CVE-2026-39833

Critical

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.004; 35th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,482; of 17,805 indexed, latest versions
Container images: 2,806; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto doesn't enforce invoking key constraints

Carried by container images the latest versions of 2,482 of 17,805 indexed charts deploy, on 2,806 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+154 more	0.52.0	2,806

OSV records: GHSA-jppx-rxg9-jmrx
Also known as: GO-2026-5005

Charts affected

2,482 by stars

Chart

Latest

Affected images

Radar Score

victoria-metrics-alertkubeblocks

0.8.3-reload

1 of 3 See more

victoria-metrics-alert kubeblocks 0.8.3-reload

1 of the 3 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.52.0

Open the chart page →

3,717

kubeclaritykubeclarity

2.23.3

2 of 5 See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/crypto@v0.12.0	0.52.0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

5,521

secret-operatorkubedoop

0.4.0

1 of 5 See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/secret-csi-driver :0.4.0	604a7d98ab58	golang.org/x/crypto@v0.45.0	0.52.0

Open the chart page →

4,456

cephfs-csikubegems

1.0.8

1 of 6 See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0

Open the chart page →

4,453

chartmuseumkubegems

3.8.0

1 of 1 See more

chartmuseum kubegems 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0

Open the chart page →

3,527

gatewaykubegems

0.3.2

2 of 2 See more

gateway kubegems 0.3.2

2 of the 2 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

3,507

giteakubegems

5.0.8

1 of 2 See more

gitea kubegems 5.0.8

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
gitea/gitea :1.16.8	b0bdf102b485	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0

Open the chart page →

3,401

juicefs-csi-driverkubegems

0.19.2

2 of 6 See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.23.0	3e4daf9626d5	golang.org/x/crypto@v0.14.0	0.52.0
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

4,866

knative-servingkubegems

1.0.1

1 of 8 See more

knative-serving kubegems 1.0.1

1 of the 8 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	bac158dfb0c7	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0

Open the chart page →

10,476

kubegems-edgekubegems

1.24.10

1 of 1 See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

3,399

logging-operatorkubegems

3.17.6

1 of 1 See more

logging-operator kubegems 3.17.6

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0

Open the chart page →

1,801

prometheus-adapterkubegems

4.14.1

1 of 1 See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

945

prometheus-blackbox-exporterkubegems

7.1.3

1 of 1 See more

prometheus-blackbox-exporter kubegems 7.1.3

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.52.0

Open the chart page →

1,635

volcanokubegems

1.12.1

2 of 3 See more

volcano kubegems 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	golang.org/x/crypto@v0.37.0	0.52.0
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	golang.org/x/crypto@v0.37.0	0.52.0

Open the chart page →

5,048

xpai-schedulerkubegems

1.12.1

1 of 2 See more

xpai-scheduler kubegems 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,325

gptchat-api-feishubotkubegemsapp

0.1.1

2 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0

Open the chart page →

8,494

log-generatorkube-logging

0.6.0

1 of 1 See more

log-generator kube-logging 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.6.0	8324bbc0ec08	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

1,269

logging-demokube-logging

4.0.3

1 of 1 See more

logging-demo kube-logging 4.0.3

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.4.1	05aa441b20aa	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

1,268

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.52.0

Open the chart page →

7,229

lokikube-ops

1.7.3

1 of 1 See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/loki :2.2.1	4fbd63194674	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0

Open the chart page →

2,654

promtailkube-ops

1.5.1

1 of 2 See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/promtail :2.2.1	34de6387233b	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0

Open the chart page →

4,159

adguard-homekubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

adguard-home kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.76	7157eb1dc3b2	golang.org/x/crypto@v0.50.0	0.52.0

Open the chart page →

726

cloudflaredkubernetes-homelab-helm-charts

0.1.1

1 of 1 See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/crypto@v0.38.0	0.52.0

Open the chart page →

1,481

navidromekubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

navidrome kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.61.2	9fa40b3d8dec	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

