CVE-2026-39835

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,434; of 17,792 indexed, latest versions
Container images: 2,783; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

Carried by container images the latest versions of 2,434 of 17,792 indexed charts deploy, on 2,783 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more	0.52.0	2,783

OSV records: GHSA-78mq-xcr3-xm33
Also known as: GO-2026-5015

Charts affected

2,434 by stars

Chart

Latest

Affected images

Radar Score

devspace-cloudloft

0.3.3

1 of 8 See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d	0.52.0

Open the chart page →

9,890

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0

Open the chart page →

3,094

license-serverloft

0.6.0

1 of 1 See more

license-server loft 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	golang.org/x/crypto@v0.45.0	0.52.0

Open the chart page →

804

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

2,453

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Open the chart page →

3,119

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

3,234

vcluster-headloft

0.0.0-035ec6e

1 of 2 See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	golang.org/x/crypto@v0.43.0	0.52.0

Open the chart page →

1,278

vcluster-hpmloft

0.2.7

1 of 1 See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	golang.org/x/crypto@v0.39.0	0.52.0

Open the chart page →

833

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

5,103

vcluster-pro-eksloft

0.0.0-ci-run.10

2 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

2 of the 4 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.52.0
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0

Open the chart page →

5,952

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/crypto@v0.5.0	0.52.0
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

5,787

vcluster-pro-k8sloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.52.0
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/crypto@v0.1.0	0.52.0
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/crypto@v0.1.0	0.52.0

Open the chart page →

8,236

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

2,993

vnode-runtimeloft

0.3.3

1 of 1 See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	golang.org/x/crypto@v0.43.0	0.52.0

Open the chart page →

2,525

loggingcomponentloggingcomponent

1.0.0

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,501

nightingalelogic3579

0.3.1

2 of 6 See more

nightingale logic3579 0.3.1

2 of the 6 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
flashcatcloud/nightingale :8.5.1	421acb36181b	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/crypto@v0.25.0	0.52.0

Open the chart page →

9,096

logicservicelogicservice

1.0.0

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,508

0.1.0

1 of 2 See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
aboogie/login_test_backend :new	9c41a4483ac8	golang.org/x/crypto@v0.26.0	0.52.0

Open the chart page →

6,570

apica-ascentlogiqai

2.0.4

5 of 19 See more

apica-ascent logiqai 2.0.4

5 of the 19 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	golang.org/x/crypto@v0.18.0	0.52.0
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.52.0
minio/minio :RELEASE.2020-09-17T04-49-20Z	e2b7b633c250	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.52.0

Open the chart page →

23,673

logtidelogtide

2.1.14

1 of 4 See more

logtide logtide 2.1.14

1 of the 4 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg15	6343bdc87ca1	golang.org/x/crypto@v0.32.0	0.52.0

Open the chart page →

2,777

loki-proxyloki-proxy

0.4.1

1 of 1 See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	golang.org/x/crypto@v0.41.0	0.52.0

Open the chart page →

788

loomwatchloomwatch

1.15.8

1 of 1 See more

loomwatch loomwatch 1.15.8

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/madduck-tech/loomwatch :1.15.8	eb7b7efe7f46	golang.org/x/crypto@v0.51.0	0.52.0

Open the chart page →

217

chronograflsst-sqre

1.3.5

1 of 1 See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Open the chart page →

2,349

sasquatchlsst-sqre

0.1.13

2 of 6 See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
library/kapacitor :1.6.3	7232f6388a4d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Open the chart page →

9,348

telegraf-dslsst-sqre

1.0.23

1 of 1 See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
library/telegraf :1.19-alpine	addb86c0c520	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0

Open the chart page →

3,773

kube-benchm9sweeper

1.6.0

1 of 1 See more

kube-bench m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.17	6672264accce	golang.org/x/crypto@v0.4.0	0.52.0

Open the chart page →

1,400

m9sweeperm9sweeper

1.6.0

2 of 6 See more

m9sweeper m9sweeper 1.6.0

2 of the 6 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kubesec/kubesec :v2.13.0	c0f3b0673578	golang.org/x/crypto@v0.6.0	0.52.0
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

9,816

magistralamagistrala-devops

0.16.2

11 of 42 See more

magistrala magistrala-devops 0.16.2

11 of the 42 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.52.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.52.0
library/nats :2.10.17-alpine	b7752304692b	golang.org/x/crypto@v0.24.0	0.52.0
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/crypto@v0.9.0	0.52.0
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/crypto@v0.31.0	0.52.0
timescale/timescaledb :latest-pg12	645fd9e92d76	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	golang.org/x/crypto@v0.31.0	0.52.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.52.0
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	golang.org/x/crypto@v0.31.0	0.52.0
quay.io/prometheus/pushgateway :v1.11.0	99392035ae99	golang.org/x/crypto@v0.32.0	0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.52.0

