StackRadar

CVE-2026-42508

Critical

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.073
94th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,427
of 17,797 indexed, latest versions
Container images
2,776
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/crypto vulnerable to auth bypass via unenforced @revoked status

Carried by container images the latest versions of 2,427 of 17,797 indexed charts deploy, on 2,776 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more0.52.02,776
OSV records
GHSA-5cgq-3rg8-m6cv
Also known as
GO-2026-5021

Charts affected

2,427 by stars
ChartLatestAffected imagesRadar Score
kubeflowkromanow94-kubeflow0.5.19 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

9 of the 30 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.17.072f14e03b9e1
golang.org/x/crypto@v0.21.0
0.52.0
kubeflownotebookswg/kfam:v1.9.22060a2ede788
golang.org/x/crypto@v0.14.0
0.52.0
kubeflownotebookswg/notebook-controller:v1.9.20f14bd28fdd5
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.52.0
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.52.0
kubeflownotebookswg/tensorboard-controller:v1.9.26536a9f61193
golang.org/x/crypto@v0.14.0
0.52.0
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
golang.org/x/crypto@v0.22.0
0.52.0
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
golang.org/x/crypto@v0.22.0
0.52.0
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
golang.org/x/crypto@v0.22.0
0.52.0
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
golang.org/x/crypto@v0.22.0
0.52.0

Open the chart page →

71,075
lndkronkltdVerified publisher0.3.93 of 4See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.52.0
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.52.0
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.52.0

Open the chart page →

8,472
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.52.0

Open the chart page →

3,649
nocodbkrzwiatrzyk0.0.11 of 1See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
nocodb/nocodb:0.100.2b0b91ec2a2dd
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.52.0

Open the chart page →

2,320
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.52.0

Open the chart page →

3,819
traggokrzwiatrzyk1.0.01 of 1See more

traggo krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
traggo/server:0.2.3f1ced637510e
golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f
0.52.0

Open the chart page →

1,885
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
golang.org/x/crypto@v0.31.0
0.52.0

Open the chart page →

3,207
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
golang.org/x/crypto@v0.7.0
0.52.0

Open the chart page →

1,947
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
golang.org/x/crypto@v0.7.0
0.52.0

Open the chart page →

1,947
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
golang.org/x/crypto@v0.9.0
0.52.0

Open the chart page →

2,276
cluster-componentkubebb0.2.22 of 4See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
kubebb/cert-manager-cainjector:v1.8.0f83cd256229b
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.52.0
kubebb/cert-manager-controller:v1.8.020509de4b399
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.52.0

Open the chart page →

8,174
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.52.0

Open the chart page →

3,995
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

1,758
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
golang.org/x/crypto@v0.12.0
0.52.0

Open the chart page →

1,947
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
golang.org/x/crypto@v0.3.0
0.52.0
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
golang.org/x/crypto@v0.5.0
0.52.0

Open the chart page →

7,472
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.52.0

Open the chart page →

6,515
u4a-componentkubebb0.2.104 of 8See more

u4a-component kubebb 0.2.10

4 of the 8 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
kubebb/iam-controller:v0.2.0-202401288ffbfa2d67e9
golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898
0.52.0
kubebb/iam-provider:v0.2.0-202401280ba03fcee3a7
golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898
0.52.0
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.52.0
kubebb/oidc-server:v0.2.02b5894ef1e2f
golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab
0.52.0

Open the chart page →

13,835
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.52.0

Open the chart page →

1,876
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
golang.org/x/crypto@v0.17.0
0.52.0
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

2,885
calicokubeblocksVerified publisher3.28.03 of 3See more

calico kubeblocks 3.28.0

3 of the 3 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
calico/cni:v3.28.0cef0c907b8f4
golang.org/x/crypto@v0.22.0
0.52.0
calico/kube-controllers:v3.28.08f04e4772a2b
golang.org/x/crypto@v0.22.0
0.52.0
calico/node:v3.28.0385bf6391fea
golang.org/x/crypto@v0.22.0
0.52.0

Open the chart page →

3,309
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
golang.org/x/crypto@v0.21.0
0.52.0

Open the chart page →

2,306
chaos-meshkubeblocksVerified publisher2.7.24 of 4See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.52.0
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
golang.org/x/crypto@v0.17.0
0.52.0
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
golang.org/x/crypto@v0.17.0
0.52.0
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

