CVE-2026-42508

Critical

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.073; 94th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,438; of 17,790 indexed, latest versions
Container images: 2,789; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status

Carried by container images the latest versions of 2,438 of 17,790 indexed charts deploy, on 2,789 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more	0.52.0	2,789

OSV records: GHSA-5cgq-3rg8-m6cv
Also known as: GO-2026-5021

Charts affected

2,438 by stars

Chart

Latest

Affected images

Radar Score

locust-pluginslocust-plugins

0.0.4

2 of 3 See more

locust-plugins locust-plugins 0.0.4

2 of the 3 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	golang.org/x/crypto@v0.21.0	0.52.0
sky5367/locust-plugins-timescale :latest	d3150f201471	golang.org/x/crypto@v0.20.0	0.52.0

Open the chart page →

7,534

uptime-kumaloeken-at-home

2.3.2

1 of 1 See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	golang.org/x/crypto@v0.38.0	0.52.0

Open the chart page →

33,540

central-hostpath-mapperloft

0.2.9

1 of 1 See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	golang.org/x/crypto@v0.24.0	0.52.0

Open the chart page →

924

devpod-proloft

0.0.0-ci.4-do-not-use

1 of 1 See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

3,234

devspace-cloudloft

0.3.3

1 of 8 See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d	0.52.0

Open the chart page →

9,888

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0

Open the chart page →

3,094

license-serverloft

0.6.0

1 of 1 See more

license-server loft 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	golang.org/x/crypto@v0.45.0	0.52.0

Open the chart page →

804

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

2,453

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Open the chart page →

3,119

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

3,234

vcluster-headloft

0.0.0-035ec6e

1 of 2 See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	golang.org/x/crypto@v0.43.0	0.52.0

Open the chart page →

1,277

vcluster-hpmloft

0.2.7

1 of 1 See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	golang.org/x/crypto@v0.39.0	0.52.0

Open the chart page →

833

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

5,101

vcluster-pro-eksloft

0.0.0-ci-run.10

2 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

2 of the 4 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.52.0
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0

Open the chart page →

5,951

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/crypto@v0.5.0	0.52.0
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

5,786

vcluster-pro-k8sloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	golang.org/x/crypto@v0.5.0	0.52.0
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/crypto@v0.1.0	0.52.0
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/crypto@v0.1.0	0.52.0

Open the chart page →

8,235

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

2,993

vnode-runtimeloft

0.3.3

1 of 1 See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	golang.org/x/crypto@v0.43.0	0.52.0

Open the chart page →

2,518

loggingcomponentloggingcomponent

1.0.0

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,501

nightingalelogic3579

0.3.1

2 of 6 See more

nightingale logic3579 0.3.1

2 of the 6 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
flashcatcloud/nightingale :8.5.1	421acb36181b	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/crypto@v0.25.0	0.52.0

Open the chart page →

9,062

logicservicelogicservice

1.0.0

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,508

0.1.0

1 of 2 See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
aboogie/login_test_backend :new	9c41a4483ac8	golang.org/x/crypto@v0.26.0	0.52.0

Open the chart page →

6,578

apica-ascentlogiqai

2.0.4

5 of 19 See more

apica-ascent logiqai 2.0.4

5 of the 19 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	golang.org/x/crypto@v0.18.0	0.52.0
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.52.0
minio/minio :RELEASE.2020-09-17T04-49-20Z	e2b7b633c250	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.52.0

Open the chart page →

23,689

logtidelogtide

2.1.14

1 of 4 See more

logtide logtide 2.1.14

1 of the 4 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg15	6343bdc87ca1	golang.org/x/crypto@v0.32.0	0.52.0

Open the chart page →

2,775

loki-proxyloki-proxy

0.4.1

1 of 1 See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	golang.org/x/crypto@v0.41.0	0.52.0

Open the chart page →

788

loomwatchloomwatch

1.15.8

1 of 1 See more

loomwatch loomwatch 1.15.8

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/madduck-tech/loomwatch :1.15.8	eb7b7efe7f46	golang.org/x/crypto@v0.51.0	0.52.0

Open the chart page →

217

chronograflsst-sqre

1.3.5

1 of 1 See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Open the chart page →

2,349

sasquatchlsst-sqre

0.1.13

2 of 6 See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
library/kapacitor :1.6.3	7232f6388a4d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Open the chart page →

9,347

telegraf-dslsst-sqre

1.0.23

1 of 1 See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
library/telegraf :1.19-alpine	addb86c0c520	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0

Open the chart page →

3,773

kube-benchm9sweeper

1.6.0

1 of 1 See more

kube-bench m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.6.17	6672264accce	golang.org/x/crypto@v0.4.0	0.52.0

Open the chart page →

1,400

m9sweeperm9sweeper

1.6.0

2 of 6 See more

m9sweeper m9sweeper 1.6.0

2 of the 6 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
kubesec/kubesec :v2.13.0	c0f3b0673578	golang.org/x/crypto@v0.6.0	0.52.0
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

