StackRadar

CVE-2026-42508

Critical

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.073
94th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,416
of 17,787 indexed, latest versions
Container images
2,753
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status

Carried by container images the latest versions of 2,416 of 17,787 indexed charts deploy, on 2,753 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more0.52.02,753
OSV records
GHSA-5cgq-3rg8-m6cv
Also known as
GO-2026-5021

Charts affected

2,416 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.9.11See more

argo-cd argo 10.9.1

1 container image this version deploys carries CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

—
jenkinsjenkinsciOfficialVerified publisher5.9.621See more

jenkins jenkinsci 5.9.62

1 container image this version deploys carries CVE-2026-42508.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-jdk21c1e4c349365f
golang.org/x/crypto@v0.36.0
0.52.0

Open the chart page →

—
gitlab-runnergitlabVerified publisher0.92.11 of 1See more

gitlab-runner gitlab 0.92.1

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.3.1af0325804248
golang.org/x/crypto@v0.50.0
0.52.0

Open the chart page →

904
airflowapache-airflowOfficialVerified publisher1.22.01 of 4See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/prometheus/statsd-exporter:v0.30.0378cb79c4ac7
golang.org/x/crypto@v0.49.0
0.52.0

Open the chart page →

3,195
velerovmware-tanzu12.1.01 of 1See more

velero vmware-tanzu 12.1.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
velero/velero:v1.18.111459094b1b2
golang.org/x/crypto@v0.46.0
0.52.0

Open the chart page →

1,331
rancherrancher-stable2.15.11 of 2See more

rancher rancher-stable 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
golang.org/x/crypto@v0.48.0
0.52.0

Open the chart page →

1,456
nfs-subdir-external-provisionernfs-subdir-external-provisioner4.0.181 of 1See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0

Open the chart page →

2,743
artifact-hubartifact-hubVerified publisher1.23.04 of 7See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
golang.org/x/crypto@v0.46.0
0.52.0
artifacthub/db-migrator:v1.23.028c13565ac5c
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.52.0
artifacthub/scanner:v1.23.02d8365601f0e
golang.org/x/crypto@v0.46.0
0.52.0
artifacthub/tracker:v1.23.05368d21a6e5c
golang.org/x/crypto@v0.42.0
0.52.0

Open the chart page →

10,755
alloygrafana1.12.11 of 2See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
golang.org/x/crypto@v0.50.0
0.52.0

Open the chart page →

1,100
prometheus-blackbox-exporterprometheus-communityOfficialVerified publisher11.18.01 of 1See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.28.0e753ff9f3fc4
golang.org/x/crypto@v0.45.0
0.52.0

Open the chart page →

594
deschedulerdescheduler0.36.01 of 1See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
golang.org/x/crypto@v0.49.0
0.52.0

Open the chart page →

569
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
golang.org/x/crypto@v0.21.0
0.52.0

Open the chart page →

7,894
argo-cdargo-cd-oci10.9.11See more

argo-cd argo-cd-oci 10.9.1

1 container image this version deploys carries CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

—
mimir-distributedgrafana6.2.02 of 6See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/crypto@v0.27.0
0.52.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/crypto@v0.27.0
0.52.0

Open the chart page →

4,517
natsnatsVerified publisher2.14.61 of 3See more

nats nats 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.7ffce8bd10338
golang.org/x/crypto@v0.50.0
0.52.0

Open the chart page →

2,313
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
golang.org/x/crypto@v0.40.0
0.52.0

Open the chart page →

1,765
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
golang.org/x/crypto@v0.51.0
0.52.0

Open the chart page →

30,159
falcofalcosecurity9.1.03 of 3See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
falcosecurity/falco:0.44.1d0cfe422d6ac
golang.org/x/crypto@v0.47.0
0.52.0
falcosecurity/falco-driver-loader:0.44.17df783d5269a
golang.org/x/crypto@v0.50.0
0.52.0
falcosecurity/falcoctl:0.13.00eeb79adc580
golang.org/x/crypto@v0.50.0
0.52.0

