CVE-2026-39828

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.3; base score, highest
EPSS: 0.004; 30th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,438; of 17,790 indexed, latest versions
Container images: 2,789; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions

Carried by container images the latest versions of 2,438 of 17,790 indexed charts deploy, on 2,789 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more	0.52.0	2,789

OSV records: GHSA-45gg-vh54-h5m9
Also known as: GO-2026-5014

Charts affected

2,438 by stars

Chart

Latest

Affected images

Radar Score

galaxy-depscloudve

1.1.1

3 of 7 See more

galaxy-deps cloudve 1.1.1

3 of the 7 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq-cluster-operator :1.14.0-scratch-r5	67ac64a9623a	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

10,581

galaxykubemancloudve

2.10.1

2 of 7 See more

galaxykubeman cloudve 2.10.1

2 of the 7 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.52.0

Open the chart page →

16,134

janisterminalcloudve

0.1.0

1 of 2 See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0

Open the chart page →

14,304

proxyinjectorcloudve

0.0.23

1 of 1 See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0

Open the chart page →

2,853

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	golang.org/x/crypto@v0.33.0	0.52.0

Open the chart page →

6,204

argo-cdcluster-deploy

0.3.2

2 of 3 See more

argo-cd cluster-deploy 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.1	0deb1a1c9176	golang.org/x/crypto@v0.36.0	0.52.0
quay.io/argoprojlabs/argocd-image-updater :v1.2.1	3c56f354fac5	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

3,752

argo-eventscluster-deploy

0.1.0

1 of 1 See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.10	a83d2699ae53	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

1,042

metaflowcluster-deploy

0.2.2

1 of 1 See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

8,072

mla-external-secretscluster-deploy

0.3.0

1 of 1 See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.1.0	ec40c3d9c48f	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

723

monitoringcluster-deploy

0.3.0

9 of 11 See more

monitoring cluster-deploy 0.3.0

9 of the 11 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/crypto@v0.47.0	0.52.0
grafana/loki :3.6.7	3c8fd3570dd9	golang.org/x/crypto@v0.45.0	0.52.0
grafana/loki-canary :3.6.7	0dac7d5cb383	golang.org/x/crypto@v0.45.0	0.52.0
prom/memcached-exporter :v0.15.5	92a6ad5a3d3e	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.89.0	cb4ac6a56555	golang.org/x/crypto@v0.47.0	0.52.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.52.0
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	golang.org/x/crypto@v0.47.0	0.52.0
quay.io/prometheus/pushgateway :v1.11.2	49ed9fdf3780	golang.org/x/crypto@v0.43.0	0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.52.0

Open the chart page →

8,219

clusterfactoryclusterfactory

0.2.0

2 of 5 See more

clusterfactory clusterfactory 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.3.1	c2a169c5e998	golang.org/x/crypto@v0.48.0	0.52.0
jenkins/jenkins :2.541.3-jdk21	c4098086090c	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

7,193

gitea-jenkinsclusterfactory

0.1.1

2 of 5 See more

gitea-jenkins clusterfactory 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
gitea/act_runner :latest	b5c35d6bdbb9	golang.org/x/crypto@v0.48.0	0.52.0
jenkins/jenkins :2.541.3-jdk21	c4098086090c	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

6,982

cluster-monitor-servercluster-monitor-server

0.10.2

1 of 1 See more

cluster-monitor-server cluster-monitor-server 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

753

clusternet-controller-managerclusternet

1.0.0

1 of 1 See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	golang.org/x/crypto@v0.40.0	0.52.0

Open the chart page →

1,403

kovecmacrae

0.2.0

1 of 1 See more

kove cmacrae 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.2.0	185bfaae750c	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

2,089

kove-deprecationscmacrae

0.1.2

1 of 1 See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.1.0	db1244edefc8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