9,805

magistralamagistrala-devops

0.16.2

11 of 42 See more

magistrala magistrala-devops 0.16.2

11 of the 42 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.52.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.52.0
library/nats :2.10.17-alpine	b7752304692b	golang.org/x/crypto@v0.24.0	0.52.0
natsio/nats-box :0.14.3	1cc420186664	golang.org/x/crypto@v0.9.0	0.52.0
prom/alertmanager :v0.28.0	d5155cfac40a	golang.org/x/crypto@v0.31.0	0.52.0
timescale/timescaledb :latest-pg12	645fd9e92d76	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	golang.org/x/crypto@v0.31.0	0.52.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.52.0
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	golang.org/x/crypto@v0.31.0	0.52.0
quay.io/prometheus/pushgateway :v1.11.0	99392035ae99	golang.org/x/crypto@v0.32.0	0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.52.0

Open the chart page →

24,537

docker-mailservermailserver

0.2.65

4 of 9 See more

docker-mailserver mailserver 0.2.65

4 of the 9 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
jeboehm/mailserver-filter :5.0.92	e756949e537d	golang.org/x/crypto@v0.36.0	0.52.0
jeboehm/mailserver-mda :5.0.92	d03fb7bae0a2	golang.org/x/crypto@v0.36.0	0.52.0
jeboehm/mailserver-mta :5.0.92	5fb2f31c940d	golang.org/x/crypto@v0.36.0	0.52.0
jeboehm/mailserver-web :5.0.92	9da13edf5aa8	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

10,921

novosgamarcusrepo

0.1.1

1 of 2 See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
novosga/novosga :latest	34b9acbe6e51	golang.org/x/crypto@v0.50.0	0.52.0

Open the chart page →

3,713

kruisematrixone-operator

1.8.3

1 of 2 See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
openkruise/kruise-manager :v1.8.3	0482722b4e56	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

1,775

matrix-sliding-syncmatrix-sliding-sync

0.2.3

1 of 1 See more

matrix-sliding-sync matrix-sliding-sync 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

1,599

focalboardmattermost

0.5.0

1 of 1 See more

focalboard mattermost 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
mattermost/focalboard :0.6.7	f2f987dada52	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.52.0

Open the chart page →

4,014

mattermost-calls-offloadermattermost

0.2.1

1 of 1 See more

mattermost-calls-offloader mattermost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
mattermost/calls-offloader :v0.9.0	b440b282599e	golang.org/x/crypto@v0.16.0	0.52.0

Open the chart page →

1,422

mattermost-chaos-enginemattermost

0.2.0

1 of 1 See more

mattermost-chaos-engine mattermost 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
mattermost/mattermost-app-chaosengine :c153e43	6268954edd67	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.52.0

Open the chart page →

4,074

mattermost-push-proxymattermost

0.14.3

1 of 1 See more

mattermost-push-proxy mattermost 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
mattermost/mattermost-push-proxy :6.3.0	45c53061c74e	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

897

mattermost-team-editionmattermost-team-edition

6.6.83

1 of 4 See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	golang.org/x/crypto@v0.38.0	0.52.0

Open the chart page →

4,113

mayastormayastor

2.12.1

8 of 31 See more

mayastor mayastor 2.12.1

8 of the 31 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/crypto@v0.36.0	0.52.0
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/crypto@v0.32.0	0.52.0
library/nats :2.9.17-alpine	1a7b320b2942	golang.org/x/crypto@v0.8.0	0.52.0
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	golang.org/x/crypto@v0.8.0	0.52.0
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	golang.org/x/crypto@v0.36.0	0.52.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.52.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.52.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

21,269

eoloplantmca-eoloplaner

0.1.0

1 of 7 See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0

Open the chart page →

29,746

mdai-event-hubmdai-event-hub

0.1.11

1 of 1 See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub :0.1.11	18cae836e9c7	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

413

mdai-gatewaymdai-gateway

0.1.10

1 of 1 See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
public.ecr.aws/p3k6k6h3/mdai-gateway :0.1.10	0dfb323978f6	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

409

mdai-hubmdai-hub

0.10.1

5 of 14 See more

mdai-hub mdai-hub 0.10.1

5 of the 14 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.148.0	590e50477b76	golang.org/x/crypto@v0.48.0	0.52.0
public.ecr.aws/p3k6k6h3/mdai-event-hub :0.1.11	18cae836e9c7	golang.org/x/crypto@v0.49.0	0.52.0
public.ecr.aws/p3k6k6h3/mdai-gateway :0.1.10	0dfb323978f6	golang.org/x/crypto@v0.49.0	0.52.0
quay.io/prometheus/node-exporter :v1.11.1-distroless	6112664fd761	golang.org/x/crypto@v0.49.0	0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.0	6b2f0b6f2f86	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

