StackRadar

CVE-2026-39830

Critical

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,440
of 17,787 indexed, latest versions
Container images
2,788
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses

Carried by container images the latest versions of 2,440 of 17,787 indexed charts deploy, on 2,788 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more0.52.02,788
OSV records
GHSA-vgwf-h737-ff37
Also known as
GO-2026-5017

Charts affected

2,440 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.9.12 of 3See more

argo-cd argo 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
golang.org/x/crypto@v0.47.0
0.52.0
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
golang.org/x/crypto@v0.36.0
0.52.0

Open the chart page →

2,989
jenkinsjenkinsciOfficialVerified publisher5.9.621 of 2See more

jenkins jenkinsci 5.9.62

1 of the 2 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-jdk21c1e4c349365f
golang.org/x/crypto@v0.36.0
0.52.0

Open the chart page →

2,527
gitlab-runnergitlabVerified publisher0.92.11 of 1See more

gitlab-runner gitlab 0.92.1

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
golang.org/x/crypto@v0.50.0
0.52.0

Open the chart page →

905
airflowapache-airflowOfficialVerified publisher1.22.01 of 4See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
quay.io/prometheus/statsd-exporter:v0.30.0378cb79c4ac7
golang.org/x/crypto@v0.49.0
0.52.0

Open the chart page →

3,207
velerovmware-tanzu12.1.01 of 1See more

velero vmware-tanzu 12.1.0

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
velero/velero:v1.18.111459094b1b2
golang.org/x/crypto@v0.46.0
0.52.0

Open the chart page →

1,337
rancherrancher-stable2.15.11 of 2See more

rancher rancher-stable 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
golang.org/x/crypto@v0.48.0
0.52.0

Open the chart page →

1,456
nfs-subdir-external-provisionernfs-subdir-external-provisioner4.0.181 of 1See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0

Open the chart page →

2,745
artifact-hubartifact-hubVerified publisher1.23.04 of 7See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
golang.org/x/crypto@v0.46.0
0.52.0
artifacthub/db-migrator:v1.23.028c13565ac5c
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.52.0
artifacthub/scanner:v1.23.02d8365601f0e
golang.org/x/crypto@v0.46.0
0.52.0
artifacthub/tracker:v1.23.05368d21a6e5c
golang.org/x/crypto@v0.42.0
0.52.0

Open the chart page →

10,782
alloygrafana1.12.11 of 2See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
golang.org/x/crypto@v0.50.0
0.52.0

Open the chart page →

1,139
prometheus-blackbox-exporterprometheus-communityOfficialVerified publisher11.18.01 of 1See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.28.0e753ff9f3fc4
golang.org/x/crypto@v0.45.0
0.52.0

Open the chart page →

594
deschedulerdescheduler0.36.01 of 1See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
golang.org/x/crypto@v0.49.0
0.52.0

Open the chart page →

569
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
golang.org/x/crypto@v0.21.0
0.52.0

Open the chart page →

7,909
argo-cdargo-cd-oci10.9.12 of 3See more

argo-cd argo-cd-oci 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
golang.org/x/crypto@v0.47.0
0.52.0
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
golang.org/x/crypto@v0.36.0
0.52.0

Open the chart page →

2,989
mimir-distributedgrafana6.2.02 of 6See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/crypto@v0.27.0
0.52.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/crypto@v0.27.0
0.52.0

Open the chart page →

4,519
natsnatsVerified publisher2.14.61 of 3See more

nats nats 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.7ffce8bd10338
golang.org/x/crypto@v0.50.0
0.52.0

Open the chart page →

2,315
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
golang.org/x/crypto@v0.40.0
0.52.0

Open the chart page →

1,765
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
golang.org/x/crypto@v0.51.0
0.52.0