2,203

door-agentcno

3.0.15

7 of 15 See more

door-agent cno 3.0.15

7 of the 15 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
beopenit/door-agent :v3.0.5	d24c323fe7c3	golang.org/x/crypto@v0.36.0	0.52.0
beopenit/door-helm :v3.0.1	b4d9f9bee224	golang.org/x/crypto@v0.13.0	0.52.0
beopenit/onboarding-operator-kubernetes :v3.0.2	75a48144e682	golang.org/x/crypto@v0.0.0-20220314234659-1baeb1ce4c0b	0.52.0
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/crypto@v0.26.0	0.52.0
library/docker :27-cli	851f91d24121	golang.org/x/crypto@v0.31.0	0.52.0
library/docker :27-dind	aa3df78ecf32	golang.org/x/crypto@v0.27.0	0.52.0
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0

Open the chart page →

19,454

traefik-forward-authcolearendt

0.0.15

1 of 1 See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0

Open the chart page →

2,234

loki-stackcommon-charts

1.0.3

3 of 12 See more

loki-stack common-charts 1.0.3

3 of the 12 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
grafana/loki :3.6.11	44148ad243c0	golang.org/x/crypto@v0.49.0	0.52.0
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/crypto@v0.42.0	0.52.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.91.0	7d9e4eea5f11	golang.org/x/crypto@v0.50.0	0.52.0

Open the chart page →

5,409

cgrccommongroundregistratiecomponent

0.1.0

1 of 3 See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
conduction/cgrc-php :dev	25415534d245	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,581

community-operator-v2community-operator-v2

1.0.0

1 of 2 See more

community-operator-v2 community-operator-v2 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/community-operator-v2 :v1.0.0	7f1bbbe114eb	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0

Open the chart page →

1,544

conduction-uiconduction-ui

0.1.0

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-php :dev	2744565516e8	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

12,915

consentbbconsentbb

2023.12.4

1 of 5 See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
igrantio/bb-consent-api :2023.12.2	2d2ea6546ffe	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

3,181

betaalservicecontacten-catalog

1.0.0

1 of 3 See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
conduction/betaalservice-php :latest	ece1ab544c57	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,218

contactmoment-componentcontactmoment-component

0.1.0

1 of 4 See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

8,417

containers-security-chartscontainers-security

0.1.0

1 of 7 See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.27.0	828ee36cb13a	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.52.0

Open the chart page →

9,153

coordimap-agentcoordimap-agent

0.4.3

1 of 1 See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
coordimap/coordimap-agent :latest	7748fd0fae9f	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

625

cortezacorteza

1.1.0

1 of 3 See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.4	cb9f200de5d2	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

8,441

corteza-all-in-onecorteza

0.1.0

1 of 2 See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.0	8eb7a26605c9	golang.org/x/crypto@v0.19.0	0.52.0

Open the chart page →

4,691

ociscosmicrocks

0.7.0

1 of 2 See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
owncloud/ocis :7.1.3	88e7c854517d	golang.org/x/crypto@v0.32.0	0.52.0

Open the chart page →

1,932

cosmo-traefikcosmo

0.9.1

1 of 2 See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
library/traefik :v2.10.1	1489caffaedb	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

3,678

cospacecospace

0.0.34

1 of 3 See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
ghcr.io/twigex/cospace :latest	e5ecfd607e42	golang.org/x/crypto@v0.48.0	0.52.0

Open the chart page →

2,282

katibcowboysysop

2.4.2

2 of 4 See more

katib cowboysysop 2.4.2

2 of the 4 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
kubeflowkatib/katib-controller :v0.12.0	12a28c8a0b41	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
kubeflowkatib/katib-ui :v0.12.0	129f0aaba976	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

6,563

kfservingcowboysysop

1.3.1

1 of 3 See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
kfserving/kfserving-controller :v0.6.1	63d79d04c2e3	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.52.0

Open the chart page →

3,837

kubernetes-mcpcowboysysop

2.0.0

1 of 1 See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
quay.io/manusa/kubernetes_mcp_server :v0.0.47	150f76e844d9	golang.org/x/crypto@v0.40.0	0.52.0