Open the chart page →

5,227
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392
0.52.0

Open the chart page →

2,315
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
golang.org/x/crypto@v0.36.0
0.52.0

Open the chart page →

1,360
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
golang.org/x/crypto@v0.45.0
0.52.0

Open the chart page →

969
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.11 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/crypto@v0.49.0
0.52.0

Open the chart page →

1,889
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
golang.org/x/crypto@v0.3.0
0.52.0

Open the chart page →

1,445
openebsopenebsOfficialVerified publisher4.6.110 of 35See more

openebs openebs 4.6.1

10 of the 35 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
golang.org/x/crypto@v0.36.0
0.52.0
grafana/loki:3.4.258a6c186ce78
golang.org/x/crypto@v0.32.0
0.52.0
library/nats:2.9.17-alpine1a7b320b2942
golang.org/x/crypto@v0.8.0
0.52.0
natsio/prometheus-nats-exporter:0.11.031c02aac089a
golang.org/x/crypto@v0.8.0
0.52.0
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
golang.org/x/crypto@v0.36.0
0.52.0
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/crypto@v0.27.0
0.52.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/crypto@v0.27.0
0.52.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/crypto@v0.36.0
0.52.0
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
golang.org/x/crypto@v0.41.0
0.52.0
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
golang.org/x/crypto@v0.37.0
0.52.0

Open the chart page →

23,894
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
golang.org/x/crypto@v0.22.0
0.52.0

Open the chart page →

930
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
golang.org/x/crypto@v0.11.0
0.52.0
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.52.0

Open the chart page →

2,883
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.52.0

Open the chart page →

2,059
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
golang.org/x/crypto@v0.36.0
0.52.0

Open the chart page →

3,045
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
golang.org/x/crypto@v0.38.0
0.52.0

Open the chart page →

13,664
connectonepassword-connect2.4.12 of 2See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
1password/connect-api:1.8.2e915c0c84397
golang.org/x/crypto@v0.48.0
0.52.0
1password/connect-sync:1.8.26297ca6136c0
golang.org/x/crypto@v0.48.0
0.52.0

Open the chart page →

2,550
node-problem-detectordeliveryheroVerified publisher2.4.11 of 1See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
golang.org/x/crypto@v0.46.0
0.52.0

Open the chart page →

1,955
miniominio-official5.4.02 of 2See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/crypto@v0.27.0
0.52.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/crypto@v0.27.0
0.52.0

Open the chart page →

2,483
openfaasopenfaas15.0.133 of 6See more

openfaas openfaas 15.0.13

3 of the 6 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
golang.org/x/crypto@v0.15.0
0.52.0
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
golang.org/x/crypto@v0.41.0
0.52.0
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
golang.org/x/crypto@v0.30.0
0.52.0

Open the chart page →

3,543
vault-secrets-operatorhashicorpVerified publisher1.5.11 of 2See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
golang.org/x/crypto@v0.26.0
0.52.0

Open the chart page →

1,040
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
golang.org/x/crypto@v0.14.0
0.52.0

Open the chart page →

1,367
rocketchatrocketchat-server7.0.24 of 12See more

rocketchat rocketchat-server 7.0.2

4 of the 12 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
golang.org/x/crypto@v0.12.0
0.52.0
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.52.0
natsio/nats-box:0.19.28031d190c7ee
golang.org/x/crypto@v0.31.0
0.52.0
natsio/prometheus-nats-exporter:0.18.002469dc907bc
golang.org/x/crypto@v0.45.0
0.52.0

Open the chart page →

12,279
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
golang.org/x/crypto@v0.14.0
0.52.0

Open the chart page →

2,103
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.15 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
golang.org/x/crypto@v0.50.0
0.52.0
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
golang.org/x/crypto@v0.45.0
0.52.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
golang.org/x/crypto@v0.48.0
0.52.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
golang.org/x/crypto@v0.46.0
0.52.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.15 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
golang.org/x/crypto@v0.50.0
0.52.0
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
golang.org/x/crypto@v0.45.0
0.52.0
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
golang.org/x/crypto@v0.48.0
0.52.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
golang.org/x/crypto@v0.46.0
0.52.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