Open the chart page →

30,167
falcofalcosecurity9.1.03 of 3See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
falcosecurity/falco:0.44.1d0cfe422d6ac
golang.org/x/crypto@v0.47.0
0.52.0
falcosecurity/falco-driver-loader:0.44.17df783d5269a
golang.org/x/crypto@v0.50.0
0.52.0
falcosecurity/falcoctl:0.13.00eeb79adc580
golang.org/x/crypto@v0.50.0
0.52.0

Open the chart page →

5,309
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392
0.52.0

Open the chart page →

2,315
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
golang.org/x/crypto@v0.36.0
0.52.0

Open the chart page →

1,360
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
golang.org/x/crypto@v0.45.0
0.52.0

Open the chart page →

969
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.11 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/crypto@v0.49.0
0.52.0

Open the chart page →

1,890
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
golang.org/x/crypto@v0.3.0
0.52.0

Open the chart page →

1,445
openebsopenebsOfficialVerified publisher4.6.110 of 35See more

openebs openebs 4.6.1

10 of the 35 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
golang.org/x/crypto@v0.36.0
0.52.0
grafana/loki:3.4.258a6c186ce78
golang.org/x/crypto@v0.32.0
0.52.0
library/nats:2.9.17-alpine1a7b320b2942
golang.org/x/crypto@v0.8.0
0.52.0
natsio/prometheus-nats-exporter:0.11.031c02aac089a
golang.org/x/crypto@v0.8.0
0.52.0
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
golang.org/x/crypto@v0.36.0
0.52.0
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/crypto@v0.27.0
0.52.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/crypto@v0.27.0
0.52.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/crypto@v0.36.0
0.52.0
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
golang.org/x/crypto@v0.41.0
0.52.0
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
golang.org/x/crypto@v0.37.0
0.52.0

Open the chart page →

24,009
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
golang.org/x/crypto@v0.22.0
0.52.0

Open the chart page →

930
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
golang.org/x/crypto@v0.11.0
0.52.0
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.52.0

Open the chart page →

2,883
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.52.0

Open the chart page →

2,059
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
golang.org/x/crypto@v0.36.0
0.52.0

Open the chart page →

3,096
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
golang.org/x/crypto@v0.38.0
0.52.0

Open the chart page →

13,875
connectonepassword-connect2.4.12 of 2See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
1password/connect-api:1.8.2e915c0c84397
golang.org/x/crypto@v0.48.0
0.52.0
1password/connect-sync:1.8.26297ca6136c0
golang.org/x/crypto@v0.48.0
0.52.0

Open the chart page →

2,562
node-problem-detectordeliveryheroVerified publisher2.4.11 of 1See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
golang.org/x/crypto@v0.46.0
0.52.0

Open the chart page →

1,901
miniominio-official5.4.02 of 2See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/crypto@v0.27.0
0.52.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/crypto@v0.27.0
0.52.0

Open the chart page →

2,483
openfaasopenfaas15.0.133 of 6See more

openfaas openfaas 15.0.13

3 of the 6 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
golang.org/x/crypto@v0.15.0
0.52.0
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
golang.org/x/crypto@v0.41.0
0.52.0
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
golang.org/x/crypto@v0.30.0
0.52.0

Open the chart page →

3,544
vault-secrets-operatorhashicorpVerified publisher1.5.11 of 2See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
golang.org/x/crypto@v0.26.0
0.52.0

Open the chart page →

1,040
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
golang.org/x/crypto@v0.14.0
0.52.0

Open the chart page →

1,367
rocketchatrocketchat-server7.0.24 of 12See more

rocketchat rocketchat-server 7.0.2

4 of the 12 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
golang.org/x/crypto@v0.12.0
0.52.0
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.52.0
natsio/nats-box:0.19.28031d190c7ee
golang.org/x/crypto@v0.31.0
0.52.0
natsio/prometheus-nats-exporter:0.18.002469dc907bc
golang.org/x/crypto@v0.45.0
0.52.0

Open the chart page →

12,283
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
golang.org/x/crypto@v0.14.0
0.52.0

