CVE-2026-39831

Critical

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 36th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,432; of 17,790 indexed, latest versions
Container images: 2,780; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto: FIDO/U2F security key physical presence check can be bypassed

Carried by container images the latest versions of 2,432 of 17,790 indexed charts deploy, on 2,780 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more	0.52.0	2,780

OSV records: GHSA-89gr-r52h-f8rx
Also known as: GO-2026-5019

Charts affected

2,432 by stars

Chart

Latest

Affected images

Radar Score

galaxykubemancloudve

2.10.1

2 of 7 See more

galaxykubeman cloudve 2.10.1

2 of the 7 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.52.0

Open the chart page →

16,117

janisterminalcloudve

0.1.0

1 of 2 See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0

Open the chart page →

14,285

proxyinjectorcloudve

0.0.23

1 of 1 See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0

Open the chart page →

2,853

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	golang.org/x/crypto@v0.33.0	0.52.0

Open the chart page →

5,994

argo-cdcluster-deploy

0.3.2

2 of 3 See more

argo-cd cluster-deploy 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.1	0deb1a1c9176	golang.org/x/crypto@v0.36.0	0.52.0
quay.io/argoprojlabs/argocd-image-updater :v1.2.1	3c56f354fac5	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

3,733

argo-eventscluster-deploy

0.1.0

1 of 1 See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.10	a83d2699ae53	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

1,036

metaflowcluster-deploy

0.2.2

1 of 1 See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

7,521

mla-external-secretscluster-deploy

0.3.0

1 of 1 See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.1.0	ec40c3d9c48f	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

716

monitoringcluster-deploy

0.3.0

9 of 11 See more

monitoring cluster-deploy 0.3.0

9 of the 11 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/crypto@v0.47.0	0.52.0
grafana/loki :3.6.7	3c8fd3570dd9	golang.org/x/crypto@v0.45.0	0.52.0
grafana/loki-canary :3.6.7	0dac7d5cb383	golang.org/x/crypto@v0.45.0	0.52.0
prom/memcached-exporter :v0.15.5	92a6ad5a3d3e	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.89.0	cb4ac6a56555	golang.org/x/crypto@v0.47.0	0.52.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.52.0
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	golang.org/x/crypto@v0.47.0	0.52.0
quay.io/prometheus/pushgateway :v1.11.2	49ed9fdf3780	golang.org/x/crypto@v0.43.0	0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.52.0

Open the chart page →

8,185

clusterfactoryclusterfactory

0.2.0

2 of 5 See more

clusterfactory clusterfactory 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.3.1	c2a169c5e998	golang.org/x/crypto@v0.48.0	0.52.0
jenkins/jenkins :2.541.3-jdk21	c4098086090c	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

7,136

gitea-jenkinsclusterfactory

0.1.1

2 of 5 See more

gitea-jenkins clusterfactory 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
gitea/act_runner :latest	b5c35d6bdbb9	golang.org/x/crypto@v0.48.0	0.52.0
jenkins/jenkins :2.541.3-jdk21	c4098086090c	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

6,926

cluster-monitor-servercluster-monitor-server

0.10.2

1 of 1 See more

cluster-monitor-server cluster-monitor-server 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

746

clusternet-controller-managerclusternet

1.0.0

1 of 1 See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	golang.org/x/crypto@v0.40.0	0.52.0

Open the chart page →

1,394

kovecmacrae

0.2.0

1 of 1 See more

kove cmacrae 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.2.0	185bfaae750c	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

2,089

kove-deprecationscmacrae

0.1.2

1 of 1 See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.1.0	db1244edefc8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

2,203

door-agentcno

3.0.15

7 of 15 See more

door-agent cno 3.0.15

7 of the 15 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
beopenit/door-agent :v3.0.5	d24c323fe7c3	golang.org/x/crypto@v0.36.0	0.52.0
beopenit/door-helm :v3.0.1	b4d9f9bee224	golang.org/x/crypto@v0.13.0	0.52.0
beopenit/onboarding-operator-kubernetes :v3.0.2	75a48144e682	golang.org/x/crypto@v0.0.0-20220314234659-1baeb1ce4c0b	0.52.0
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/crypto@v0.26.0	0.52.0
library/docker :27-cli	851f91d24121	golang.org/x/crypto@v0.31.0	0.52.0
library/docker :27-dind	aa3df78ecf32	golang.org/x/crypto@v0.27.0	0.52.0
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0

