CVE-2026-39835

Medium

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,427; of 17,797 indexed, latest versions
Container images: 2,776; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

Carried by container images the latest versions of 2,427 of 17,797 indexed charts deploy, on 2,776 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more	0.52.0	2,776

OSV records: GHSA-78mq-xcr3-xm33
Also known as: GO-2026-5015

Charts affected

2,427 by stars

Chart

Latest

Affected images

Radar Score

kubeflowkromanow94-kubeflow

0.5.1

9 of 30 See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kubeflowkatib/katib-controller :v0.17.0	72f14e03b9e1	golang.org/x/crypto@v0.21.0	0.52.0
kubeflownotebookswg/kfam :v1.9.2	2060a2ede788	golang.org/x/crypto@v0.14.0	0.52.0
kubeflownotebookswg/notebook-controller :v1.9.2	0f14bd28fdd5	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0
kubeflownotebookswg/profile-controller :v1.9.2	f05a5538ae7e	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0
kubeflownotebookswg/tensorboard-controller :v1.9.2	6536a9f61193	golang.org/x/crypto@v0.14.0	0.52.0
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	golang.org/x/crypto@v0.22.0	0.52.0
gcr.io/ml-pipeline/cache-server :2.3.0	293941ee4f65	golang.org/x/crypto@v0.22.0	0.52.0
gcr.io/ml-pipeline/persistenceagent :2.3.0	109ac1b38c41	golang.org/x/crypto@v0.22.0	0.52.0
gcr.io/ml-pipeline/scheduledworkflow :2.3.0	f7e67e0bc071	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

71,075

lndkronkltd

0.3.9

3 of 4 See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
thesisrobot/lnd :v0.14.1-beta	d94c8dbf6dac	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
thesisrobot/loop :v0.11.1-beta	89ae07e787ca	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.52.0
thesisrobot/pool :v0.3.3-alpha	2d1c388a4bda	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.52.0

Open the chart page →

8,472

casdoorkrzwiatrzyk

1.0.0

1 of 1 See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
casbin/casdoor :v1.224.0	66f836ef778b	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0

Open the chart page →

3,649

nocodbkrzwiatrzyk

0.0.1

1 of 1 See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.100.2	b0b91ec2a2dd	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0

Open the chart page →

2,320

pipecdkrzwiatrzyk

0.39.0

1 of 3 See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

3,819

traggokrzwiatrzyk

1.0.0

1 of 1 See more

traggo krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
traggo/server :0.2.3	f1ced637510e	golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f	0.52.0

Open the chart page →

1,885

ksoc-pluginsksoc

1.9.10

1 of 5 See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.34	e97e0e7a2088	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

3,207

bc-depositorykubebb

0.0.3

1 of 1 See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
hyperledgerk8s/bc-saas :v0.0.1-20230524	d8bc31176257	golang.org/x/crypto@v0.7.0	0.52.0

Open the chart page →

1,947

bc-explorerkubebb

0.0.3

1 of 1 See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
hyperledgerk8s/bc-explorer :v20230504	1f1a06b61f18	golang.org/x/crypto@v0.7.0	0.52.0

Open the chart page →

1,947

chartmuseumkubebb

3.10.2

1 of 1 See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.0	71d1f1c0179e	golang.org/x/crypto@v0.9.0	0.52.0

Open the chart page →

2,276

cluster-componentkubebb

0.2.2

2 of 4 See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kubebb/cert-manager-cainjector :v1.8.0	f83cd256229b	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0
kubebb/cert-manager-controller :v1.8.0	20509de4b399	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0

Open the chart page →

8,174

fabric-operatorkubebb

0.1.0

1 of 1 See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
hyperledgerk8s/fabric-operator :7776e71	29a8af8be270	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.52.0

Open the chart page →

3,995

kubebbkubebb

0.0.1

1 of 1 See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kubebb/core :latest	e366c34a9b8d	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

1,758

kubebb-corekubebb

0.1.27

1 of 1 See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kubebb/core :v0.1.6	2b9e7f451d6b	golang.org/x/crypto@v0.12.0	0.52.0

Open the chart page →

1,947

miniokubebb

5.0.10

2 of 2 See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
hyperledgerk8s/minio-mc :RELEASE.2023-01-28T20-29-38Z	729b3d128487	golang.org/x/crypto@v0.3.0	0.52.0
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

7,472

tdsfkubebb

5.7.0

1 of 3 See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kubebb/mesh-operator :v5.7.0	163ebbfc7a82	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0

Open the chart page →

6,515

u4a-componentkubebb

0.2.10

4 of 8 See more

u4a-component kubebb 0.2.10

4 of the 8 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kubebb/iam-controller :v0.2.0-20240128	8ffbfa2d67e9	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.52.0
kubebb/iam-provider :v0.2.0-20240128	0ba03fcee3a7	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.52.0
kubebb/kube-oidc-proxy-ce :v0.3.0-20221008	58d5efec568b	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
kubebb/oidc-server :v0.2.0	2b5894ef1e2f	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.52.0

