StackRadar

CVE-2026-39833

Critical

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,438
of 17,790 indexed, latest versions
Container images
2,789
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/crypto doesn't enforce invoking key constraints

Carried by container images the latest versions of 2,438 of 17,790 indexed charts deploy, on 2,789 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more0.52.02,789
OSV records
GHSA-jppx-rxg9-jmrx
Also known as
GO-2026-5005

Charts affected

2,438 by stars
ChartLatestAffected imagesRadar Score
juicefs-csi-driverkubegems0.19.22 of 6See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.23.03e4daf9626d5
golang.org/x/crypto@v0.14.0
0.52.0
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
golang.org/x/crypto@v0.14.0
0.52.0

Open the chart page →

4,838
knative-servingkubegems1.0.11 of 8See more

knative-serving kubegems 1.0.1

1 of the 8 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinnedbac158dfb0c7
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.52.0

Open the chart page →

10,469
kubegems-edgekubegems1.24.101 of 1See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

3,390
logging-operatorkubegems3.17.61 of 1See more

logging-operator kubegems 3.17.6

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/logging-operator:3.17.623c2d4d54a64
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.52.0

Open the chart page →

1,800
prometheus-adapterkubegems4.14.11 of 1See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
golang.org/x/crypto@v0.22.0
0.52.0

Open the chart page →

937
prometheus-blackbox-exporterkubegems7.1.31 of 1See more

prometheus-blackbox-exporter kubegems 7.1.3

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.22.0608acee5704a
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.52.0

Open the chart page →

1,634
volcanokubegems1.12.12 of 3See more

volcano kubegems 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
volcanosh/vc-controller-manager:v1.12.13815883c32f6
golang.org/x/crypto@v0.37.0
0.52.0
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
golang.org/x/crypto@v0.37.0
0.52.0

Open the chart page →

5,036
xpai-schedulerkubegems1.12.11 of 2See more

xpai-scheduler kubegems 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
projecthami/volcano-vgpu-device-plugin:v1.9.40c94118d1d98
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0

Open the chart page →

2,324
gptchat-api-feishubotkubegemsapp0.1.12 of 3See more

gptchat-api-feishubot kubegemsapp 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubegems/chatgpt-api-feishubot:latest7c93c84b2055
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.52.0
kubegems/chatgpt-api-proxy:latest8905c9dbbb5d
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.52.0

Open the chart page →

8,487
log-generatorkube-loggingVerified publisher0.6.01 of 1See more

log-generator kube-logging 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/log-generator:v0.6.08324bbc0ec08
golang.org/x/crypto@v0.5.0
0.52.0

Open the chart page →

1,269
logging-demokube-loggingVerified publisher4.0.31 of 1See more

logging-demo kube-logging 4.0.3

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/log-generator:v0.4.105aa441b20aa
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.52.0

Open the chart page →

1,267
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8
0.52.0

Open the chart page →

7,208
lokikube-opsVerified publisher1.7.31 of 1See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
quay.io/kube-ops/loki:2.2.14fbd63194674
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.52.0

Open the chart page →

2,653
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.52.0

Open the chart page →

4,157
adguard-homekubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

adguard-home kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.767157eb1dc3b2
golang.org/x/crypto@v0.50.0
0.52.0

Open the chart page →

725
cloudflaredkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
golang.org/x/crypto@v0.38.0
0.52.0

Open the chart page →

1,460
navidromekubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

navidrome kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
deluan/navidrome:0.61.29fa40b3d8dec
golang.org/x/crypto@v0.49.0
0.52.0

Open the chart page →

901
pocket-idkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
golang.org/x/crypto@v0.50.0
0.52.0

Open the chart page →

1,520
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.22 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
library/influxdb:2.8571eb4514977
golang.org/x/crypto@v0.39.0
0.52.0
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

5,547
syncthingkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

syncthing kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.07c60eb0ec887
golang.org/x/crypto@v0.51.0
0.52.0

Open the chart page →

1,311
tor-proxykubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
peterdavehello/tor-socks-proxy:latest0cc12d36d312
golang.org/x/crypto@v0.33.0
0.52.0

Open the chart page →

1,481
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
golang.org/x/crypto@v0.38.0
0.52.0

Open the chart page →

6,391
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
golang.org/x/crypto@v0.13.0
0.52.0

Open the chart page →

3,630
harbor-operatorkubernetes-replicator1.6.31 of 1See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
golang.org/x/crypto@v0.22.0
0.52.0

Open the chart page →

1,205
kubernetes-secret-generatorkubernetes-replicator3.4.11 of 1See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-secret-generator:v3.4.1465b8e6d0462
golang.org/x/crypto@v0.24.0
0.52.0

Open the chart page →

855
api-serverkubeshop0.11.162 of 2See more

api-server kubeshop 0.11.16

2 of the 2 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:0.11.160ad97f07a78b
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.52.0
minio/minio:latest14cea493d9a3
golang.org/x/crypto@v0.40.0
0.52.0