Open the chart page →

19,380

traefik-forward-authcolearendt

0.0.15

1 of 1 See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0

Open the chart page →

2,234

loki-stackcommon-charts

1.0.3

3 of 12 See more

loki-stack common-charts 1.0.3

3 of the 12 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
grafana/loki :3.6.11	44148ad243c0	golang.org/x/crypto@v0.49.0	0.52.0
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/crypto@v0.42.0	0.52.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.91.0	7d9e4eea5f11	golang.org/x/crypto@v0.50.0	0.52.0

Open the chart page →

5,370

cgrccommongroundregistratiecomponent

0.1.0

1 of 3 See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
conduction/cgrc-php :dev	25415534d245	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,572

community-operator-v2community-operator-v2

1.0.0

1 of 2 See more

community-operator-v2 community-operator-v2 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/community-operator-v2 :v1.0.0	7f1bbbe114eb	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0

Open the chart page →

1,544

conduction-uiconduction-ui

0.1.0

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-php :dev	2744565516e8	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

12,906

consentbbconsentbb

2023.12.4

1 of 5 See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
igrantio/bb-consent-api :2023.12.2	2d2ea6546ffe	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

3,181

betaalservicecontacten-catalog

1.0.0

1 of 3 See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
conduction/betaalservice-php :latest	ece1ab544c57	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,209

contactmoment-componentcontactmoment-component

0.1.0

1 of 4 See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

8,408

containers-security-chartscontainers-security

0.1.0

1 of 7 See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.27.0	828ee36cb13a	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.52.0

Open the chart page →

9,146

coordimap-agentcoordimap-agent

0.4.3

1 of 1 See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
coordimap/coordimap-agent :latest	7748fd0fae9f	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

618

cortezacorteza

1.1.0

1 of 3 See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.4	cb9f200de5d2	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

8,251

corteza-all-in-onecorteza

0.1.0

1 of 2 See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.0	8eb7a26605c9	golang.org/x/crypto@v0.19.0	0.52.0

Open the chart page →

4,682

ociscosmicrocks

0.7.0

1 of 2 See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
owncloud/ocis :7.1.3	88e7c854517d	golang.org/x/crypto@v0.32.0	0.52.0

Open the chart page →

1,925

cosmo-traefikcosmo

0.9.1

1 of 2 See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
library/traefik :v2.10.1	1489caffaedb	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

3,672

cospacecospace

0.0.34

1 of 3 See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
ghcr.io/twigex/cospace :latest	e5ecfd607e42	golang.org/x/crypto@v0.48.0	0.52.0

Open the chart page →

2,202

katibcowboysysop

2.4.2

2 of 4 See more

katib cowboysysop 2.4.2

2 of the 4 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
kubeflowkatib/katib-controller :v0.12.0	12a28c8a0b41	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
kubeflowkatib/katib-ui :v0.12.0	129f0aaba976	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

6,542

kfservingcowboysysop

1.3.1

1 of 3 See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
kfserving/kfserving-controller :v0.6.1	63d79d04c2e3	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.52.0

Open the chart page →

3,830

kubernetes-mcpcowboysysop

2.0.0

1 of 1 See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
quay.io/manusa/kubernetes_mcp_server :v0.0.47	150f76e844d9	golang.org/x/crypto@v0.40.0	0.52.0

Open the chart page →

1,814

mongodbcowboysysop

15.1.5

1 of 1 See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.8-debian-12-r2	3163c3842bfd	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