901

pocket-idkubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
ghcr.io/pocket-id/pocket-id :v2.7.0	45bdeaf3fcd6	golang.org/x/crypto@v0.50.0	0.52.0

Open the chart page →

1,532

scrutinykubernetes-homelab-helm-charts

0.2.2

2 of 3 See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
library/influxdb :2.8	571eb4514977	golang.org/x/crypto@v0.39.0	0.52.0
ghcr.io/analogj/scrutiny :v0.9.2-web	71be54e99608	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

5,595

syncthingkubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

syncthing kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
syncthing/syncthing :2.1.0	7c60eb0ec887	golang.org/x/crypto@v0.51.0	0.52.0

Open the chart page →

1,306

tor-proxykubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
peterdavehello/tor-socks-proxy :latest	0cc12d36d312	golang.org/x/crypto@v0.33.0	0.52.0

Open the chart page →

1,476

uptime-kumakubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.2.1-slim	059b49d64739	golang.org/x/crypto@v0.38.0	0.52.0

Open the chart page →

6,413

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/crypto@v0.13.0	0.52.0

Open the chart page →

3,632

harbor-operatorkubernetes-replicator

1.6.3

1 of 1 See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

1,205

kubernetes-secret-generatorkubernetes-replicator

3.4.1

1 of 1 See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	golang.org/x/crypto@v0.24.0	0.52.0

Open the chart page →

855

api-serverkubeshop

0.11.16

2 of 2 See more

api-server kubeshop 0.11.16

2 of the 2 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :0.11.16	0ad97f07a78b	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0
minio/minio :latest	14cea493d9a3	golang.org/x/crypto@v0.40.0	0.52.0

Open the chart page →

3,550

kusk-gatewaykubeshop

0.0.65

1 of 2 See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway :v1.5.4	8b5bfd57a3ce	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.52.0

Open the chart page →

1,622

testkube-apikubeshop

2.1.162

1 of 2 See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.1.162	e97dc620d9b4	golang.org/x/crypto@v0.38.0	0.52.0

Open the chart page →

1,670

testkube-logskubeshop

0.2.2

1 of 1 See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
kubeshop/testkube-logs-server :latest	094186b19698	golang.org/x/crypto@v0.32.0	0.52.0

Open the chart page →

1,431

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

1,570

cloudnative-pgkube-site-follower

0.23.0

1 of 1 See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

909

fluentbit-operatorkubesphere

0.1.0

1 of 2 See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
kubesphere/fluentbit-operator :v0.9.0	b87db3c57cb3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,903

gitlabkubesphere

4.2.3

5 of 17 See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.52.0
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0

Open the chart page →

38,196

harborkubesphere

1.9.3

7 of 11 See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	golang.org/x/crypto@v0.0.0-20220513210258-46612604a0f9	0.52.0

Open the chart page →

17,857

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0

Open the chart page →

8,585

cranekubesphere-stable

0.5.2

2 of 3 See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0
gocrane/craned :v0.5.1	a1400909118c	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.52.0

Open the chart page →

8,905

csi-qingcloudkubesphere-stable

1.4.0

3 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

3 of the 6 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0

Open the chart page →

12,449

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/crypto@v0.1.0	0.52.0
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/crypto@v0.4.0	0.52.0

Open the chart page →

18,496

easegresskubesphere-stable

1.0.0

1 of 1 See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
megaease/easegress :latest	fad1c7452958	golang.org/x/crypto@v0.46.0	0.52.0

Open the chart page →

1,329

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/crypto@v0.7.0	0.52.0
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0

Open the chart page →

4,135

fpga-operatorkubesphere-stable

2.7.4

2 of 7 See more

fpga-operator kubesphere-stable 2.7.4

2 of the 7 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/crypto@v0.16.0	0.52.0
inaccel/reef :latest	c967218739f3	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

5,785

iomeshkubesphere-stable

1.1.0

11 of 25 See more

iomesh kubesphere-stable 1.1.0

11 of the 25 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/crypto@v0.16.0	0.52.0
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/crypto@v0.16.0	0.52.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/crypto@v0.14.0	0.52.0
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