Open the chart page →

2,102
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.15 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
golang.org/x/crypto@v0.50.0
0.52.0
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
golang.org/x/crypto@v0.45.0
0.52.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
golang.org/x/crypto@v0.48.0
0.52.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
golang.org/x/crypto@v0.46.0
0.52.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.15 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
golang.org/x/crypto@v0.50.0
0.52.0
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
golang.org/x/crypto@v0.45.0
0.52.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
golang.org/x/crypto@v0.48.0
0.52.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
golang.org/x/crypto@v0.46.0
0.52.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

4,061
chaos-meshchaos-meshVerified publisher2.8.44 of 4See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.52.0
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
golang.org/x/crypto@v0.49.0
0.52.0
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.48a8ec8d4c9ea
golang.org/x/crypto@v0.49.0
0.52.0
ghcr.io/chaos-mesh/chaos-mesh:v2.8.49e48285bb44c
golang.org/x/crypto@v0.49.0
0.52.0

Open the chart page →

6,362
csi-driver-nfscsi-driver-nfsVerified publisher4.13.41 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

1 of the 6 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

3,331
mariadb-operatormariadb-operator26.6.01 of 1See more

mariadb-operator mariadb-operator 26.6.0

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
ghcr.io/mariadb-operator/mariadb-operator:26.6.0a5e17b48f08e
golang.org/x/crypto@v0.51.0
0.52.0

Open the chart page →

377
atlantisatlantis6.15.11 of 1See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
golang.org/x/crypto@v0.45.0
0.52.0

Open the chart page →

1,892
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
golang.org/x/crypto@v0.31.0
0.52.0

Open the chart page →

3,514
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.52.0

Open the chart page →

2,453
milvusmilvus4.0.314 of 5See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.5-r2102aac62827b
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.52.0
milvusdb/milvus:v2.2.13a3a55e1c1497
golang.org/x/crypto@v0.9.0
0.52.0
milvusdb/milvus-config-tool:v0.1.12212dfb61401
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.52.0
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
golang.org/x/crypto@v0.7.0
0.52.0

Open the chart page →

32,353
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
golang.org/x/crypto@v0.12.0
0.52.0

Open the chart page →

10,648
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
golang.org/x/crypto@v0.35.0
0.52.0

Open the chart page →

2,221
prometheus-kafka-exporterprometheus-communityVerified publisher4.0.01 of 1See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
danielqsj/kafka-exporter:v1.9.04150e46b2e96
golang.org/x/crypto@v0.32.0
0.52.0

Open the chart page →

716
node-local-dnsdeliveryheroVerified publisher2.9.21 of 1See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-39830.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
golang.org/x/crypto@v0.43.0
0.52.0