6,183

mpi-operatorcowboysysop

1.2.2

1 of 1 See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0

Open the chart page →

2,577

notebook-controllercowboysysop

1.1.2

1 of 1 See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.52.0

Open the chart page →

2,582

training-operatorcowboysysop

1.2.2

1 of 1 See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

2,275

crossplane-controllerscrossplane

0.12.0

1 of 1 See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
crossplane/crossplane :v0.12.0	66666e6963af	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,312

oam-kubernetes-runtimecrossplane

0.0.3-71.g0f23590

1 of 2 See more

oam-kubernetes-runtime crossplane 0.0.3-71.g0f23590

1 of the 2 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,248

oam-kubernetes-runtime-legacycrossplane

0.3.1-5.g11e1894

1 of 1 See more

oam-kubernetes-runtime-legacy crossplane 0.3.1-5.g11e1894

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,231

external-service-operatorcrowdfox

0.1.0

1 of 1 See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	golang.org/x/crypto@v0.0.0-20190605123033-f99c8df09eb5	0.52.0

Open the chart page →

4,625

electric-mailcryptexlabs

0.0.1

1 of 5 See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0

Open the chart page →

5,973

purple-piecryptexlabs

0.0.1

1 of 4 See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0

Open the chart page →

5,973

csghubcsghub

2.4.3

10 of 34 See more

csghub csghub 2.4.3

10 of the 34 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
casbin/casdoor :3.62.0	e08231f16c00	golang.org/x/crypto@v0.47.0	0.52.0
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/crypto@v0.32.0	0.52.0
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/crypto@v0.40.0	0.52.0
opencsghq/csghub-portal :v2.4.0-ee	93ad59164d87	golang.org/x/crypto@v0.26.0	0.52.0
opencsghq/csghub-server :v2.4.0-ee	302c9d45d8a8	golang.org/x/crypto@v0.51.0	0.52.0
opencsghq/csghub-xnet :v2.4.0-ee	04121fd19ef9	golang.org/x/crypto@v0.37.0	0.52.0
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	golang.org/x/crypto@v0.28.0	0.52.0
opencsghq/gitlab-shell :v17.5.0	f6d7e7d6be5d	golang.org/x/crypto@v0.26.0	0.52.0
quay.io/argoproj/argocli :v3.7.11	577fc18f86ad	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/argoproj/workflow-controller :v3.7.11	c46aa0ded8ed	golang.org/x/crypto@v0.45.0	0.52.0

Open the chart page →

59,131

csgshipcsghub

0.4.6

1 of 10 See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
casbin/casdoor :3.62.1	7729da148c61	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

11,402

openldapcsic-charts

0.1.1

1 of 2 See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.52.0

Open the chart page →

5,293

rtcsic-charts

0.1.1

1 of 5 See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.11.2	a1041bb0f1d1	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

14,206

wazuhcsic-charts

0.1.0

1 of 4 See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.4.1	21994f40e0da	golang.org/x/crypto@v0.4.0	0.52.0

Open the chart page →

13,937

csi-driver-ipfscsi-driver-ipfs

0.2.0

4 of 6 See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

4 of the 6 container images this version deploys carry CVE-2026-39831.

Container image	Digest	Package	Fixed in
ghcr.io/ptrvsrg/csi-driver-ipfs :latest	97d2d9ccd7a5	golang.org/x/crypto@v0.51.0	0.52.0
registry.k8s.io/sig-storage/csi-provisioner :v6.1.1	d992c36d4ddd	golang.org/x/crypto@v0.41.0	0.52.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.52.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

