CVE-2026-39834

Critical

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,431; of 17,790 indexed, latest versions
Container images: 2,778; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto vulnerable to infinite loop on large channel writes

Carried by container images the latest versions of 2,431 of 17,790 indexed charts deploy, on 2,778 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more	0.52.0	2,778

OSV records: GHSA-rm3j-f69w-wqmq
Also known as: GO-2026-5020

Charts affected

2,431 by stars

Chart

Latest

Affected images

Radar Score

galaxykubemancloudve

2.10.1

2 of 7 See more

galaxykubeman cloudve 2.10.1

2 of the 7 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.52.0

Open the chart page →

16,117

janisterminalcloudve

0.1.0

1 of 2 See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0

Open the chart page →

14,285

proxyinjectorcloudve

0.0.23

1 of 1 See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0

Open the chart page →

2,853

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	golang.org/x/crypto@v0.33.0	0.52.0

Open the chart page →

5,994

argo-cdcluster-deploy

0.3.2

2 of 3 See more

argo-cd cluster-deploy 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v3.5.1	0deb1a1c9176	golang.org/x/crypto@v0.36.0	0.52.0
quay.io/argoprojlabs/argocd-image-updater :v1.2.1	3c56f354fac5	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

3,733

argo-eventscluster-deploy

0.1.0

1 of 1 See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.10	a83d2699ae53	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

1,036

metaflowcluster-deploy

0.2.2

1 of 1 See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

7,521

mla-external-secretscluster-deploy

0.3.0

1 of 1 See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.1.0	ec40c3d9c48f	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

716

monitoringcluster-deploy

0.3.0

9 of 11 See more

monitoring cluster-deploy 0.3.0

9 of the 11 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/crypto@v0.47.0	0.52.0
grafana/loki :3.6.7	3c8fd3570dd9	golang.org/x/crypto@v0.45.0	0.52.0
grafana/loki-canary :3.6.7	0dac7d5cb383	golang.org/x/crypto@v0.45.0	0.52.0
prom/memcached-exporter :v0.15.5	92a6ad5a3d3e	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.89.0	cb4ac6a56555	golang.org/x/crypto@v0.47.0	0.52.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.52.0
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	golang.org/x/crypto@v0.47.0	0.52.0
quay.io/prometheus/pushgateway :v1.11.2	49ed9fdf3780	golang.org/x/crypto@v0.43.0	0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.52.0

Open the chart page →

8,185

clusterfactoryclusterfactory

0.2.0

2 of 5 See more

clusterfactory clusterfactory 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.3.1	c2a169c5e998	golang.org/x/crypto@v0.48.0	0.52.0
jenkins/jenkins :2.541.3-jdk21	c4098086090c	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

7,136

gitea-jenkinsclusterfactory

0.1.1

2 of 5 See more

gitea-jenkins clusterfactory 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
gitea/act_runner :latest	b5c35d6bdbb9	golang.org/x/crypto@v0.48.0	0.52.0
jenkins/jenkins :2.541.3-jdk21	c4098086090c	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

6,926

cluster-monitor-servercluster-monitor-server

0.10.2

1 of 1 See more

cluster-monitor-server cluster-monitor-server 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

746

clusternet-controller-managerclusternet

1.0.0

1 of 1 See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/clusternet/clusternet-controller-manager :v1.0.0	2ce077d3d02d	golang.org/x/crypto@v0.40.0	0.52.0

Open the chart page →

1,394

kovecmacrae

0.2.0

1 of 1 See more

kove cmacrae 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.2.0	185bfaae750c	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

2,089

kove-deprecationscmacrae

0.1.2

1 of 1 See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.1.0	db1244edefc8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