Open the chart page →

1,691

Container images carrying it

2,788 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
golang.org/x/crypto@v0.45.0
0.52.0
1
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.52.0
1
goharbor/harbor-registryctl:v2.9.0cce272836449
golang.org/x/crypto@v0.7.0
0.52.0
1
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
golang.org/x/crypto@v0.45.0
0.52.0
1
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.52.0
1
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.52.0
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
golang.org/x/crypto@v0.46.0
0.52.0
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
golang.org/x/crypto@v0.0.0-20220513210258-46612604a0f9
0.52.0
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
golang.org/x/crypto@v0.11.0
0.52.0
1
golift/unifi-poller:v2.9.5486a63339969
golang.org/x/crypto@v0.17.0
0.52.0
1
golift/unifi-poller:v2.9.2585a29a06d05
golang.org/x/crypto@v0.13.0
0.52.0
1
gomods/athens:v0.17.10f61d1e62359
golang.org/x/crypto@v0.50.0
0.52.0
1
gomods/athens:v0.8.1d714c7ff0231
golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f
0.52.0
1
gomods/athens:v0.11.0efb811df7844
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.52.0
1
goofball222/pritunl:1.32.3602.807bf26032dfce
golang.org/x/crypto@v0.6.0
0.52.0
1
gophish/gophish:0.12.18a57cd171999
golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d
0.52.0
1
gotenberg/gotenberg:8.30206a6c708fc6
golang.org/x/crypto@v0.49.0
0.52.0
1
gotenberg/gotenberg:8.3467097317623a
golang.org/x/crypto@v0.50.0
0.52.0
1
gotify/server:2.1.409c79bc1e403
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.52.0
1
gotify/server:2.9.1a3af47067ce6
golang.org/x/crypto@v0.47.0
0.52.0
1
gradiant/open5gs-dbctl:0.10.3332031245fce
golang.org/x/crypto@v0.32.0
0.52.0
1
grafana/agent:v0.44.23364714a2f64
golang.org/x/crypto@v0.31.0
0.52.0
1
grafana/agent:v0.20.0825c09373d27
golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63
0.52.0
1
grafana/agent:v0.40.3f6cbec9409be
golang.org/x/crypto@v0.18.0
0.52.0
1
grafana/agent-operator:v0.34.1045c9125634c
golang.org/x/crypto@v0.8.0
0.52.0
1
grafana/alloy:v1.5.101a63f4e032c
golang.org/x/crypto@v0.29.0
0.52.0
1
grafana/alloy:v1.4.306bdcbb51fc2
golang.org/x/crypto@v0.27.0
0.52.0
1
grafana/alloy:v1.11.38c7256f412fe
golang.org/x/crypto@v0.41.0
0.52.0
1
grafana/alloy:v1.1.1c3dac4e26471
golang.org/x/crypto@v0.22.0
0.52.0
1
grafana/alloy:v1.14.0f50931848bd8
golang.org/x/crypto@v0.48.0
0.52.0
1
grafana/grafana:6.6.0052147d7e0ec
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.52.0
1
grafana/grafana:10.1.50679e877ba20
golang.org/x/crypto@v0.11.0
0.52.0
1
grafana/grafana:7.5.609bb407e26ab
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.52.0
1
grafana/grafana:13.0.10f86bada30d6
golang.org/x/crypto@v0.49.0
0.52.0
1
grafana/grafana:7.3.315b977f5207d
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.52.0
1
grafana/grafana:9.4.71a359d92f40e
golang.org/x/crypto@v0.4.0
0.52.0
1
grafana/grafana:10.1.11b9ca4bbc4a2
golang.org/x/crypto@v0.11.0
0.52.0
1
grafana/grafana:13.0.1-security-012d1f9ae67c17
golang.org/x/crypto@v0.49.0
0.52.0
1
grafana/grafana:12.2.22ebef928d7e5
golang.org/x/crypto@v0.42.0
0.52.0
1
grafana/grafana:12.2.135c41e0fd029
golang.org/x/crypto@v0.42.0
0.52.0
1
grafana/grafana:9.5.239c849cebccc
golang.org/x/crypto@v0.4.0
0.52.0
1
grafana/grafana:11.2.2-security-01464eac539793
golang.org/x/crypto@v0.26.0
0.52.0
1
grafana/grafana:11.5.15781759b3d27
golang.org/x/crypto@v0.32.0
0.52.0
1
grafana/grafana:11.6.062d2b9d20a19
golang.org/x/crypto@v0.35.0
0.52.0
1
grafana/grafana:8.0.3696823fbc561
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.52.0
1
grafana/grafana:10.2.36b5b37eb35bb
golang.org/x/crypto@v0.16.0
0.52.0
1
grafana/grafana:7.3.46d42886b3ebe
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.52.0
1
grafana/grafana:12.3.070d9599b186c
golang.org/x/crypto@v0.43.0
0.52.0
1
grafana/grafana:7.2.1733842cca5bd
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.52.0
1
grafana/grafana:12.2.074144189b384
golang.org/x/crypto@v0.41.0
0.52.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.