Open the chart page →

3,432
kusk-gatewaykubeshop0.0.651 of 2See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.52.0

Open the chart page →

1,621
testkube-apikubeshop2.1.1621 of 2See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
golang.org/x/crypto@v0.38.0
0.52.0

Open the chart page →

1,670
testkube-logskubeshop0.2.21 of 1See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubeshop/testkube-logs-server:latest094186b19698
golang.org/x/crypto@v0.32.0
0.52.0

Open the chart page →

1,286
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

1,562
cloudnative-pgkube-site-follower0.23.01 of 1See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
golang.org/x/crypto@v0.31.0
0.52.0

Open the chart page →

909
fluentbit-operatorkubesphereVerified publisher0.1.01 of 2See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubesphere/fluentbit-operator:v0.9.0b87db3c57cb3
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0

Open the chart page →

2,902
gitlabkubesphereVerified publisher4.2.35 of 17See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734
0.52.0
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.52.0
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.52.0
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.52.0
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.52.0

Open the chart page →

38,178
harborkubesphereVerified publisher1.9.37 of 11See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.52.0
goharbor/harbor-core:v2.5.386bf3031f4a7
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.52.0
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.52.0
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.52.0
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.52.0
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.52.0
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
golang.org/x/crypto@v0.0.0-20220513210258-46612604a0f9
0.52.0

Open the chart page →

17,851
chaos-meshkubesphere-stable2.5.13 of 3See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.52.0
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.52.0
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.52.0

Open the chart page →

8,580
cranekubesphere-stable0.5.22 of 3See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.52.0
gocrane/craned:v0.5.1a1400909118c
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.52.0

Open the chart page →

8,902
csi-qingcloudkubesphere-stable1.4.03 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

3 of the 6 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.52.0
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.52.0
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.52.0

Open the chart page →

12,444
deepflowkubesphere-stable6.2.6063 of 8See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
golang.org/x/crypto@v0.1.0
0.52.0
deepflowce/deepflowio-init-grafana:v6.2.6.56b51a0206b04
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.52.0
grafana/grafana:9.5.239c849cebccc
golang.org/x/crypto@v0.4.0
0.52.0

Open the chart page →

18,420
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
golang.org/x/crypto@v0.46.0
0.52.0

Open the chart page →

1,315
edgemeshkubesphere-stable0.1.02 of 2See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
golang.org/x/crypto@v0.7.0
0.52.0
kubeedge/edgemesh-server:latesta437cf5ec0ae
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.52.0

Open the chart page →

4,108
fpga-operatorkubesphere-stable2.7.42 of 7See more

fpga-operator kubesphere-stable 2.7.4

2 of the 7 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
inaccel/daemon:latest093e1ea90ab8
golang.org/x/crypto@v0.16.0
0.52.0
inaccel/reef:latestc967218739f3
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

5,770
iomeshkubesphere-stable1.1.011 of 25See more

iomesh kubesphere-stable 1.1.0

11 of the 25 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.52.0
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.52.0
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.52.0
iomesh/deck:v0.1.0a31e26b6ae22
golang.org/x/crypto@v0.16.0
0.52.0
iomesh/deck-plugin-iomesh:v0.1.00b13bf217110
golang.org/x/crypto@v0.16.0
0.52.0
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0
iomesh/node-disk-manager:1.8.0002c4b92fd34
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0
iomesh/node-disk-operator:1.8.0f6c76380db34
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0
iomesh/operator:v1.1.060081c9b2f52
golang.org/x/crypto@v0.14.0
0.52.0
iomesh/post-delete-hook:v1.1.0eea5651f3270
golang.org/x/crypto@v0.14.0
0.52.0

Open the chart page →

48,954
IOMeshkubesphere-stable1.2.011 of 25See more

IOMesh kubesphere-stable 1.2.0

11 of the 25 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.52.0
iomesh/deck:v0.2.0282d6c419ed3
golang.org/x/crypto@v0.16.0
0.52.0
iomesh/deck-plugin-iomesh:v0.2.0df149e4ab39f
golang.org/x/crypto@v0.16.0
0.52.0
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0
iomesh/node-disk-manager:1.8.0-2292ad270082e
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0
iomesh/operator:v1.2.0ba4dd6be7e59
golang.org/x/crypto@v0.14.0
0.52.0
iomesh/post-delete-hook:v1.2.0e3b92f838f4b
golang.org/x/crypto@v0.14.0
0.52.0

Open the chart page →

46,639
pulsarkubesphere-stable2.7.132 of 3See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.52.0
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.52.0

Open the chart page →

14,401
csi-neonsankubesphere-testVerified publisher1.3.03 of 6See more

csi-neonsan kubesphere-test 1.3.0

3 of the 6 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.52.0
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.52.0

Open the chart page →

18,526
csi-qingcloudkubesphere-testVerified publisher1.4.03 of 6See more

csi-qingcloud kubesphere-test 1.4.0

3 of the 6 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.52.0
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.52.0
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.52.0

Open the chart page →

12,444
minio-gatewaykubesphere-testVerified publisher0.1.01 of 1See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
golang.org/x/crypto@v0.40.0
0.52.0

Open the chart page →

1,084
openelbkubesphere-testVerified publisher0.2.41 of 2See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.4.4ed7311a0f9e4
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0

Open the chart page →

4,336
porterkubesphere-testVerified publisher0.2.21 of 2See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
kubesphere/porter:v0.4.38d1ed5ee1d2e
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0

Open the chart page →

2,791
snapshot-controllerkubesphere-testVerified publisher0.2.01 of 1See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39833.