Open the chart page →

24,566

docker-mailservermailserver

0.2.65

4 of 9 See more

docker-mailserver mailserver 0.2.65

4 of the 9 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
jeboehm/mailserver-filter :5.0.92	e756949e537d	golang.org/x/crypto@v0.36.0	0.52.0
jeboehm/mailserver-mda :5.0.92	d03fb7bae0a2	golang.org/x/crypto@v0.36.0	0.52.0
jeboehm/mailserver-mta :5.0.92	5fb2f31c940d	golang.org/x/crypto@v0.36.0	0.52.0
jeboehm/mailserver-web :5.0.92	9da13edf5aa8	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

10,935

novosgamarcusrepo

0.1.1

1 of 2 See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
novosga/novosga :latest	34b9acbe6e51	golang.org/x/crypto@v0.50.0	0.52.0

Open the chart page →

3,709

kruisematrixone-operator

1.8.3

1 of 2 See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
openkruise/kruise-manager :v1.8.3	0482722b4e56	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

1,775

matrix-sliding-syncmatrix-sliding-sync

0.2.3

1 of 1 See more

matrix-sliding-sync matrix-sliding-sync 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

1,599

focalboardmattermost

0.5.0

1 of 1 See more

focalboard mattermost 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
mattermost/focalboard :0.6.7	f2f987dada52	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.52.0

Open the chart page →

4,015

mattermost-calls-offloadermattermost

0.2.1

1 of 1 See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
mattermost/calls-offloader :v0.9.0	b440b282599e	golang.org/x/crypto@v0.16.0	0.52.0

Open the chart page →

1,423

mattermost-chaos-enginemattermost

0.2.0

1 of 1 See more

mattermost-chaos-engine mattermost 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
mattermost/mattermost-app-chaosengine :c153e43	6268954edd67	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.52.0

Open the chart page →

4,075

mattermost-push-proxymattermost

0.14.3

1 of 1 See more

mattermost-push-proxy mattermost 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
mattermost/mattermost-push-proxy :6.3.0	45c53061c74e	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

897

mattermost-team-editionmattermost-team-edition

6.6.83

1 of 4 See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	golang.org/x/crypto@v0.38.0	0.52.0

Open the chart page →

4,121

mayastormayastor

2.12.1

8 of 31 See more

mayastor mayastor 2.12.1

8 of the 31 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/crypto@v0.36.0	0.52.0
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/crypto@v0.32.0	0.52.0
library/nats :2.9.17-alpine	1a7b320b2942	golang.org/x/crypto@v0.8.0	0.52.0
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	golang.org/x/crypto@v0.8.0	0.52.0
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	golang.org/x/crypto@v0.36.0	0.52.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.52.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.52.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

21,284

eoloplantmca-eoloplaner

0.1.0

1 of 7 See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0

Open the chart page →

29,823

mdai-event-hubmdai-event-hub

0.1.11

1 of 1 See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub :0.1.11	18cae836e9c7	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

413

mdai-gatewaymdai-gateway

0.1.10

1 of 1 See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
public.ecr.aws/p3k6k6h3/mdai-gateway :0.1.10	0dfb323978f6	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

409

mdai-hubmdai-hub

0.10.1

5 of 14 See more

mdai-hub mdai-hub 0.10.1

5 of the 14 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.148.0	590e50477b76	golang.org/x/crypto@v0.48.0	0.52.0
public.ecr.aws/p3k6k6h3/mdai-event-hub :0.1.11	18cae836e9c7	golang.org/x/crypto@v0.49.0	0.52.0
public.ecr.aws/p3k6k6h3/mdai-gateway :0.1.10	0dfb323978f6	golang.org/x/crypto@v0.49.0	0.52.0
quay.io/prometheus/node-exporter :v1.11.1-distroless	6112664fd761	golang.org/x/crypto@v0.49.0	0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.0	6b2f0b6f2f86	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

4,832

medewerkercatalogusmedewerkercatalogus

1.0.0

1 of 3 See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,337

cameramedia-streaming-mesh

0.2.5

1 of 3 See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0

Open the chart page →

18,692

msmmedia-streaming-mesh

0.1.17

1 of 6 See more

msm media-streaming-mesh 0.1.17

1 of the 6 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/crypto@v0.24.0	0.52.0

Open the chart page →

11,582

msm-rtspmedia-streaming-mesh

0.0.2

1 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0

Open the chart page →

18,692

rtspmedia-streaming-mesh

0.0.14

1 of 2 See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0

Open the chart page →

18,692

mediawiki-backupmediawiki-backup

0.2.1

1 of 1 See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

1,919

memo-componentmemo-component

1.0.0

1 of 3 See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,519

dex-k8s-authenticatormesosphere

1.4.3

1 of 1 See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
mesosphere/dex-k8s-authenticator :v1.4.1-d2iq	f3d9982cc2fd	golang.org/x/crypto@v0.11.0	0.52.0