2,203

door-agentcno

3.0.15

7 of 15 See more

door-agent cno 3.0.15

7 of the 15 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
beopenit/door-agent :v3.0.5	d24c323fe7c3	golang.org/x/crypto@v0.36.0	0.52.0
beopenit/door-helm :v3.0.1	b4d9f9bee224	golang.org/x/crypto@v0.13.0	0.52.0
beopenit/onboarding-operator-kubernetes :v3.0.2	75a48144e682	golang.org/x/crypto@v0.0.0-20220314234659-1baeb1ce4c0b	0.52.0
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/crypto@v0.26.0	0.52.0
library/docker :27-cli	851f91d24121	golang.org/x/crypto@v0.31.0	0.52.0
library/docker :27-dind	aa3df78ecf32	golang.org/x/crypto@v0.27.0	0.52.0
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0

Open the chart page →

19,380

traefik-forward-authcolearendt

0.0.15

1 of 1 See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0

Open the chart page →

2,234

loki-stackcommon-charts

1.0.3

3 of 12 See more

loki-stack common-charts 1.0.3

3 of the 12 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
grafana/loki :3.6.11	44148ad243c0	golang.org/x/crypto@v0.49.0	0.52.0
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/crypto@v0.42.0	0.52.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.91.0	7d9e4eea5f11	golang.org/x/crypto@v0.50.0	0.52.0

Open the chart page →

5,370

cgrccommongroundregistratiecomponent

0.1.0

1 of 3 See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
conduction/cgrc-php :dev	25415534d245	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,572

community-operator-v2community-operator-v2

1.0.0

1 of 2 See more

community-operator-v2 community-operator-v2 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/community-operator-v2 :v1.0.0	7f1bbbe114eb	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0

Open the chart page →

1,544

conduction-uiconduction-ui

0.1.0

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-php :dev	2744565516e8	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

12,906

consentbbconsentbb

2023.12.4

1 of 5 See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
igrantio/bb-consent-api :2023.12.2	2d2ea6546ffe	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

3,181

betaalservicecontacten-catalog

1.0.0

1 of 3 See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
conduction/betaalservice-php :latest	ece1ab544c57	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,209

contactmoment-componentcontactmoment-component

0.1.0

1 of 4 See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

8,408

containers-security-chartscontainers-security

0.1.0

1 of 7 See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.27.0	828ee36cb13a	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.52.0

Open the chart page →

9,146

coordimap-agentcoordimap-agent

0.4.3

1 of 1 See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
coordimap/coordimap-agent :latest	7748fd0fae9f	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

618

cortezacorteza

1.1.0

1 of 3 See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.4	cb9f200de5d2	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

8,251

corteza-all-in-onecorteza

0.1.0

1 of 2 See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.0	8eb7a26605c9	golang.org/x/crypto@v0.19.0	0.52.0

Open the chart page →

4,682

ociscosmicrocks

0.7.0

1 of 2 See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
owncloud/ocis :7.1.3	88e7c854517d	golang.org/x/crypto@v0.32.0	0.52.0

Open the chart page →

1,925

cosmo-traefikcosmo

0.9.1

1 of 2 See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
library/traefik :v2.10.1	1489caffaedb	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

3,672

cospacecospace

0.0.34

1 of 3 See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/twigex/cospace :latest	e5ecfd607e42	golang.org/x/crypto@v0.48.0	0.52.0

Open the chart page →

2,202

katibcowboysysop

2.4.2

2 of 4 See more

katib cowboysysop 2.4.2

2 of the 4 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
kubeflowkatib/katib-controller :v0.12.0	12a28c8a0b41	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
kubeflowkatib/katib-ui :v0.12.0	129f0aaba976	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

6,542

kfservingcowboysysop

1.3.1

1 of 3 See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
kfserving/kfserving-controller :v0.6.1	63d79d04c2e3	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.52.0

Open the chart page →

3,830

kubernetes-mcpcowboysysop

2.0.0

1 of 1 See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/manusa/kubernetes_mcp_server :v0.0.47	150f76e844d9	golang.org/x/crypto@v0.40.0	0.52.0

Open the chart page →

1,814

mongodbcowboysysop

15.1.5

1 of 1 See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.8-debian-12-r2	3163c3842bfd	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