3,630

Container images carrying it

2,780 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
gresearch/fasttrackml :latest	16d1228220fc	golang.org/x/crypto@v0.22.0	0.52.0	1
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0	1
grpl/grapple-cli :0.2.127	c00aafee6629	golang.org/x/crypto@v0.27.0	0.52.0	1
hashicorp/boundary :0.15.3	339b78b61750	golang.org/x/crypto@v0.21.0	0.52.0	1
hashicorp/boundary :0.21.0	37bf86488b74	golang.org/x/crypto@v0.45.0	0.52.0	1
hashicorp/boundary :latest	76a201954ca0	golang.org/x/crypto@v0.46.0	0.52.0	1
hashicorp/boundary :0.8.1	fb70bd9210ff	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.52.0	1
hashicorp/consul :1.17.0	712fe02d2f84	golang.org/x/crypto@v0.14.0	0.52.0	1
hashicorp/consul :1.15.3	ddff34041c5c	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.52.0	1
hashicorp/consul-k8s-control-plane :1.3.0	0e4452f0f265	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0	1
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0	1
hashicorp/terraform :1.4	4dcb45513699	golang.org/x/crypto@v0.1.0	0.52.0	1
hashicorp/terraform :1.9.7	b77efab1a448	golang.org/x/crypto@v0.21.0	0.52.0	1
hashicorp/terraform-k8s :1.1.2	b19857bab620	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.52.0	1
hashicorp/vault :1.15.4	0b01ed3924e6	golang.org/x/crypto@v0.15.0	0.52.0	1
hashicorp/vault :2.0.1	755355002715	golang.org/x/crypto@v0.51.0	0.52.0	1
hashicorp/vault :1.14.0	b2177a8bfe85	golang.org/x/crypto@v0.9.0	0.52.0	1
hashicorp/vault :1.19.0	bbb7f98dc67d	golang.org/x/crypto@v0.35.0	0.52.0	1
hashicorp/vault :1.8.4	dfc3500beb0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0	1
hashicorp/vault-k8s :1.6.2	103a2d817a74	golang.org/x/crypto@v0.35.0	0.52.0	1
hashicorp/vault-k8s :1.2.1	4500e988b7ce	golang.org/x/crypto@v0.5.0	0.52.0	1
hashicorp/vault-k8s :0.6.0	5697b85bc69a	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0	1
hashicorp/vault-k8s :1.7.2	ae3d307658b7	golang.org/x/crypto@v0.45.0	0.52.0	1
hashicorp/waypoint :0.11.3	97d521a27498	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.52.0	1
hbahadorzadeh/cert-manager-webhook-arvan :latest	bf9756b3bc47	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
headscale/headscale :0.25.1	a7a8ae9616bb	golang.org/x/crypto@v0.32.0	0.52.0	1
headscale/headscale :0.27.1	cd37b3001857	golang.org/x/crypto@v0.43.0	0.52.0	1
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	golang.org/x/crypto@v0.10.0	0.52.0	1
hetznercloud/hcloud-cloud-controller-manager :v1.13.0	ed5ee5f83973	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.52.0	1
hhaluk/mocktail :2.0.3	350d19360038	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0	1
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.52.0	1
holiman/nodemonitor :latest	5cd609761065	golang.org/x/crypto@v0.8.0	0.52.0	1
homeassistant/home-assistant :2023.10.3	021e2afc6e57	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0	1
homeassistant/home-assistant :2026.7	5a531753cea9	golang.org/x/crypto@v0.26.0	0.52.0	1
homeassistant/home-assistant :2023.12.4	8d000332b09b	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0	1
hoppscotch/hoppscotch :2024.11.0	538fe6ded4b6	golang.org/x/crypto@v0.14.0	0.52.0	1
huacnlee/gobackup :v3.1.1	560be93229a5	golang.org/x/crypto@v0.41.0	0.52.0	1
huangchengwu6904/hi-app :cac-1691047806	1b932f8221a9	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.52.0	1
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/crypto@v0.0.0-20201117144127-c1f2f97bffc9	0.52.0	1
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/crypto@v0.0.0-20201117144127-c1f2f97bffc9	0.52.0	1
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/crypto@v0.0.0-20200221231518-2aa609cf4a9d	0.52.0	1
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/crypto@v0.0.0-20200221231518-2aa609cf4a9d	0.52.0	1
hyperledgerk8s/bc-explorer :v20230504	1f1a06b61f18	golang.org/x/crypto@v0.7.0	0.52.0	1
hyperledgerk8s/bc-saas :v0.0.1-20230524	d8bc31176257	golang.org/x/crypto@v0.7.0	0.52.0	1
hyperledgerk8s/fabric-operator :7776e71	29a8af8be270	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.52.0	1
hyperledgerk8s/minio-mc :RELEASE.2023-01-28T20-29-38Z	729b3d128487	golang.org/x/crypto@v0.3.0	0.52.0	1
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	golang.org/x/crypto@v0.5.0	0.52.0	1
iamdorsah/bastillion :v0.1	db83a0254d81	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0	1
igrantio/bb-consent-api :2023.12.2	2d2ea6546ffe	golang.org/x/crypto@v0.14.0	0.52.0	1