CVE-2026-39834

Critical

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,434; of 17,792 indexed, latest versions
Container images: 2,783; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto vulnerable to infinite loop on large channel writes

Carried by container images the latest versions of 2,434 of 17,792 indexed charts deploy, on 2,783 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more	0.52.0	2,783

OSV records: GHSA-rm3j-f69w-wqmq
Also known as: GO-2026-5020

Charts affected

2,434 by stars

Chart

Latest

Affected images

Radar Score

irods-csi-drivercyverse

0.12.0

1 of 4 See more

irods-csi-driver cyverse 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0

Open the chart page →

5,295

domain-exporterd0main-exp0rter

0.1.0

1 of 1 See more

domain-exporter d0main-exp0rter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	golang.org/x/crypto@v0.0.0-20211215165025-cf75a172585e	0.52.0

Open the chart page →

1,832

jupyterhubd4n

3.3.7

2 of 7 See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
aristidetm/basic-notebook :3.6.5	469dbc951224	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	golang.org/x/crypto@v0.21.0	0.52.0

Open the chart page →

16,732

miniod4n

5.2.1

2 of 2 See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-04-29T09-56-05Z	c574fac67f60	golang.org/x/crypto@v0.22.0	0.52.0
quay.io/minio/minio :RELEASE.2024-06-04T19-20-08Z	c6b68f158628	golang.org/x/crypto@v0.23.0	0.52.0

Open the chart page →

2,659

cloudflareddamoun

3.3.0

1 of 1 See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2024.5.0	5d5f70a59d5e	golang.org/x/crypto@v0.23.0	0.52.0

Open the chart page →

1,313

gickupdamoun

1.11.0

1 of 1 See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
buddyspencer/gickup :0.10.30	9e7dbf923c12	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

1,028

home-assistantdamoun

1.1.0

1 of 1 See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0

Open the chart page →

6,190

nvidia-gpu-exporterdanchev

1.0.3

1 of 1 See more

nvidia-gpu-exporter danchev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/utkuozdemir/nvidia_gpu_exporter :1.5.0	d75967a4dd72	golang.org/x/crypto@v0.51.0	0.52.0

Open the chart page →

1,238

grafana-agentdandydev-charts

0.19.2

1 of 1 See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
grafana/agent :v0.20.0	825c09373d27	golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63	0.52.0

Open the chart page →

3,247

dapr-agentsdapr-agents-dev

0.1.5

14 of 31 See more

dapr-agents dapr-agents-dev 0.1.5

14 of the 31 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/crypto@v0.45.0	0.52.0
grafana/loki :3.6.5	847c287ada0e	golang.org/x/crypto@v0.45.0	0.52.0
grafana/loki-canary :3.6.5	fbb984bab741	golang.org/x/crypto@v0.45.0	0.52.0
grafana/tempo :2.9.0	65a578975943	golang.org/x/crypto@v0.41.0	0.52.0
otel/opentelemetry-collector-contrib :0.145.0	a7343f018690	golang.org/x/crypto@v0.47.0	0.52.0
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/crypto@v0.42.0	0.52.0
ghcr.io/dapr/injector :1.17.0-rc.3	7a2fd888ed5f	golang.org/x/crypto@v0.47.0	0.52.0
ghcr.io/dapr/operator :1.17.0-rc.3	d5cc61cbe735	golang.org/x/crypto@v0.47.0	0.52.0
ghcr.io/dapr/placement :1.17.0-rc.3	a237b43cd5c6	golang.org/x/crypto@v0.47.0	0.52.0
ghcr.io/dapr/scheduler :1.17.0-rc.3	6c62e01e736b	golang.org/x/crypto@v0.47.0	0.52.0
ghcr.io/dapr/sentry :1.17.0-rc.3	bf79b03591e0	golang.org/x/crypto@v0.47.0	0.52.0
ghcr.io/kagent-dev/kagent/tools :0.0.13	c8882543f693	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.52.0

Open the chart page →

22,370

dask-gatewaydask

2026.3.0

1 of 2 See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
library/traefik :3.3.5	104204dadedf	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

2,002

cloudwatch-agent-prometheusdasmeta

0.2.2

1 of 1 See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,985

mongodb-bi-connectordasmeta

1.0.3

1 of 1 See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
dasmeta/mongodb-bi-connector :1.0.3	fa657960dfec	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.52.0

Open the chart page →

5,849

nfs-provisionerdasmeta

1.0.3

1 of 1 See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0

Open the chart page →

2,806

spqr-routerdasmeta

0.1.1

1 of 1 See more

spqr-router dasmeta 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
pgsharding/spqr-router :nightly-2.8.3-1839-f66048d8	4734940216d3	golang.org/x/crypto@v0.45.0	0.52.0