13,601
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
golang.org/x/crypto@v0.17.0
0.52.0
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

5,137
geminikubeblocksVerified publisher0.13.41 of 8See more

gemini kubeblocks 0.13.4

1 of the 8 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
prom/alertmanager:v0.28.0d5155cfac40a
golang.org/x/crypto@v0.31.0
0.52.0

Open the chart page →

3,103
gemini-schedulerkubeblocksVerified publisher0.1.11 of 1See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
apecloud/gemini-scheduler:0.1.15832d1a9097a
golang.org/x/crypto@v0.26.0
0.52.0

Open the chart page →

1,419
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
golang.org/x/crypto@v0.11.0
0.52.0

Open the chart page →

3,568
kubetrankubeblocksVerified publisher0.1.01 of 1See more

kubetran kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
apecloud/kubetran-platform:latest32bd92c7f7fa
golang.org/x/crypto@v0.13.0
0.52.0

Open the chart page →

1,207
lokikubeblocksVerified publisher5.39.03 of 5See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.34.1045c9125634c
golang.org/x/crypto@v0.8.0
0.52.0
grafana/loki:2.9.26074e01dbe03
golang.org/x/crypto@v0.14.0
0.52.0
grafana/loki-canary:2.9.24249db29b992
golang.org/x/crypto@v0.14.0
0.52.0

Open the chart page →

5,862
metrics-serverkubeblocksVerified publisher3.12.01 of 1See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
golang.org/x/crypto@v0.18.0
0.52.0

Open the chart page →

1,138
nvidia-gpu-exporterkubeblocksVerified publisher0.3.11 of 1See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.52.0

Open the chart page →

4,511
openebskubeblocksVerified publisher3.10.02 of 3See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
openebs/node-disk-operator:2.1.06afe2123c457
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.52.0
openebs/provisioner-localpv:3.5.0aea39e49bb97
golang.org/x/crypto@v0.14.0
0.52.0

Open the chart page →

10,602
postgres-operatorkubeblocksVerified publisher1.12.21 of 1See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
golang.org/x/crypto@v0.23.0
0.52.0

Open the chart page →

1,555
prometheuskubeblocksVerified publisher15.16.15 of 6See more

prometheus kubeblocks 15.16.1

5 of the 6 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.33496e0f85943
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.52.0
quay.io/prometheus/alertmanager:v0.24.0088464f949de
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.52.0
quay.io/prometheus/node-exporter:v1.3.1f2269e73124d
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.52.0
quay.io/prometheus/prometheus:v2.39.14748e26f9369
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.009a36e2be1db
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.52.0

Open the chart page →

10,309
vaultkubeblocksVerified publisher0.30.02 of 2See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
golang.org/x/crypto@v0.35.0
0.52.0
hashicorp/vault-k8s:1.6.2103a2d817a74
golang.org/x/crypto@v0.35.0
0.52.0

Open the chart page →

2,751
victoria-metrics-alertkubeblocksVerified publisher0.8.3-reload1 of 3See more

victoria-metrics-alert kubeblocks 0.8.3-reload

1 of the 3 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
golang.org/x/crypto@v0.1.0
0.52.0

Open the chart page →

3,715
kubeclaritykubeclarity2.23.32 of 5See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
golang.org/x/crypto@v0.12.0
0.52.0
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

5,521
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
golang.org/x/crypto@v0.45.0
0.52.0

Open the chart page →

4,414
cephfs-csikubegems1.0.81 of 6See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.52.0

Open the chart page →

4,452
chartmuseumkubegems3.8.01 of 1See more

chartmuseum kubegems 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.14.0878ef6a31fa0
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.52.0

Open the chart page →

3,526
gatewaykubegems0.3.22 of 2See more

gateway kubegems 0.3.2

2 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
kubegems/ingress-nginx-operator:v0.2.0cc67357beeeb
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.52.0
kubegems/kube-rbac-proxy:v0.8.0941f557ed1ee
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.52.0

Open the chart page →

3,506
giteakubegems5.0.81 of 2See more

gitea kubegems 5.0.8

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
gitea/gitea:1.16.8b0bdf102b485
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.52.0

