CVE-2026-42505

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.004; 32nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,298; of 17,821 indexed, latest versions
Container images: 4,959; deployed by those charts
Fix available: 1 of 1; affected package

Invoking Encrypted Client Hello privacy leak in crypto/tls

Carried by container images the latest versions of 4,298 of 17,821 indexed charts deploy, on 4,959 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+188 more	1.25.12	4,959

OSV records: GO-2026-5856
Also known as: BIT-golang-2026-42505

Charts affected

4,298 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

4,959 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/caddy :2.11.4-alpine :2-alpine	de23def33b17	stdlib@go1.26.3	1.25.12	2
library/caddy :latest	df7f1c2fb114	stdlib@go1.26.3	1.25.12	2
library/cassandra :4.1.3	7cbcec0086ac	stdlib@go1.18.2	1.25.12	2
library/ghost :6.64.0	a31d03f1f629	stdlib@go1.26.4	1.25.12	2
library/influxdb :2.6.1-alpine	44a366dd7724	stdlib@go1.19.4	1.25.12	2
library/influxdb :2.7	b8d940ca9376	stdlib@go1.18.2	1.25.12	2
library/mariadb :10.8.3	0abf60f81588	stdlib@go1.16.7	1.25.12	2
library/mariadb :10.10	334b315c10e5	stdlib@go1.18.2	1.25.12	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	stdlib@go1.24.6	1.25.12	2
library/mariadb :11.4	611a2fcc5fa7	stdlib@go1.24.6	1.25.12	2
library/mariadb :10.6	92e50059ea0a	stdlib@go1.24.6	1.25.12	2
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.25.12	2
library/mongo :8.0.20	098862b1339f	stdlib@go1.25.7	1.25.12	2
library/mongo :5.0	41108d183e97	stdlib@go1.25.9	1.25.12	2
library/mongo :7	b096b4cb9269	stdlib@go1.24.6	1.25.12	2
library/mysql :8.2.0	212fe73edca5	stdlib@go1.18.2	1.25.12	2
library/mysql :8.4.2	ac80b6e09e5b	stdlib@go1.18.2	1.25.12	2
library/mysql :9.7.2	b2cf29815e62	stdlib@go1.24.6	1.25.12	2
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.25.12	2
library/nats :2.10.7-alpine	1bcddab51b80	stdlib@go1.21.5	1.25.12	2
library/nats :2.10.5-alpine	85319e5e541b	stdlib@go1.21.4	1.25.12	2
library/nats :2.8.4-alpine	988010f74b61	stdlib@go1.17.10	1.25.12	2
library/postgres :17-bookworm	051f7b7b3abd	stdlib@go1.24.6	1.25.12	2
library/postgres :16.1	09f23e02d766	stdlib@go1.18.2	1.25.12	2
library/postgres :18 :18.6-trixie	10037cee1d5e	stdlib@go1.24.6	1.25.12	2
library/postgres :18.1	1090bc3a8ccf	stdlib@go1.24.6	1.25.12	2
library/postgres :14-alpine	1a916758fce6	stdlib@go1.24.6	1.25.12	2
library/postgres :16-alpine	3c5c8892d184	stdlib@go1.24.6	1.25.12	2
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.25.12	2
library/postgres :18.0	6f3e42ad37de	stdlib@go1.24.6	1.25.12	2
library/postgres :15	9b1d34adbce1	stdlib@go1.24.6	1.25.12	2
library/postgres :9.6	caddd35b05cd	stdlib@go1.16.7	1.25.12	2
library/postgres :16.4	e62fbf9d3e2b	stdlib@go1.18.2	1.25.12	2
library/postgres :17-alpine	f02121de6f74	stdlib@go1.24.6	1.25.12	2
library/postgres :13-alpine	fb9065b6e3e2	stdlib@go1.24.6	1.25.12	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	stdlib@go1.22.2	1.25.12	2
library/rabbitmq :4.3.5-management :4-management :management	ffd1b50c522a	stdlib@go1.22.2	1.25.12	2
library/redis	148bb5411c18	stdlib@go1.18.2	1.25.12	2
library/redis :7.2.3	a7cee7c8178f	stdlib@go1.18.2	1.25.12	2
library/redmine :6.1.3-trixie	f474a901faec	stdlib@go1.24.6	1.25.12	2
library/traefik :v3.7.1	6b9cbca6fac4	stdlib@go1.25.10	1.25.12	2
library/traefik :v2.5	7d5a6ae66572	stdlib@go1.17.6	1.25.12	2
library/traefik :2.2.8	f5af5a5ce17f	stdlib@go1.14.6	1.25.12	2
library/zookeeper :3.9.5	7d0f24ebb67b	stdlib@go1.18.1	1.25.12	2
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	stdlib@go1.22.5	1.25.12	2
linuxserver/cloud9 :latest :version-1.29.2	45c5fe102ff3	stdlib@go1.17.11	1.25.12	2
listmonk/listmonk :v2.1.0	d2eac77ddfad	stdlib@go1.17.6	1.25.12	2
listmonk/listmonk :latest :v6.2.0	f535d59e1499	stdlib@go1.26.1	1.25.12	2
longhornio/longhorn-manager :v1.2.3	dca34321452c	stdlib@go1.14.1	1.25.12	2
louislam/uptime-kuma :2.5.4	917318f9d7be	stdlib@go1.20.5	1.25.12	2