Open the chart page →

687

adot-exporter-for-eks-on-ec2dasmeta-adot

0.15.5

1 of 1 See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
amazon/aws-otel-collector :v0.27.0	d8ab0eef5074	golang.org/x/crypto@v0.1.0	0.52.0

Open the chart page →

1,933

datadog-operatordatadog-test

0.1.2

1 of 1 See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
datadog/operator :0.3.1	17f08a860090	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

3,979

agent-helmdatasaker

0.1.8

4 of 6 See more

agent-helm datasaker 0.1.8

4 of the 6 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
datasaker/dsk-container-agent :latest	08b52999f67b	golang.org/x/crypto@v0.14.0	0.52.0
datasaker/dsk-kube-state-agent :latest	d6d2eb48589d	golang.org/x/crypto@v0.14.0	0.52.0
datasaker/dsk-node-agent :latest	1b95913b6729	golang.org/x/crypto@v0.14.0	0.52.0
datasaker/dsk-process-agent :latest	2f38720a637d	golang.org/x/crypto@v0.13.0	0.52.0

Open the chart page →

7,606

ambassador-operatordatawire

0.3.0

1 of 1 See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
datawire/ambassador-operator :v1.3.0	f95ae710d75c	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.52.0

Open the chart page →

7,495

eg-edge-stackdatawire

0.0.1

2 of 7 See more

eg-edge-stack datawire 0.0.1

2 of the 7 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ambassador/aes-authsvc :v4.0.0-preview.1	2a4598b03a6a	golang.org/x/crypto@v0.10.0	0.52.0
ambassador/aes-wafsvc :v4.0.0-preview.1	5fc571509b8c	golang.org/x/crypto@v0.10.0	0.52.0

Open the chart page →

15,882

dbgatedbgate

0.1.1

1 of 1 See more

dbgate dbgate 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
nathanfirmo/dbgate :latest	6b0487e6e987	golang.org/x/crypto@v0.32.0	0.52.0

Open the chart page →

630

defactopsdefactops

1.0.9

1 of 2 See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
defactops/defactops-ui :1.0.16	825cdf9ba706	golang.org/x/crypto@v0.23.0	0.52.0

Open the chart page →

4,547

symfony-appdefault-gh

0.6.5

1 of 3 See more

symfony-app default-gh 0.6.5

1 of the 3 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
alpine/git :2.36.3	66b210a97bc0	golang.org/x/crypto@v0.0.0-20221005025214-4161e89ecf1b	0.52.0

Open the chart page →

5,123

csi-driver-smbdeimosfr-charts

1.20.3

1 of 5 See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

2,985

garage-webuideimosfr-charts

1.1.0

1 of 1 See more

garage-webui deimosfr-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
khairul169/garage-webui :1.1.0	17c793551873	golang.org/x/crypto@v0.35.0	0.52.0

Open the chart page →

567

cortex-gatewaydeliveryhero

0.1.9

1 of 1 See more

cortex-gateway deliveryhero 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.52.0

Open the chart page →

2,241

k8s-cloudwatch-adapterdeliveryhero

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,475

prometheus-dellhw-exporterdellhw-exporter

1.3.0

1 of 1 See more

prometheus-dellhw-exporter dellhw-exporter 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/galexrt/dellhw_exporter :v2.0.0	b3a5806d73b5	golang.org/x/crypto@v0.46.0	0.52.0

Open the chart page →

1,876

kubeteach-coredergeberl

0.2.3

1 of 1 See more

kubeteach-core dergeberl 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

1,505

kubeteach-exerciseset1dergeberl

0.2.3

1 of 2 See more

kubeteach-exerciseset1 dergeberl 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

1,505

clamav-apidevhat

1.0.1

1 of 1 See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	golang.org/x/crypto@v0.23.0	0.52.0

Open the chart page →

2,099

kyvernodevopstales

2.5.1

2 of 2 See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0

Open the chart page →

4,736

octolxddevplayer0

0.1.1

1 of 1 See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

2,525

ai-agentdevtron

0.0.1

1 of 1 See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.52.0

Open the chart page →

9,703

argocddevtron

1.8.1

2 of 3 See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0

Open the chart page →

10,484

argocd-certificate-refreshdevtron

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

13,033

argo-workflowdevtron

0.1.6

1 of 1 See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.52.0

Open the chart page →

1,587

devtron-enterprisedevtron

48.0.0

18 of 28 See more

devtron-enterprise devtron 48.0.0

18 of the 28 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/cost-sync :172ef62b-1159-39429	edf210d763ca	golang.org/x/crypto@v0.38.0	0.52.0
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.52.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.52.0
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.52.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.52.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.52.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.52.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0

