CVE-2026-32952
MediumAdvisory
Published 23 Apr 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.010
- 62nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 274
- of 17,781 indexed, latest versions
- Container images
- 243
- deployed by those charts
- Fix available
- 1 of 1
- affected package
go-ntlmssp NTLM challenges can panic on malformed payloads
Carried by container images the latest versions of 274 of 17,781 indexed charts deploy, on 243 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20200615164410-66371956d46c, v0.0.0-20211209120228-48547f28849e, v0.0.0-20220621081337-cb9428e4ac1e, v0.0.0-20221128193559-754e69321358+2 more | 0.1.1 | 243 |
- OSV records
- GHSA-pjcq-xvwq-hhpj
- Also known as
- GO-2026-5543
Charts affected
274 by stars
Container images carrying it
243 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| minio/ | 14cea493d9a3 | github.com/ | 0.1.1 | 16 |
| quay.io/ | 1dce27c494a1 | github.com/ | 0.1.1 | 8 |
| quay.io/ | 605eaa5d469c | github.com/ | 0.1.1 | 7 |
| quay.io/ | 2e4c14d1b444 | github.com/ | 0.1.1 | 6 |
| quay.io/ | 6b83f55bd99e | github.com/ | 0.1.1 | 4 |
| quay.io/ | c10bde7ff9ad | github.com/ | 0.1.1 | 4 |
| quay.io/ | 48ea4a77dfa7 | github.com/ | 0.1.1 | 4 |
| cloudpirates/ | 8dc02a7e5093 | github.com/ | 0.1.1 | 3 |
| goharbor/ | d7b780d23721 | github.com/ | 0.1.1 | 3 |
| grafana/ | 0dc5a246ab16 | github.com/ | 0.1.1 | 3 |
| grafana/ | a0f881232a6f | github.com/ | 0.1.1 | 3 |
| minio/ | bd11edda91f3 | github.com/ | 0.1.1 | 3 |
| ghcr.io/ | 8499afd690c4 | github.com/ | 0.1.1 | 3 |
| cs3org/ | 3b57a34a7dfd | github.com/ | 0.1.1 | 2 |
| cs3org/ | e80a4d67b352 | github.com/ | 0.1.1 | 2 |
| grafana/ | 079600c9517b | github.com/ | 0.1.1 | 2 |
| grafana/ | 2175aaa91c96 | github.com/ | 0.1.1 | 2 |
| grafana/ | 886b56d5534e | github.com/ | 0.1.1 | 2 |
| grafana/ | 9e1e77ade304 | github.com/ | 0.1.1 | 2 |
| grafana/ | d8ea37798ccc | github.com/ | 0.1.1 | 2 |
| grafana/ | e932bd6ed0e0 | github.com/ | 0.1.1 | 2 |
| hashicorp/ | 4db614d40d0e | github.com/ | 0.1.1 | 2 |
| hashicorp/ | 6b4e5dadf082 | github.com/ | 0.1.1 | 2 |
| hashicorp/ | 8de4d5f31b38 | github.com/ | 0.1.1 | 2 |
| inaccel/ | c967218739f3 | github.com/ | 0.1.1 | 2 |
| opencloudeu/ | f9634bb04905 | github.com/ | 0.1.1 | 2 |
| rclone/ | 74c51b8817e5 | github.com/ | 0.1.1 | 2 |
| streamnative/ | 0e6d7aa3ef32 | github.com/ | 0.1.1 | 2 |
| syncthing/ | 775c4aac4862 | github.com/ | 0.1.1 | 2 |
| ghcr.io/ | 020edbaee890 | github.com/ | 0.1.1 | 2 |
| quay.io/ | ec56edb1161d | github.com/ | 0.1.1 | 2 |
| quay.io/ | 2c314feeb5e8 | github.com/ | 0.1.1 | 2 |
| quay.io/ | 64adcb95ce09 | github.com/ | 0.1.1 | 2 |
| quay.io/ | 9c67cf8c92d8 | github.com/ | 0.1.1 | 2 |
| quay.io/ | d429b6d696e0 | github.com/ | 0.1.1 | 2 |
| quay.io/ | eee34b3de2dd | github.com/ | 0.1.1 | 2 |
| quay.io/ | 74611761f052 | github.com/ | 0.1.1 | 2 |
| quay.io/ | e18989b4f912 | github.com/ | 0.1.1 | 2 |
| quay.io/ | 0a9470447ebf | github.com/ | 0.1.1 | 2 |
| quay.io/ | 37b16a9dff00 | github.com/ | 0.1.1 | 2 |
| quay.io/ | 6730d96fc382 | github.com/ | 0.1.1 | 2 |
| quay.io/ | d8ad5515f44f | github.com/ | 0.1.1 | 2 |
| quay.io/ | fdcb9ac4963f | github.com/ | 0.1.1 | 2 |
| quay.io/ | 6262bc9a2730 | github.com/ | 0.1.1 | 2 |
| quay.io/ | 8e5e9490cd50 | github.com/ | 0.1.1 | 2 |
| quay.io/ | a0a002cb113c | github.com/ | 0.1.1 | 2 |
| abohatyrenko/ | fa98af15a13e | github.com/ | 0.1.1 | 1 |
| ansiblesemaphore/ | 03d1f8684027 | github.com/ | 0.1.1 | 1 |
| apecloud/ | 98abc64aa985 | github.com/ | 0.1.1 | 1 |
| bitnamilegacy/ | cb8ab5515676 | github.com/ | 0.1.1 | 1 |