github.com/projectcontour/contour
Contour is a Kubernetes ingress controller using Envoy proxy.
View on Github
Activity
- Latest release
- 1w ago
- Total releases
- 22
- Cadence
- ~daily
- Last 12 months
- 15
Reach
- Stars
- 3.9k
Details
- First release
- May 06, 2025
| Version | Released | |
|---|---|---|
v1.33.7
patch
|
v1.33.7
patch
Dependencies (45)
+ 37 more |
|
v1.33.6
patch
|
v1.33.6
patch
Dependencies (45)
+ 37 more |
|
v1.33.5
patch
|
v1.33.5
patch
Dependencies (45)
+ 37 more |
|
v1.31.6
patch
1 CVE
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev |
v1.31.6
patch
Dependencies (45)
+ 37 more |
|
v1.32.5
patch
1 CVE
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev |
v1.32.5
patch
Dependencies (45)
+ 37 more |
|
v1.33.4
patch
1 CVE
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev |
v1.33.4
patch
Dependencies (45)
+ 37 more |
|
v1.31.5
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.31.5
patch
Dependencies (45)
+ 37 more |
|
v1.32.4
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.32.4
patch
Dependencies (45)
+ 37 more |
|
v1.33.3
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.33.3
patch
Dependencies (45)
+ 37 more |
|
v1.31.4
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.31.4
patch
Dependencies (45)
+ 37 more |
|
v1.32.3
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.32.3
patch
Dependencies (45)
+ 37 more |
|
v1.33.2
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.33.2
patch
Dependencies (45)
+ 37 more |
|
v1.33.1
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.33.1
patch
Dependencies (45)
+ 37 more |
|
v1.32.2
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.32.2
patch
Dependencies (45)
+ 37 more |
|
v1.31.3
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.31.3
patch
Dependencies (45)
+ 37 more |
|
v1.33.0
minor
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.33.0
minor
Dependencies (45)
+ 37 more |
|
v1.30.5
initial
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.30.5
initial
Dependencies (45)
+ 37 more |
|
v1.31.2
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.31.2
patch
Dependencies (45)
+ 37 more |
|
v1.32.1
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.32.1
patch
Dependencies (45)
+ 37 more |
|
v1.32.0
minor
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.32.0
minor
Dependencies (45)
+ 37 more |
|
v1.31.1
patch
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.31.1
patch
Dependencies (45)
+ 37 more |
|
v1.31.0
minor
2 CVEs
CVE-2026-50149
GO-2026-5889
BIT-contour-2026-50149
GHSA-g3xr-5w5j-w4q4
Jul 07, 2026
Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Contour has Improper JWT Verification for Non-SNI Requests on Virtual Hosts with Fallback Certificate Enabled in github.com/projectcontour/contour Fixed in
1.33.5
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-41246
GO-2026-5738
BIT-contour-2026-41246
GHSA-x4mj-7f9g-29h4
Jun 25, 2026
Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour Fixed in
1.31.6
1.32.5
1.33.4
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.31.0
minor
Dependencies (45)
+ 37 more |