4,061
chaos-meshchaos-meshVerified publisher2.8.44 of 4See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.52.0
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
golang.org/x/crypto@v0.49.0
0.52.0
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.48a8ec8d4c9ea
golang.org/x/crypto@v0.49.0
0.52.0
ghcr.io/chaos-mesh/chaos-mesh:v2.8.49e48285bb44c
golang.org/x/crypto@v0.49.0
0.52.0

Open the chart page →

6,342
csi-driver-nfscsi-driver-nfsVerified publisher4.13.41 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

1 of the 6 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

3,324
mariadb-operatormariadb-operator26.6.01 of 1See more

mariadb-operator mariadb-operator 26.6.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/mariadb-operator/mariadb-operator:26.6.0a5e17b48f08e
golang.org/x/crypto@v0.51.0
0.52.0

Open the chart page →

377
atlantisatlantis6.15.11See more

atlantis atlantis 6.15.1

1 container image this version deploys carries CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
golang.org/x/crypto@v0.45.0
0.52.0

Open the chart page →

—
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
golang.org/x/crypto@v0.31.0
0.52.0

Open the chart page →

3,475
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.52.0

Open the chart page →

2,453
milvusmilvus4.0.314 of 5See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.5-r2102aac62827b
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.52.0
milvusdb/milvus:v2.2.13a3a55e1c1497
golang.org/x/crypto@v0.9.0
0.52.0
milvusdb/milvus-config-tool:v0.1.12212dfb61401
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.52.0
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
golang.org/x/crypto@v0.7.0
0.52.0

Open the chart page →

32,259
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
golang.org/x/crypto@v0.12.0
0.52.0

Open the chart page →

10,622
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
golang.org/x/crypto@v0.35.0
0.52.0

Open the chart page →

2,221
prometheus-kafka-exporterprometheus-communityVerified publisher4.0.01 of 1See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
danielqsj/kafka-exporter:v1.9.04150e46b2e96
golang.org/x/crypto@v0.32.0
0.52.0

Open the chart page →

716
node-local-dnsdeliveryheroVerified publisher2.9.21 of 1See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
golang.org/x/crypto@v0.43.0
0.52.0

