CVE-2026-32952
MediumAdvisory
Published 23 Apr 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.010
- 62nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 274
- of 17,781 indexed, latest versions
- Container images
- 243
- deployed by those charts
- Fix available
- 1 of 1
- affected package
go-ntlmssp NTLM challenges can panic on malformed payloads
Carried by container images the latest versions of 274 of 17,781 indexed charts deploy, on 243 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20200615164410-66371956d46c, v0.0.0-20211209120228-48547f28849e, v0.0.0-20220621081337-cb9428e4ac1e, v0.0.0-20221128193559-754e69321358+2 more | 0.1.1 | 243 |
- OSV records
- GHSA-pjcq-xvwq-hhpj
- Also known as
- GO-2026-5543
Charts affected
274 by stars
Container images carrying it
243 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 0b60b6565ab2 | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | 0f7c8ac484ac | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | 5501c419f42e | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | 5bb0aa825d16 | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | 6dabb4a2088c | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | 8935e75fa5d1 | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | 952f86d1116c | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | ba9f3b4b0b00 | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | c0ede65eb88e | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | cce234b4381a | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | d7cd0e172c4c | github.com/ | 0.1.1 | 1 |
| camptocamp/ | acfafc308d88 | github.com/ | 0.1.1 | 1 |
| casbin/ | 66f836ef778b | github.com/ | 0.1.1 | 1 |
| casbin/ | 770ad9ec3190 | github.com/ | 0.1.1 | 1 |
| casbin/ | 7729da148c61 | github.com/ | 0.1.1 | 1 |
| casbin/ | e08231f16c00 | github.com/ | 0.1.1 | 1 |
| chrislusf/ | ed80f00fde46 | github.com/ | 0.1.1 | 1 |
| cloudflare/ | c92ef5ac7e4b | github.com/ | 0.1.1 | 1 |
| defactops/ | 825cdf9ba706 | github.com/ | 0.1.1 | 1 |
| dexidp/ | 43655afd1a8f | github.com/ | 0.1.1 | 1 |
| djkormo/ | 9f34e87e7586 | github.com/ | 0.1.1 | 1 |
| everpcpc/ | b378d137ae8b | github.com/ | 0.1.1 | 1 |
| flanksource/ | 689687a7cf95 | github.com/ | 0.1.1 | 1 |
| flashcatcloud/ | 421acb36181b | github.com/ | 0.1.1 | 1 |
| fleetdm/ | 12e644b7f40e | github.com/ | 0.1.1 | 1 |
| fluxcd/ | 704d55295355 | github.com/ | 0.1.1 | 1 |
| foxcpp/ | 6ab538e2f28b | github.com/ | 0.1.1 | 1 |
| foxcpp/ | 8fa2bd8f6830 | github.com/ | 0.1.1 | 1 |
| foxcpp/ | a4b839985b9b | github.com/ | 0.1.1 | 1 |
| foxcpp/ | eeb5813fc4d1 | github.com/ | 0.1.1 | 1 |
| gitea/ | 76f516a1a8c2 | github.com/ | 0.1.1 | 1 |
| gitea/ | 7d13848af126 | github.com/ | 0.1.1 | 1 |
| gitea/ | ac73e0da341f | github.com/ | 0.1.1 | 1 |
| goharbor/ | 6412d679fdc3 | github.com/ | 0.1.1 | 1 |
| goharbor/ | 86bf3031f4a7 | github.com/ | 0.1.1 | 1 |
| goharbor/ | a30e5a8be3d9 | github.com/ | 0.1.1 | 1 |
| goharbor/ | c017dd84ee96 | github.com/ | 0.1.1 | 1 |
| grafana/ | 0679e877ba20 | github.com/ | 0.1.1 | 1 |
| grafana/ | 0f86bada30d6 | github.com/ | 0.1.1 | 1 |
| grafana/ | 1b9ca4bbc4a2 | github.com/ | 0.1.1 | 1 |
| grafana/ | 2d1f9ae67c17 | github.com/ | 0.1.1 | 1 |
| grafana/ | 2ebef928d7e5 | github.com/ | 0.1.1 | 1 |
| grafana/ | 35c41e0fd029 | github.com/ | 0.1.1 | 1 |
| grafana/ | 39c849cebccc | github.com/ | 0.1.1 | 1 |
| grafana/ | 464eac539793 | github.com/ | 0.1.1 | 1 |
| grafana/ | 5781759b3d27 | github.com/ | 0.1.1 | 1 |
| grafana/ | 62d2b9d20a19 | github.com/ | 0.1.1 | 1 |
| grafana/ | 6b5b37eb35bb | github.com/ | 0.1.1 | 1 |
| grafana/ | 70d9599b186c | github.com/ | 0.1.1 | 1 |
| grafana/ | 74144189b384 | github.com/ | 0.1.1 | 1 |