6,183

mpi-operatorcowboysysop

1.2.2

1 of 1 See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0

Open the chart page →

2,577

notebook-controllercowboysysop

1.1.2

1 of 1 See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.52.0

Open the chart page →

2,582

training-operatorcowboysysop

1.2.2

1 of 1 See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

2,275

crossplane-controllerscrossplane

0.12.0

1 of 1 See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
crossplane/crossplane :v0.12.0	66666e6963af	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,312

oam-kubernetes-runtimecrossplane

0.0.3-71.g0f23590

1 of 2 See more

oam-kubernetes-runtime crossplane 0.0.3-71.g0f23590

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,248

oam-kubernetes-runtime-legacycrossplane

0.3.1-5.g11e1894

1 of 1 See more

oam-kubernetes-runtime-legacy crossplane 0.3.1-5.g11e1894

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,231

external-service-operatorcrowdfox

0.1.0

1 of 1 See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	golang.org/x/crypto@v0.0.0-20190605123033-f99c8df09eb5	0.52.0

Open the chart page →

4,625

electric-mailcryptexlabs

0.0.1

1 of 5 See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0

Open the chart page →

5,973

purple-piecryptexlabs

0.0.1

1 of 4 See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0

Open the chart page →

5,973

csghubcsghub

2.4.3

10 of 34 See more

csghub csghub 2.4.3

10 of the 34 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
casbin/casdoor :3.62.0	e08231f16c00	golang.org/x/crypto@v0.47.0	0.52.0
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/crypto@v0.32.0	0.52.0
minio/minio :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/crypto@v0.40.0	0.52.0
opencsghq/csghub-portal :v2.4.0-ee	93ad59164d87	golang.org/x/crypto@v0.26.0	0.52.0
opencsghq/csghub-server :v2.4.0-ee	302c9d45d8a8	golang.org/x/crypto@v0.51.0	0.52.0
opencsghq/csghub-xnet :v2.4.0-ee	04121fd19ef9	golang.org/x/crypto@v0.37.0	0.52.0
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	golang.org/x/crypto@v0.28.0	0.52.0
opencsghq/gitlab-shell :v17.5.0	f6d7e7d6be5d	golang.org/x/crypto@v0.26.0	0.52.0
quay.io/argoproj/argocli :v3.7.11	577fc18f86ad	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/argoproj/workflow-controller :v3.7.11	c46aa0ded8ed	golang.org/x/crypto@v0.45.0	0.52.0

Open the chart page →

59,131

csgshipcsghub

0.4.6

1 of 10 See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
casbin/casdoor :3.62.1	7729da148c61	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

11,402

openldapcsic-charts

0.1.1

1 of 2 See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.52.0

Open the chart page →

5,293

rtcsic-charts

0.1.1

1 of 5 See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.11.2	a1041bb0f1d1	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

14,206

wazuhcsic-charts

0.1.0

1 of 4 See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.4.1	21994f40e0da	golang.org/x/crypto@v0.4.0	0.52.0

Open the chart page →

13,937

csi-driver-ipfscsi-driver-ipfs

0.2.0

4 of 6 See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

4 of the 6 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/ptrvsrg/csi-driver-ipfs :latest	97d2d9ccd7a5	golang.org/x/crypto@v0.51.0	0.52.0
registry.k8s.io/sig-storage/csi-provisioner :v6.1.1	d992c36d4ddd	golang.org/x/crypto@v0.41.0	0.52.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.52.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