Open the chart page →

68,765

devtron-in-clustercddevtron

0.10.2

2 of 2 See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.52.0

Open the chart page →

5,055

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.52.0

Open the chart page →

11,981

jcmhproxy-ingressdevtron

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.52.0

Open the chart page →

1,379

kube-prometheus-stackdevtron

19.3.0

2 of 6 See more

kube-prometheus-stack devtron 19.3.0

2 of the 6 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0

Open the chart page →

8,659

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.52.0

Open the chart page →

2,442

zincdevtron

0.1.2

1 of 1 See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.52.0

Open the chart page →

1,514

ai-agentdevtron-labs

0.0.1

1 of 1 See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.52.0

Open the chart page →

9,703

argocddevtron-labs

1.8.1

2 of 3 See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0

Open the chart page →

10,484

argocd-certificate-refreshdevtron-labs

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

13,033

argo-workflowdevtron-labs

0.1.6

1 of 1 See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.52.0

Open the chart page →

1,587

calicodevtron-labs

0.1.1

3 of 4 See more

calico devtron-labs 0.1.1

3 of the 4 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Open the chart page →

10,094

clairdevtron-labs

0.1.14

1 of 2 See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-39834.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0

Open the chart page →

6,237

Container images carrying it

2,783 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
semaphoreui/semaphore :v2.9.64	5b50bc11833f	golang.org/x/crypto@v0.20.0	0.52.0	1
semaphoreui/semaphore :v2.19.14	98ad9bc7a2a0	golang.org/x/crypto@v0.35.0	0.52.0	1
semaphoreui/semaphore :v2.18.3	e9260bfa8255	golang.org/x/crypto@v0.35.0	0.52.0	1
semitechnologies/weaviate :1.19.1	7a00d226f063	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.52.0	1
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0	1
shaowenchen/ops-controller-manager :latest	26da43bb5b66	golang.org/x/crypto@v0.37.0	0.52.0	1
shaowenchen/ops-server :latest	315444f703f4	golang.org/x/crypto@v0.37.0	0.52.0	1
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.52.0	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	golang.org/x/crypto@v0.1.0	0.52.0	1
signoz/alertmanager :0.5.0	7bc7de2e33c2	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0	1
sikalabs/slu :v0.72.0	7bd267f30247	golang.org/x/crypto@v0.16.0	0.52.0	1
sikalabs/slu :v0.34.0	fdc0c6711add	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.52.0	1
silkeh/alertmanager_matrix :0.6.1	900010497f8c	golang.org/x/crypto@v0.51.0	0.52.0	1
simonschneider/traefik-jwt-decode :latest	d674ac370f80	golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620	0.52.0	1
simpleidserver/faasprometheus :0.0.4	25e378d57d78	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	golang.org/x/crypto@v0.21.0	0.52.0	1
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	golang.org/x/crypto@v0.21.0	0.52.0	1
sky5367/locust-plugins-timescale :latest	d3150f201471	golang.org/x/crypto@v0.20.0	0.52.0	1
skylenet/ethereum-genesis-generator :latest	210353ce7c89	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0	1
slamdev/config-connector-templater :0.0.3	a234541c9fa8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0	1
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.52.0	1
slamdev/gke-preemptible-notifier :v0.0.3	d5d6430108a3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
smailkoz/torrserver :1.0.111	7b52d15de8f0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0	1
snyk/kubernetes-monitor :2.23.26	fb5ad76ce84e	golang.org/x/crypto@v0.38.0	0.52.0	1
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
softonic/pod-defaulter :0.1.0	72017aed5902	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.52.0	1
softonic/rate-limit-operator :0.1.1	910f6de37763	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0	1
sorintlab/stolon :v0.16.0-pg12	36b45c0f97fc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.52.0	1
sosedoff/pgweb :latest	a5256d416e2e	golang.org/x/crypto@v0.45.0	0.52.0	1
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0	1
sstarcher/ecr-cleaner :0.1.1	2d43c390cb19	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.52.0	1
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.52.0	1
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.52.0	1
stakater/forecastle :v2.0.2	382cd9572352	golang.org/x/crypto@v0.48.0	0.52.0	1
stakater/konfigurator :v0.1.39	3409565b1ef5	golang.org/x/crypto@v0.17.0	0.52.0	1
stakater/tronador :v0.0.1	37ce9acf2722	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0	1
stakater/whitelister :v0.0.16	39107924063e	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0	1
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0	1
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0	1
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.52.0	1
stashapp/stash :latest	24dbd7607174	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
stashapp/stash :v0.31.1	df744af5a0c9	golang.org/x/crypto@v0.45.0	0.52.0	1
stashapp/stash-box :latest	a534c8afdf39	golang.org/x/crypto@v0.36.0	0.52.0	1
statcan/ingress-istio-controller :1.4.0	d7d6bd180c46	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0	1
statcan/kubernetes-sidecar-terminator :2.0.2	bc361ee7748f	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0	1
stevenweathers/thunderdome-planning-poker :latest	c7eb7b10f186	golang.org/x/crypto@v0.49.0	0.52.0	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0	1