Open the chart page →

1,685

Container images carrying it

2,753 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
golift/unifi-poller:v2.9.5486a63339969
golang.org/x/crypto@v0.17.0
0.52.0
1
golift/unifi-poller:v2.9.2585a29a06d05
golang.org/x/crypto@v0.13.0
0.52.0
1
gomods/athens:v0.17.10f61d1e62359
golang.org/x/crypto@v0.50.0
0.52.0
1
gomods/athens:v0.8.1d714c7ff0231
golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f
0.52.0
1
gomods/athens:v0.11.0efb811df7844
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.52.0
1
goofball222/pritunl:1.32.3602.807bf26032dfce
golang.org/x/crypto@v0.6.0
0.52.0
1
gophish/gophish:0.12.18a57cd171999
golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d
0.52.0
1
gotenberg/gotenberg:8.30206a6c708fc6
golang.org/x/crypto@v0.49.0
0.52.0
1
gotenberg/gotenberg:8.3467097317623a
golang.org/x/crypto@v0.50.0
0.52.0
1
gotify/server:2.1.409c79bc1e403
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.52.0
1
gotify/server:2.9.1a3af47067ce6
golang.org/x/crypto@v0.47.0
0.52.0
1
gradiant/open5gs-dbctl:0.10.3332031245fce
golang.org/x/crypto@v0.32.0
0.52.0
1
grafana/agent:v0.44.23364714a2f64
golang.org/x/crypto@v0.31.0
0.52.0
1
grafana/agent:v0.20.0825c09373d27
golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63
0.52.0
1
grafana/agent:v0.40.3f6cbec9409be
golang.org/x/crypto@v0.18.0
0.52.0
1
grafana/agent-operator:v0.34.1045c9125634c
golang.org/x/crypto@v0.8.0
0.52.0
1
grafana/alloy:v1.5.101a63f4e032c
golang.org/x/crypto@v0.29.0
0.52.0
1
grafana/alloy:v1.4.306bdcbb51fc2
golang.org/x/crypto@v0.27.0
0.52.0
1
grafana/alloy:v1.11.38c7256f412fe
golang.org/x/crypto@v0.41.0
0.52.0
1
grafana/alloy:v1.1.1c3dac4e26471
golang.org/x/crypto@v0.22.0
0.52.0
1
grafana/alloy:v1.14.0f50931848bd8
golang.org/x/crypto@v0.48.0
0.52.0
1
grafana/grafana:6.6.0052147d7e0ec
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.52.0
1
grafana/grafana:10.1.50679e877ba20
golang.org/x/crypto@v0.11.0
0.52.0
1
grafana/grafana:7.5.609bb407e26ab
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.52.0
1
grafana/grafana:13.0.10f86bada30d6
golang.org/x/crypto@v0.49.0
0.52.0
1
grafana/grafana:7.3.315b977f5207d
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.52.0
1
grafana/grafana:9.4.71a359d92f40e
golang.org/x/crypto@v0.4.0
0.52.0
1
grafana/grafana:10.1.11b9ca4bbc4a2
golang.org/x/crypto@v0.11.0
0.52.0
1
grafana/grafana:13.0.1-security-012d1f9ae67c17
golang.org/x/crypto@v0.49.0
0.52.0
1
grafana/grafana:12.2.22ebef928d7e5
golang.org/x/crypto@v0.42.0
0.52.0
1
grafana/grafana:12.2.135c41e0fd029
golang.org/x/crypto@v0.42.0
0.52.0
1
grafana/grafana:9.5.239c849cebccc
golang.org/x/crypto@v0.4.0
0.52.0
1
grafana/grafana:11.2.2-security-01464eac539793
golang.org/x/crypto@v0.26.0
0.52.0
1
grafana/grafana:11.5.15781759b3d27
golang.org/x/crypto@v0.32.0
0.52.0
1
grafana/grafana:11.6.062d2b9d20a19
golang.org/x/crypto@v0.35.0
0.52.0
1
grafana/grafana:8.0.3696823fbc561
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.52.0
1
grafana/grafana:10.2.36b5b37eb35bb
golang.org/x/crypto@v0.16.0
0.52.0
1
grafana/grafana:7.3.46d42886b3ebe
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.52.0
1
grafana/grafana:12.3.070d9599b186c
golang.org/x/crypto@v0.43.0
0.52.0
1
grafana/grafana:7.2.1733842cca5bd
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.52.0
1
grafana/grafana:12.2.074144189b384
golang.org/x/crypto@v0.41.0
0.52.0
1
grafana/grafana:9.4.376dcf36e7d2a
golang.org/x/crypto@v0.4.0
0.52.0
1
grafana/grafana:10.3.38640e5038e83
golang.org/x/crypto@v0.17.0
0.52.0
1
grafana/grafana:11.5.28b37a2f028f1
golang.org/x/crypto@v0.32.0
0.52.0
1
grafana/grafana:9.1.19746858c20e6
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.52.0
1
grafana/grafana:12.1.1a1701c218024
golang.org/x/crypto@v0.39.0
0.52.0
1
grafana/grafana:9.0.1a738d0744784
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
0.52.0
1
grafana/grafana:10.4.19a9043254ba16
golang.org/x/crypto@v0.38.0
0.52.0
1
grafana/grafana:11.1.3b23b588cf7cb
golang.org/x/crypto@v0.24.0
0.52.0
1
grafana/grafana:12.0.2b5b59bfc7561
golang.org/x/crypto@v0.38.0
0.52.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.