CVE-2026-32952
MediumAdvisory
Published 23 Apr 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.010
- 62nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 274
- of 17,781 indexed, latest versions
- Container images
- 243
- deployed by those charts
- Fix available
- 1 of 1
- affected package
go-ntlmssp NTLM challenges can panic on malformed payloads
Carried by container images the latest versions of 274 of 17,781 indexed charts deploy, on 243 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20200615164410-66371956d46c, v0.0.0-20211209120228-48547f28849e, v0.0.0-20220621081337-cb9428e4ac1e, v0.0.0-20221128193559-754e69321358+2 more | 0.1.1 | 243 |
- OSV records
- GHSA-pjcq-xvwq-hhpj
- Also known as
- GO-2026-5543
Charts affected
274 by stars
Container images carrying it
243 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| rclone/ | 1e6eeabddc01 | github.com/ | 0.1.1 | 1 |
| rclone/ | f2fc45c8bc57 | github.com/ | 0.1.1 | 1 |
| runatlantis/ | 45fbaf7e207c | github.com/ | 0.1.1 | 1 |
| sarwansharma/ | 59d1da9385d1 | github.com/ | 0.1.1 | 1 |
| sealio/ | b0389d9848a5 | github.com/ | 0.1.1 | 1 |
| semaphoreui/ | 3996804607eb | github.com/ | 0.1.1 | 1 |
| semaphoreui/ | 5b50bc11833f | github.com/ | 0.1.1 | 1 |
| semaphoreui/ | 98ad9bc7a2a0 | github.com/ | 0.1.1 | 1 |
| semaphoreui/ | e9260bfa8255 | github.com/ | 0.1.1 | 1 |
| sigma2as/ | c284ead9ec3e | github.com/ | 0.1.1 | 1 |
| sky5367/ | d51bf68d4b26 | github.com/ | 0.1.1 | 1 |
| springhack/ | 4aceb821da88 | github.com/ | 0.1.1 | 1 |
| streamnative/ | 31533fa9fab7 | github.com/ | 0.1.1 | 1 |
| svtechnmaa/ | 1d71314424aa | github.com/ | 0.1.1 | 1 |
| svtechnmaa/ | 1a75d88031fe | github.com/ | 0.1.1 | 1 |
| syncthing/ | 7c60eb0ec887 | github.com/ | 0.1.1 | 1 |
| syncthing/ | 966433161272 | github.com/ | 0.1.1 | 1 |
| treeverse/ | 478f37a6cffc | github.com/ | 0.1.1 | 1 |
| versity/ | 5192635d0353 | github.com/ | 0.1.1 | 1 |
| versity/ | f730e0dbc1ef | github.com/ | 0.1.1 | 1 |
| wener/ | cc9fd4da44c0 | github.com/ | 0.1.1 | 1 |
| wener/ | 5c92cc9e8597 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 6e9ced773732 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | b6bf1888f9d5 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 68e17a8aaa40 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | fce5b6fd161c | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 69b55a1c1c5d | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 6a1c4a81a924 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 0881d3c9359b | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 13964b29d63e | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 5d0656fce7d4 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 8186d6dd81f4 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | f579d00721b0 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 9440a40b3947 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | ec40c3d9c48f | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 274a179fd402 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 00cd9316a379 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | b803fbe1cdb8 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | de42151adff6 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 791c8f9d885a | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 49b1c312e342 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | aa0c8526ae5e | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | a1d4cf8b8fe1 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | e3d1f1302e49 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | ac8459f70f85 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | af77073c184f | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | cce8ff866f60 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | 06ed5db6cd33 | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | b914032ef9ad | github.com/ | 0.1.1 | 1 |
| ghcr.io/ | a61c7022abcf | github.com/ | 0.1.1 | 1 |