49,067

IOMeshkubesphere-stable

1.2.0

11 of 25 See more

IOMesh kubesphere-stable 1.2.0

11 of the 25 container images this version deploys carry CVE-2026-39833.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/crypto@v0.16.0	0.52.0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/crypto@v0.16.0	0.52.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/crypto@v0.14.0	0.52.0
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

46,756

Container images carrying it

2,806 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/superq/draytek-exporter :v0.2.0	3b577bdceaae	golang.org/x/crypto@v0.43.0	0.52.0	1
quay.io/superq/smokeping-prober :v0.12.0	2524b895bdae	golang.org/x/crypto@v0.51.0	0.52.0	1
quay.io/superq/smokeping-prober :v0.7.1	25d07dfc1d7e	golang.org/x/crypto@v0.8.0	0.52.0	1
quay.io/thanos/thanos :v0.40.1	aae7b2b030ed	golang.org/x/crypto@v0.39.0	0.52.0	1
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0	1
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/crypto@v0.24.0	0.52.0	1
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
quay.io/tigera/operator :v1.15.1	c6591da87aa8	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.52.0	1
quay.io/uswitch/kiam :v4.0	be3a5846922d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
quay.io/youniqx/heist :v1.1.209	c43b3a9d98ae	golang.org/x/crypto@v0.26.0	0.52.0	1
quay.io/zncdatadev/secret-csi-driver :0.4.0	604a7d98ab58	golang.org/x/crypto@v0.45.0	0.52.0	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0	1
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	golang.org/x/crypto@v0.13.0	0.52.0	1
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	golang.org/x/crypto@v0.0.0-20180808211826-de0752318171	0.52.0	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend :1.0.31	c7afac3446d6	golang.org/x/crypto@v0.36.0	0.52.0	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	golang.org/x/crypto@v0.48.0	0.52.0	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5	0.52.0	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	golang.org/x/crypto@v0.12.0	0.52.0	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0	1
registry.gitlab.com/shortlink-org/shortlink/bff :latest	f2194e526915	golang.org/x/crypto@v0.47.0	0.52.0	1
registry.gitlab.com/shortlink-org/shortlink/link :latest	86d87291ffd4	golang.org/x/crypto@v0.47.0	0.52.0	1
registry.gitlab.com/xrow-public/ci-tools/tools :main	9b9d1ed86b6a	golang.org/x/crypto@v0.39.0	0.52.0	1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	golang.org/x/crypto@v0.39.0	0.52.0	1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw :1.91.8	3261c5ae4783	golang.org/x/crypto@v0.45.0	0.52.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.33.0	6ef10d108e0e	golang.org/x/crypto@v0.36.0	0.52.0	1
registry.k8s.io/autoscaling/cluster-autoscaler :v1.34.0	7b172f42533c	golang.org/x/crypto@v0.36.0	0.52.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/crypto@v0.11.0	0.52.0	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	golang.org/x/crypto@v0.30.0	0.52.0	1
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	golang.org/x/crypto@v0.45.0	0.52.0	1
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	golang.org/x/crypto@v0.49.0	0.52.0	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/crypto@v0.43.0	0.52.0	1
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0	1
registry.k8s.io/etcd :3.6.4-0	e36c08168342	golang.org/x/crypto@v0.36.0	0.52.0	1
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	golang.org/x/crypto@v0.19.0	0.52.0	1
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	golang.org/x/crypto@v0.14.0	0.52.0	1
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/crypto@v0.16.0	0.52.0	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	golang.org/x/crypto@v0.21.0	0.52.0	1
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.52.0	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.52.0	1
registry.k8s.io/kwok/kwok :v0.8.0	6d25aa8fbdfe	golang.org/x/crypto@v0.48.0	0.52.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	golang.org/x/crypto@v0.18.0	0.52.0	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/crypto@v0.18.0	0.52.0	1
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	golang.org/x/crypto@v0.23.0	0.52.0	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	golang.org/x/crypto@v0.25.0	0.52.0	1
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	golang.org/x/crypto@v0.46.0	0.52.0	1