Container imageDigestPackageFixed in
csiplugin/snapshot-controller:v4.0.000fcc441ea9f
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.52.0

Open the chart page →

2,220

Container images carrying it

2,789 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.52.0
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
golang.org/x/crypto@v0.36.0
0.52.0
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/crypto@v0.0.0-20181203042331-505ab145d0a9
0.52.0
2
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.52.0
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
golang.org/x/crypto@v0.5.0
0.52.0
2
kubernetesui/dashboard:v2.2.0148991563e37
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0
2
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.52.0
2
langgenius/dify-sandbox:0.2.009b7e8705673
golang.org/x/crypto@v0.18.0
0.52.0
2
library/arangodb:3.11.81e75d74954a4
golang.org/x/crypto@v0.17.0
0.52.0
2
library/influxdb:2.6.1-alpine44a366dd7724
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
0.52.0
2
library/influxdb:2.7b8d940ca9376
golang.org/x/crypto@v0.36.0
0.52.0
2
library/mongo:8.0.20098862b1339f
golang.org/x/crypto@v0.45.0
0.52.0
2
library/mongo:5.041108d183e97
golang.org/x/crypto@v0.45.0
0.52.0
2
library/nats:2.9.17-alpine1a7b320b2942
golang.org/x/crypto@v0.8.0
0.52.0
2
library/nats:2.10.7-alpine1bcddab51b80
golang.org/x/crypto@v0.16.0
0.52.0
2
library/nats:2.10.5-alpine85319e5e541b
golang.org/x/crypto@v0.15.0
0.52.0
2
library/nats:2.8.4-alpine988010f74b61
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.52.0
2
library/traefik:v3.7.16b9cbca6fac4
golang.org/x/crypto@v0.50.0
0.52.0
2
library/traefik:v2.57d5a6ae66572
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.52.0
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
golang.org/x/crypto@v0.22.0
0.52.0
2
listmonk/listmonk:v2.1.0d2eac77ddfad
golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e
0.52.0
2
listmonk/listmonk:latest:v6.2.0f535d59e1499
golang.org/x/crypto@v0.45.0
0.52.0
2
louislam/uptime-kuma:2.3.29aeb4e51d038
golang.org/x/crypto@v0.38.0
0.52.0
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
golang.org/x/crypto@v0.51.0
0.52.0
2
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
golang.org/x/crypto@v0.38.0
0.52.0
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.52.0
2
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee
0.52.0
2
minio/operator:v4.3.754393e03f3b2
golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b
0.52.0
2
moby/buildkit:v0.32.2-rootless504731e577c2
golang.org/x/crypto@v0.50.0
0.52.0
2
natsio/nats-account-server:1.0.0a3381560aab6
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.52.0
2
natsio/nats-box:0.11.09fbf7bf684e4
golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59
0.52.0
2
natsio/prometheus-nats-exporter:0.10.016048afb67a5
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.52.0
2
natsio/prometheus-nats-exporter:0.17.326c826662ac8
golang.org/x/crypto@v0.38.0
0.52.0
2
natsio/prometheus-nats-exporter:0.11.031c02aac089a
golang.org/x/crypto@v0.8.0
0.52.0
2
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
golang.org/x/crypto@v0.39.0
0.52.0
2
obolnetwork/charon:v1.10.0278c7e2897b6
golang.org/x/crypto@v0.49.0
0.52.0
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
golang.org/x/crypto@v0.36.0
0.52.0
2
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
golang.org/x/crypto@v0.36.0
0.52.0
2
openebs/node-disk-operator:2.1.06afe2123c457
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.52.0
2
openebs/provisioner-localpv:3.5.0aea39e49bb97
golang.org/x/crypto@v0.14.0
0.52.0
2
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.52.0
2
oryd/hydra-maester:v0.0.420a7a2bfd0e7d
golang.org/x/crypto@v0.51.0
0.52.0
2
oryd/kratos:v1.0.0d06fc5845f63
golang.org/x/crypto@v0.5.0
0.52.0
2
oryd/kratos:v1.3.1fe2428f103a6
golang.org/x/crypto@v0.26.0
0.52.0
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
golang.org/x/crypto@v0.1.0
0.52.0
2
osixia/openldap:1.4.0ccd95cc6e61e
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.52.0
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
golang.org/x/crypto@v0.20.0
0.52.0
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
golang.org/x/crypto@v0.27.0
0.52.0
2
phntom/kochi:1.1.33b82358bd56e
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.52.0
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.52.0
2

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.