Open the chart page →

1,019

Container images carrying it

2,783 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
flomesh/fsm-manager :0.2.11	22f849c70b25	golang.org/x/crypto@v0.9.0	0.52.0	1
flomesh/osm-edge-bootstrap :1.3.9	b188e128cbfe	golang.org/x/crypto@v0.5.0	0.52.0	1
flomesh/osm-edge-controller :1.3.9	add7a4da4622	golang.org/x/crypto@v0.5.0	0.52.0	1
flomesh/osm-edge-injector :1.3.9	47287e3ad324	golang.org/x/crypto@v0.5.0	0.52.0	1
fluxcd/helm-controller :v0.9.0	92b891e495d8	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0	1
fluxcd/source-controller :v0.10.0	31a8c79a6803	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0	1
fluxninja/aperture-operator :2.34.0	356d7aa86632	golang.org/x/crypto@v0.17.0	0.52.0	1
fosrl/newt :1.10.4	ccd2b0e9a049	golang.org/x/crypto@v0.48.0	0.52.0	1
foxcpp/maddy :0.7.1	6ab538e2f28b	golang.org/x/crypto@v0.18.0	0.52.0	1
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
foxcpp/maddy :0.9.2	a4b839985b9b	golang.org/x/crypto@v0.32.0	0.52.0	1
foxcpp/maddy :0.8.2	eeb5813fc4d1	golang.org/x/crypto@v0.32.0	0.52.0	1
galaxy/cloudman-server :latest	e5c265fe9fcd	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0	1
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	golang.org/x/crypto@v0.33.0	0.52.0	1
garugaru/presto-exporter :cb666560e9e82d5ae36aef1e663c3d7f51cca9fc	5201314c28f3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
garugaru/presto-loadbalancer :v0.1.5	89d66d117029	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
gboxproxy/gbox :v1.0.6	3a9f4a711d5c	golang.org/x/crypto@v0.0.0-20220210151621-f4118a5b28e2	0.52.0	1
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	golang.org/x/crypto@v0.25.0	0.52.0	1
gitea/act_runner :nightly	7940221bcfc9	golang.org/x/crypto@v0.48.0	0.52.0	1
gitea/act_runner :latest	b5c35d6bdbb9	golang.org/x/crypto@v0.48.0	0.52.0	1
gitea/act_runner :0.3.1	c2a169c5e998	golang.org/x/crypto@v0.48.0	0.52.0	1
gitea/act_runner :0.2.11	c57233403eff	golang.org/x/crypto@v0.25.0	0.52.0	1
gitea/gitea :1.22.3	76f516a1a8c2	golang.org/x/crypto@v0.26.0	0.52.0	1
gitea/gitea :1.26.2	7d13848af126	golang.org/x/crypto@v0.50.0	0.52.0	1
gitea/gitea :1.12.4	85416d6f65fe	golang.org/x/crypto@v0.0.0-20200604202706-70a84ac30bf9	0.52.0	1
gitea/gitea :1.21.6	ac73e0da341f	golang.org/x/crypto@v0.18.0	0.52.0	1
gitea/gitea :1.16.8	b0bdf102b485	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0	1
gitea/gitea :1.13.0	d5ab14cd29af	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.52.0	1
gitlab/gitlab-runner :v15.3.0	860d4a3fec7a	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.52.0	1
gkarthics/container-resource-exporter :latest	6799af333e8a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
glanceapp/glance :v0.8.5	32ab73d80f2b	golang.org/x/crypto@v0.38.0	0.52.0	1
glanceapp/glance :v0.8.4	6df86a7e8868	golang.org/x/crypto@v0.38.0	0.52.0	1
goalert/goalert :v0.32.0	08d57388b0cb	golang.org/x/crypto@v0.18.0	0.52.0	1
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	golang.org/x/crypto@v0.32.0	0.52.0	1
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/crypto@v0.25.0	0.52.0	1
gocrane/craned :v0.5.1	a1400909118c	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.52.0	1
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0	1
gogs/gogs :0.12.3	0195b095d0b2	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
gogs/gogs :0.12.1	420d53bb7277	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0	1
goharbor/harbor-acceld :0.2.13	451103a6c8d8	golang.org/x/crypto@v0.17.0	0.52.0	1
goharbor/harbor-core :v2.9.0	6412d679fdc3	golang.org/x/crypto@v0.7.0	0.52.0	1
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
goharbor/harbor-core :v2.14.3	a30e5a8be3d9	golang.org/x/crypto@v0.45.0	0.52.0	1
goharbor/harbor-core :v2.11.1	c017dd84ee96	golang.org/x/crypto@v0.22.0	0.52.0	1
goharbor/harbor-jobservice :v2.9.0	39435daedd0c	golang.org/x/crypto@v0.7.0	0.52.0	1
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
goharbor/harbor-jobservice :v2.14.3	e2b0298e894d	golang.org/x/crypto@v0.45.0	0.52.0	1
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1