4,818

medewerkercatalogusmedewerkercatalogus

1.0.0

1 of 3 See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,337

cameramedia-streaming-mesh

0.2.5

1 of 3 See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0

Open the chart page →

18,730

msmmedia-streaming-mesh

0.1.17

1 of 6 See more

msm media-streaming-mesh 0.1.17

1 of the 6 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/crypto@v0.24.0	0.52.0

Open the chart page →

11,528

msm-rtspmedia-streaming-mesh

0.0.2

1 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0

Open the chart page →

18,730

Container images carrying it

2,789 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
alpine/k8s :1.27.3	21b24e6bf801	golang.org/x/crypto@v0.9.0	0.52.0	1
alpine/k8s :1.36.2	44ef4942e171	golang.org/x/crypto@v0.51.0	0.52.0	1
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/crypto@v0.38.0	0.52.0	1
alpine/k8s :1.31.13	7a319b15cfc9	golang.org/x/crypto@v0.41.0	0.52.0	1
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/crypto@v0.36.0	0.52.0	1
alpine/k8s :1.31.4	9c4976d47656	golang.org/x/crypto@v0.27.0	0.52.0	1
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
alpine/k8s :1.35.6	b7a12c5ddf26	golang.org/x/crypto@v0.51.0	0.52.0	1
alpine/k8s :1.30.0	bd01dae02676	golang.org/x/crypto@v0.17.0	0.52.0	1
alpine/k8s :1.30.2	cd560fce90f7	golang.org/x/crypto@v0.24.0	0.52.0	1
alpine/k8s :1.35.5	d870622d0040	golang.org/x/crypto@v0.50.0	0.52.0	1
alpine/k8s :1.28.13	e5c0b053fed7	golang.org/x/crypto@v0.24.0	0.52.0	1
alpine/k8s :1.32.3	eec354133193	golang.org/x/crypto@v0.32.0	0.52.0	1
alpine/k8s :1.28.2	fc059f056ad0	golang.org/x/crypto@v0.13.0	0.52.0	1
altinity/clickhouse-operator :0.16.1	db7dde971407	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0	1
amazon/aws-otel-collector :v0.27.0	d8ab0eef5074	golang.org/x/crypto@v0.1.0	0.52.0	1
amazon/cloudwatch-agent :1.300032.2b361	73b79b02f03a	golang.org/x/crypto@v0.14.0	0.52.0	1
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	1
ambassador/aes-authsvc :v4.0.0-preview.1	2a4598b03a6a	golang.org/x/crypto@v0.10.0	0.52.0	1
ambassador/aes-wafsvc :v4.0.0-preview.1	5fc571509b8c	golang.org/x/crypto@v0.10.0	0.52.0	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
anchore/kai :v0.5.0	8aad6d0912dd	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0	1
andrcuns/dependabot-gitlab :7.7.0-alpha.1	43060f159f4c	golang.org/x/crypto@v0.36.0	0.52.0	1
andrcuns/smocker :0.18.5	b4a8eb20581a	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.52.0	1
ansgroup/cert-manager-webhook-safedns :v1.0.1	cd6b0ef2b309	golang.org/x/crypto@v0.0.0-20191202143827-86a70503ff7e	0.52.0	1
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	1
apache/camel-k :1.10.4	3bb13d14f64a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0	1
apache/shardingsphere-operator :0.3.0	ffe68d6b99c0	golang.org/x/crypto@v0.6.0	0.52.0	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.52.0	1
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.52.0	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.52.0	1
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.52.0	1
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	golang.org/x/crypto@v0.26.0	0.52.0	1
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	golang.org/x/crypto@v0.17.0	0.52.0	1
apecloud/kubetran-platform :latest	32bd92c7f7fa	golang.org/x/crypto@v0.13.0	0.52.0	1
apecloud/pyroscope :0.37.2	dbca95a15bc1	golang.org/x/crypto@v0.1.0	0.52.0	1
appwrite/appwrite :1.9.0	1aaa70127114	golang.org/x/crypto@v0.38.0	0.52.0	1
appwrite/appwrite :2.2.0	896bdd024de3	golang.org/x/crypto@v0.48.0	0.52.0	1
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	golang.org/x/crypto@v0.22.0	0.52.0	1
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.52.0	1
aquasec/kube-bench :v0.6.17	6672264accce	golang.org/x/crypto@v0.4.0	0.52.0	1
aquasec/kube-bench :v0.15.0	7a8fa32dce21	golang.org/x/crypto@v0.45.0	0.52.0	1
aquasec/kube-bench :v0.6.9	c329d73fea58	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0	1
aquasec/postee :2.12.0-amd64	0795cba777e7	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0	1
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0	1
aquasec/tracee :0.24.1	cfbbfee972e6	golang.org/x/crypto@v0.40.0	0.52.0	1
aquasec/trivy :0.43.1	944a04445179	golang.org/x/crypto@v0.10.0	0.52.0	1
aquasec/trivy :0.32.0	973d0df16189	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0	1
aquasec/trivy :0.69.3	bcc376de8d77	golang.org/x/crypto@v0.46.0	0.52.0	1