGH
- Package
- github.com/projectcontour/contour
- Installed
- v1.33.3
- Fixed
- 1.31.6, 1.32.5, 1.33.4
- CVE-2026-25681HIGH
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-27136HIGH
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-39821HIGH
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-42502HIGH
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-50149MEDIUM
- Package
- github.com/projectcontour/contour
- Installed
- v1.33.3
- Fixed
- 1.33.5
- CVE-2026-25680MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
- CVE-2026-42506MEDIUM
- Package
- golang.org/x/net
- Installed
- v0.54.0
- Fixed
- 0.55.0
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2026-41246 | github.com/projectcontour/contour | v1.33.3 | 1.31.6, 1.32.5, 1.33.4 | HIGH |
| CVE-2026-25681 | golang.org/x/net | v0.54.0 | 0.55.0 | HIGH |
| CVE-2026-27136 | golang.org/x/net | v0.54.0 | 0.55.0 | HIGH |
| CVE-2026-39821 | golang.org/x/net | v0.54.0 | 0.55.0 | HIGH |
| CVE-2026-42502 | golang.org/x/net | v0.54.0 | 0.55.0 | HIGH |
| CVE-2026-50149 | github.com/projectcontour/contour | v1.33.3 | 1.33.5 | MEDIUM |
| CVE-2026-25680 | golang.org/x/net | v0.54.0 | 0.55.0 | MEDIUM |
| CVE-2026-42506 | golang.org/x/net | v0.54.0 | 0.55.0 | MEDIUM |
Original image reference
ghcr.io/projectcontour/contour:v1.33.3