Open the chart page →

13,835

weaviatekubebb

16.3.0

1 of 1 See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
semitechnologies/weaviate :1.19.1	7a00d226f063	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.52.0

Open the chart page →

1,876

argo-workflowskubeblocks

0.40.14

2 of 2 See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	golang.org/x/crypto@v0.17.0	0.52.0
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

2,885

calicokubeblocks

3.28.0

3 of 3 See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.0	cef0c907b8f4	golang.org/x/crypto@v0.22.0	0.52.0
calico/kube-controllers :v3.28.0	8f04e4772a2b	golang.org/x/crypto@v0.22.0	0.52.0
calico/node :v3.28.0	385bf6391fea	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

3,309

casdoor-helm-chartskubeblocks

1.753.0

1 of 1 See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
casbin/casdoor :v1.753.0	770ad9ec3190	golang.org/x/crypto@v0.21.0	0.52.0

Open the chart page →

2,306

chaos-meshkubeblocks

2.7.2

4 of 4 See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.6	78dc63bc5b89	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	golang.org/x/crypto@v0.17.0	0.52.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.7.2	11cdbbc479b3	golang.org/x/crypto@v0.17.0	0.52.0
ghcr.io/chaos-mesh/chaos-mesh :v2.7.2	8bc853c7414c	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

13,601

ciliumkubeblocks

1.15.1

2 of 2 See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	golang.org/x/crypto@v0.17.0	0.52.0
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

5,137

geminikubeblocks

0.13.4

1 of 8 See more

gemini kubeblocks 0.13.4

1 of the 8 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

3,103

gemini-schedulerkubeblocks

0.1.1

1 of 1 See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	golang.org/x/crypto@v0.26.0	0.52.0

Open the chart page →

1,419

grafanakubeblocks

6.59.4

1 of 1 See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
grafana/grafana :10.1.1	1b9ca4bbc4a2	golang.org/x/crypto@v0.11.0	0.52.0

Open the chart page →

3,568

kubetrankubeblocks

0.1.0

1 of 1 See more

kubetran kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
apecloud/kubetran-platform :latest	32bd92c7f7fa	golang.org/x/crypto@v0.13.0	0.52.0

Open the chart page →

1,207

lokikubeblocks

5.39.0

3 of 5 See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
grafana/agent-operator :v0.34.1	045c9125634c	golang.org/x/crypto@v0.8.0	0.52.0
grafana/loki :2.9.2	6074e01dbe03	golang.org/x/crypto@v0.14.0	0.52.0
grafana/loki-canary :2.9.2	4249db29b992	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

5,862

metrics-serverkubeblocks

3.12.0

1 of 1 See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	golang.org/x/crypto@v0.18.0	0.52.0

Open the chart page →

1,138

nvidia-gpu-exporterkubeblocks

0.3.1

1 of 1 See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0

Open the chart page →

4,511

openebskubeblocks

3.10.0

2 of 3 See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

10,602

postgres-operatorkubeblocks

1.12.2

1 of 1 See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	golang.org/x/crypto@v0.23.0	0.52.0

Open the chart page →

1,555

prometheuskubeblocks

15.16.1

5 of 6 See more

prometheus kubeblocks 15.16.1

5 of the 6 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
quay.io/prometheus/alertmanager :v0.24.0	088464f949de	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

10,309

vaultkubeblocks

0.30.0

2 of 2 See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.19.0	bbb7f98dc67d	golang.org/x/crypto@v0.35.0	0.52.0
hashicorp/vault-k8s :1.6.2	103a2d817a74	golang.org/x/crypto@v0.35.0	0.52.0

Open the chart page →

2,751

victoria-metrics-alertkubeblocks

0.8.3-reload

1 of 3 See more

victoria-metrics-alert kubeblocks 0.8.3-reload

1 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.52.0

Open the chart page →

3,715

kubeclaritykubeclarity

2.23.3

2 of 5 See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/crypto@v0.12.0	0.52.0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

5,521

secret-operatorkubedoop

0.4.0

1 of 5 See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/secret-csi-driver :0.4.0	604a7d98ab58	golang.org/x/crypto@v0.45.0	0.52.0

Open the chart page →

4,414

cephfs-csikubegems

1.0.8

1 of 6 See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0

Open the chart page →

4,452

chartmuseumkubegems

3.8.0

1 of 1 See more

chartmuseum kubegems 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0

Open the chart page →

3,526

gatewaykubegems

0.3.2

2 of 2 See more

gateway kubegems 0.3.2

2 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

3,506

giteakubegems

5.0.8

1 of 2 See more

gitea kubegems 5.0.8

1 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
gitea/gitea :1.16.8	b0bdf102b485	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0

Open the chart page →

3,400

juicefs-csi-driverkubegems

0.19.2

2 of 6 See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.23.0	3e4daf9626d5	golang.org/x/crypto@v0.14.0	0.52.0
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