Open the chart page →

1,831

mongodbcowboysysop

15.1.5

1 of 1 See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.8-debian-12-r2	3163c3842bfd	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

6,214

mpi-operatorcowboysysop

1.2.2

1 of 1 See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0

Open the chart page →

2,577

notebook-controllercowboysysop

1.1.2

1 of 1 See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.52.0

Open the chart page →

2,582

training-operatorcowboysysop

1.2.2

1 of 1 See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

2,275

crossplane-controllerscrossplane

0.12.0

1 of 1 See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
crossplane/crossplane :v0.12.0	66666e6963af	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,312

oam-kubernetes-runtimecrossplane

0.0.3-71.g0f23590

1 of 2 See more

oam-kubernetes-runtime crossplane 0.0.3-71.g0f23590

1 of the 2 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,248

oam-kubernetes-runtime-legacycrossplane

0.3.1-5.g11e1894

1 of 1 See more

oam-kubernetes-runtime-legacy crossplane 0.3.1-5.g11e1894

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,231

external-service-operatorcrowdfox

0.1.0

1 of 1 See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	golang.org/x/crypto@v0.0.0-20190605123033-f99c8df09eb5	0.52.0

Open the chart page →

4,631

electric-mailcryptexlabs

0.0.1

1 of 5 See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0

Open the chart page →

5,980

purple-piecryptexlabs

0.0.1

1 of 4 See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0

Open the chart page →

5,980

csghubcsghub

2.4.3

10 of 34 See more

csghub csghub 2.4.3

10 of the 34 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
casbin/casdoor :3.62.0	e08231f16c00	golang.org/x/crypto@v0.47.0	0.52.0
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/crypto@v0.32.0	0.52.0
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/crypto@v0.40.0	0.52.0
opencsghq/csghub-portal :v2.4.0-ee	93ad59164d87	golang.org/x/crypto@v0.26.0	0.52.0
opencsghq/csghub-server :v2.4.0-ee	302c9d45d8a8	golang.org/x/crypto@v0.51.0	0.52.0
opencsghq/csghub-xnet :v2.4.0-ee	04121fd19ef9	golang.org/x/crypto@v0.37.0	0.52.0
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	golang.org/x/crypto@v0.28.0	0.52.0
opencsghq/gitlab-shell :v17.5.0	f6d7e7d6be5d	golang.org/x/crypto@v0.26.0	0.52.0
quay.io/argoproj/argocli :v3.7.11	577fc18f86ad	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/argoproj/workflow-controller :v3.7.11	c46aa0ded8ed	golang.org/x/crypto@v0.45.0	0.52.0

Open the chart page →

59,452

csgshipcsghub

0.4.6

1 of 10 See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
casbin/casdoor :3.62.1	7729da148c61	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

11,544

openldapcsic-charts

0.1.1

1 of 2 See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.52.0

Open the chart page →

5,294

rtcsic-charts

0.1.1

1 of 5 See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.11.2	a1041bb0f1d1	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

15,419

wazuhcsic-charts

0.1.0

1 of 4 See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39828.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.4.1	21994f40e0da	golang.org/x/crypto@v0.4.0	0.52.0