3,630

Container images carrying it

2,778 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
flomesh/osm-edge-injector :1.3.9	47287e3ad324	golang.org/x/crypto@v0.5.0	0.52.0	1
fluxcd/helm-controller :v0.9.0	92b891e495d8	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0	1
fluxcd/source-controller :v0.10.0	31a8c79a6803	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0	1
fluxninja/aperture-operator :2.34.0	356d7aa86632	golang.org/x/crypto@v0.17.0	0.52.0	1
fosrl/newt :1.10.4	ccd2b0e9a049	golang.org/x/crypto@v0.48.0	0.52.0	1
foxcpp/maddy :0.7.1	6ab538e2f28b	golang.org/x/crypto@v0.18.0	0.52.0	1
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
foxcpp/maddy :0.9.2	a4b839985b9b	golang.org/x/crypto@v0.32.0	0.52.0	1
foxcpp/maddy :0.8.2	eeb5813fc4d1	golang.org/x/crypto@v0.32.0	0.52.0	1
galaxy/cloudman-server :latest	e5c265fe9fcd	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0	1
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	golang.org/x/crypto@v0.33.0	0.52.0	1
garugaru/presto-exporter :cb666560e9e82d5ae36aef1e663c3d7f51cca9fc	5201314c28f3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
garugaru/presto-loadbalancer :v0.1.5	89d66d117029	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
gboxproxy/gbox :v1.0.6	3a9f4a711d5c	golang.org/x/crypto@v0.0.0-20220210151621-f4118a5b28e2	0.52.0	1
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	golang.org/x/crypto@v0.25.0	0.52.0	1
gitea/act_runner :nightly	7940221bcfc9	golang.org/x/crypto@v0.48.0	0.52.0	1
gitea/act_runner :latest	b5c35d6bdbb9	golang.org/x/crypto@v0.48.0	0.52.0	1
gitea/act_runner :0.3.1	c2a169c5e998	golang.org/x/crypto@v0.48.0	0.52.0	1
gitea/act_runner :0.2.11	c57233403eff	golang.org/x/crypto@v0.25.0	0.52.0	1
gitea/gitea :1.22.3	76f516a1a8c2	golang.org/x/crypto@v0.26.0	0.52.0	1
gitea/gitea :1.26.2	7d13848af126	golang.org/x/crypto@v0.50.0	0.52.0	1
gitea/gitea :1.12.4	85416d6f65fe	golang.org/x/crypto@v0.0.0-20200604202706-70a84ac30bf9	0.52.0	1
gitea/gitea :1.21.6	ac73e0da341f	golang.org/x/crypto@v0.18.0	0.52.0	1
gitea/gitea :1.16.8	b0bdf102b485	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0	1
gitea/gitea :1.13.0	d5ab14cd29af	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.52.0	1
gitlab/gitlab-runner :v15.3.0	860d4a3fec7a	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.52.0	1
gkarthics/container-resource-exporter :latest	6799af333e8a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
glanceapp/glance :v0.8.5	32ab73d80f2b	golang.org/x/crypto@v0.38.0	0.52.0	1
glanceapp/glance :v0.8.4	6df86a7e8868	golang.org/x/crypto@v0.38.0	0.52.0	1
goalert/goalert :v0.32.0	08d57388b0cb	golang.org/x/crypto@v0.18.0	0.52.0	1
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	golang.org/x/crypto@v0.32.0	0.52.0	1
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/crypto@v0.25.0	0.52.0	1
gocrane/craned :v0.5.1	a1400909118c	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.52.0	1
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0	1
gogs/gogs :0.12.3	0195b095d0b2	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
gogs/gogs :0.12.1	420d53bb7277	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0	1
goharbor/harbor-acceld :0.2.13	451103a6c8d8	golang.org/x/crypto@v0.17.0	0.52.0	1
goharbor/harbor-core :v2.9.0	6412d679fdc3	golang.org/x/crypto@v0.7.0	0.52.0	1
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
goharbor/harbor-core :v2.14.3	a30e5a8be3d9	golang.org/x/crypto@v0.45.0	0.52.0	1
goharbor/harbor-core :v2.11.1	c017dd84ee96	golang.org/x/crypto@v0.22.0	0.52.0	1
goharbor/harbor-jobservice :v2.9.0	39435daedd0c	golang.org/x/crypto@v0.7.0	0.52.0	1
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
goharbor/harbor-jobservice :v2.14.3	e2b0298e894d	golang.org/x/crypto@v0.45.0	0.52.0	1
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
goharbor/harbor-registryctl :v2.9.0	cce272836449	golang.org/x/crypto@v0.7.0	0.52.0	1
goharbor/harbor-registryctl :v2.14.3	ddf6bb429eb6	golang.org/x/crypto@v0.45.0	0.52.0	1
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0	1