4,839

knative-servingkubegems

1.0.1

1 of 8 See more

knative-serving kubegems 1.0.1

1 of the 8 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	bac158dfb0c7	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0

Open the chart page →

10,469

kubegems-edgekubegems

1.24.10

1 of 1 See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

3,390

logging-operatorkubegems

3.17.6

1 of 1 See more

logging-operator kubegems 3.17.6

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0

Open the chart page →

1,800

prometheus-adapterkubegems

4.14.1

1 of 1 See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

937

prometheus-blackbox-exporterkubegems

7.1.3

1 of 1 See more

prometheus-blackbox-exporter kubegems 7.1.3

1 of the 1 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.52.0

Open the chart page →

1,635

volcanokubegems

1.12.1

2 of 3 See more

volcano kubegems 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	golang.org/x/crypto@v0.37.0	0.52.0
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	golang.org/x/crypto@v0.37.0	0.52.0

Open the chart page →

5,036

xpai-schedulerkubegems

1.12.1

1 of 2 See more

xpai-scheduler kubegems 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,324

gptchat-api-feishubotkubegemsapp

0.1.1

2 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-39835.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0

Open the chart page →

8,490

Container images carrying it

2,776 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
semaphoreui/semaphore :v2.19.14	98ad9bc7a2a0	golang.org/x/crypto@v0.35.0	0.52.0	1
semaphoreui/semaphore :v2.18.3	e9260bfa8255	golang.org/x/crypto@v0.35.0	0.52.0	1
semitechnologies/weaviate :1.19.1	7a00d226f063	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.52.0	1
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0	1
shaowenchen/ops-controller-manager :latest	26da43bb5b66	golang.org/x/crypto@v0.37.0	0.52.0	1
shaowenchen/ops-server :latest	315444f703f4	golang.org/x/crypto@v0.37.0	0.52.0	1
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.52.0	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	golang.org/x/crypto@v0.1.0	0.52.0	1
signoz/alertmanager :0.5.0	7bc7de2e33c2	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0	1
sikalabs/slu :v0.72.0	7bd267f30247	golang.org/x/crypto@v0.16.0	0.52.0	1
sikalabs/slu :v0.34.0	fdc0c6711add	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.52.0	1
silkeh/alertmanager_matrix :0.6.1	900010497f8c	golang.org/x/crypto@v0.51.0	0.52.0	1
simonschneider/traefik-jwt-decode :latest	d674ac370f80	golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620	0.52.0	1
simpleidserver/faasprometheus :0.0.4	25e378d57d78	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	golang.org/x/crypto@v0.21.0	0.52.0	1
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	golang.org/x/crypto@v0.21.0	0.52.0	1
sky5367/locust-plugins-timescale :latest	d3150f201471	golang.org/x/crypto@v0.20.0	0.52.0	1
skylenet/ethereum-genesis-generator :latest	210353ce7c89	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0	1
slamdev/config-connector-templater :0.0.3	a234541c9fa8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0	1
slamdev/external-secrets-operator :0.0.8	855f6625dda4	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.52.0	1
slamdev/gke-preemptible-notifier :v0.0.3	d5d6430108a3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
smailkoz/torrserver :1.0.111	7b52d15de8f0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0	1
snyk/kubernetes-monitor :2.23.26	fb5ad76ce84e	golang.org/x/crypto@v0.38.0	0.52.0	1
softonic/node-policy-webhook :0.1.2	ab6098c04a53	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
softonic/pod-defaulter :0.1.0	72017aed5902	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.52.0	1
softonic/rate-limit-operator :0.1.1	910f6de37763	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0	1
sorintlab/stolon :v0.16.0-pg12	36b45c0f97fc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.52.0	1
sosedoff/pgweb :latest	a5256d416e2e	golang.org/x/crypto@v0.45.0	0.52.0	1
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0	1
sstarcher/ecr-cleaner :0.1.1	2d43c390cb19	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.52.0	1
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.52.0	1
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.52.0	1
stakater/forecastle :v2.0.2	382cd9572352	golang.org/x/crypto@v0.48.0	0.52.0	1
stakater/konfigurator :v0.1.39	3409565b1ef5	golang.org/x/crypto@v0.17.0	0.52.0	1
stakater/tronador :v0.0.1	37ce9acf2722	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0	1
stakater/whitelister :v0.0.16	39107924063e	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0	1
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0	1
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0	1
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.52.0	1
stashapp/stash :latest	24dbd7607174	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
stashapp/stash :v0.31.1	df744af5a0c9	golang.org/x/crypto@v0.45.0	0.52.0	1
stashapp/stash-box :latest	a534c8afdf39	golang.org/x/crypto@v0.36.0	0.52.0	1
statcan/ingress-istio-controller :1.4.0	d7d6bd180c46	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0	1
statcan/kubernetes-sidecar-terminator :2.0.2	bc361ee7748f	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0	1
stevenweathers/thunderdome-planning-poker :latest	c7eb7b10f186	golang.org/x/crypto@v0.49.0	0.52.0	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0	1