Open the chart page →

13,944

Container images carrying it

2,789 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
minio/mc :RELEASE.2024-01-16T16-06-34Z	591b097ea2d4	golang.org/x/crypto@v0.17.0	0.52.0	1
minio/mc :RELEASE.2025-04-16T18-13-26Z	aead63c77f9d	golang.org/x/crypto@v0.37.0	0.52.0	1
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/crypto@v0.6.0	0.52.0	1
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.52.0	1
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.52.0	1
minio/minio :RELEASE.2025-01-20T14-49-07Z-cpuv1	14b7076ca85a	golang.org/x/crypto@v0.32.0	0.52.0	1
minio/minio :RELEASE.2024-05-28T17-19-04Z	391d1d45fdbe	golang.org/x/crypto@v0.23.0	0.52.0	1
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	golang.org/x/crypto@v0.17.0	0.52.0	1
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	golang.org/x/crypto@v0.18.0	0.52.0	1
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/crypto@v0.7.0	0.52.0	1
minio/minio :RELEASE.2025-07-23T15-54-02Z	d249d1fb6966	golang.org/x/crypto@v0.40.0	0.52.0	1
minio/minio :RELEASE.2020-09-17T04-49-20Z	e2b7b633c250	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.52.0	1
minio/minio :RELEASE.2020-01-03T19-12-21Z	f00aa6ef2b72	golang.org/x/crypto@v0.0.0-20191117063200-497ca9f6d64f	0.52.0	1
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	golang.org/x/crypto@v0.1.0	0.52.0	1
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	golang.org/x/crypto@v0.5.0	0.52.0	1
minio/operator :v5.0.9	170b154d2c61	golang.org/x/crypto@v0.11.0	0.52.0	1
minio/operator :v4.1.0	2adc5be088f5	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.52.0	1
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.52.0	1
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0	1
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0	1
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0	1
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0	1
moby/buildkit :master-rootless	07115a67cd22	golang.org/x/crypto@v0.50.0	0.52.0	1
moby/buildkit :v0.33.0-rootless	80b15f0735e8	golang.org/x/crypto@v0.50.0	0.52.0	1
moby/buildkit :v0.10.0	c2aeafaed434	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.52.0	1
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0	1
moul/sshportal :v1.19.3	332b603727c3	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.52.0	1
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0	1
mrnim94/metrics-server-exporter :v2.4.0	86c4807a4bca	golang.org/x/crypto@v0.45.0	0.52.0	1
murtazashah46/helmfile :latest	4d11726cf803	golang.org/x/crypto@v0.5.0	0.52.0	1
mvisonneau/tailscale :v1.68.1	fc45ad8abf10	golang.org/x/crypto@v0.23.0	0.52.0	1
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0	1
nadoo/glider :0.16	38aadefbd607	golang.org/x/crypto@v0.26.0	0.52.0	1
nathanfirmo/dbgate :latest	6b0487e6e987	golang.org/x/crypto@v0.32.0	0.52.0	1
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/crypto@v0.9.0	0.52.0	1
natsio/nats-box :0.13.5	59cf2e949181	golang.org/x/crypto@v0.5.0	0.52.0	1
natsio/nats-box :0.18.0	abdc9f9f0120	golang.org/x/crypto@v0.38.0	0.52.0	1
natsio/nats-box :0.13.3	c507bd7e3831	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0	1
natsio/nats-box :0.14.2	e808e0644ce1	golang.org/x/crypto@v0.14.0	0.52.0	1
natsio/nats-kafka :1.4.2	bb241956b0dc	golang.org/x/crypto@v0.15.0	0.52.0	1
natsio/nats-surveyor :0.9.9	104a3e938b23	golang.org/x/crypto@v0.49.0	0.52.0	1
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	golang.org/x/crypto@v0.45.0	0.52.0	1
natsio/prometheus-nats-exporter :0.13.0	2adf791d9f9f	golang.org/x/crypto@v0.13.0	0.52.0	1
natsio/prometheus-nats-exporter :0.20.1	4fbf6dacb847	golang.org/x/crypto@v0.51.0	0.52.0	1
natsio/prometheus-nats-exporter :0.10.1	bce728062c4f	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0	1
ncabatoff/process-exporter	6f0549dc24e9	golang.org/x/crypto@v0.31.0	0.52.0	1
neosmemo/memos :0.29	3e1253477066	golang.org/x/crypto@v0.50.0	0.52.0	1
neosmemo/memos :0.26.2	3eefcc231141	golang.org/x/crypto@v0.47.0	0.52.0	1
neosmemo/memos :0.24	c6defc2dfb98	golang.org/x/crypto@v0.38.0	0.52.0	1
neosu/kubebadges :v0.0.5	256530d8e5c6	golang.org/x/crypto@v0.14.0	0.52.0	1