Open the chart page →

3,400
juicefs-csi-driverkubegems0.19.22 of 6See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.23.03e4daf9626d5
golang.org/x/crypto@v0.14.0
0.52.0
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
golang.org/x/crypto@v0.14.0
0.52.0

Open the chart page →

4,839
knative-servingkubegems1.0.11 of 8See more

knative-serving kubegems 1.0.1

1 of the 8 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinnedbac158dfb0c7
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.52.0

Open the chart page →

10,469
kubegems-edgekubegems1.24.101 of 1See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

3,390
logging-operatorkubegems3.17.61 of 1See more

logging-operator kubegems 3.17.6

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/logging-operator:3.17.623c2d4d54a64
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.52.0

Open the chart page →

1,800
prometheus-adapterkubegems4.14.11 of 1See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
golang.org/x/crypto@v0.22.0
0.52.0

Open the chart page →

937
prometheus-blackbox-exporterkubegems7.1.31 of 1See more

prometheus-blackbox-exporter kubegems 7.1.3

1 of the 1 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.22.0608acee5704a
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.52.0

Open the chart page →

1,635
volcanokubegems1.12.12 of 3See more

volcano kubegems 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
volcanosh/vc-controller-manager:v1.12.13815883c32f6
golang.org/x/crypto@v0.37.0
0.52.0
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
golang.org/x/crypto@v0.37.0
0.52.0

Open the chart page →

5,036
xpai-schedulerkubegems1.12.11 of 2See more

xpai-scheduler kubegems 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
projecthami/volcano-vgpu-device-plugin:v1.9.40c94118d1d98
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0

Open the chart page →

2,324
gptchat-api-feishubotkubegemsapp0.1.12 of 3See more

gptchat-api-feishubot kubegemsapp 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-42508.

Container imageDigestPackageFixed in
kubegems/chatgpt-api-feishubot:latest7c93c84b2055
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.52.0
kubegems/chatgpt-api-proxy:latest8905c9dbbb5d
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.52.0

Open the chart page →

8,490

Container images carrying it

2,776 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
rancher/mirrored-longhornio-csi-resizer:v2.1.0-2026042841cb674d1154
golang.org/x/crypto@v0.46.0
0.52.0
1
rancher/mirrored-longhornio-csi-snapshotter:v8.5.0-202604281975fac3890f
golang.org/x/crypto@v0.47.0
0.52.0
1
ravendb/ravendb-operator:2.1.0511050205ac5
golang.org/x/crypto@v0.46.0
0.52.0
1
rclone/rclone:1.63.008e1af3c8814
golang.org/x/crypto@v0.7.0
0.52.0
1
rclone/rclone:1.57.01e6eeabddc01
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.52.0
1
rclone/rclone:1.56.0f2fc45c8bc57
golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b
0.52.0
1
reaper99/recipya:v1.2.27f7ec3aeb88c
golang.org/x/crypto@v0.25.0
0.52.0
1
redislabs/operator:8.0.18-119078e713bb6a
golang.org/x/crypto@v0.48.0
0.52.0
1
redpandadata/kminion:v2.3.0c05fa976428e
golang.org/x/crypto@v0.47.0
0.52.0
1
replicated/replicated-sdk:1.0.0-beta.318751b4963250
golang.org/x/crypto@v0.25.0
0.52.0
1
reportportal/migrations:5.15.4464468240d7b
golang.org/x/crypto@v0.36.0
0.52.0
1
reportportal/migrations:5.7.0da5d8e1395fe
golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734
0.52.0
1
reportportal/service-index:5.0.112b27a2d7a87d
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.52.0
1
reportportal/service-index:5.15.1b1860ed33071
golang.org/x/crypto@v0.51.0
0.52.0
1
restic/restic:0.15.2579e4e6a4931
golang.org/x/crypto@v0.7.0
0.52.0
1
restic/rest-server:0.14.0d2aff06f47eb
golang.org/x/crypto@v0.38.0
0.52.0
1
rezachalak/bzen-mongo:1.0.034f694325191
golang.org/x/crypto@v0.12.0
0.52.0
1
robotshop/rs-mongodb:latest119b545823cd
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.52.0
1
robustadev/kubewatch:v2.9.00457a51e36e8
golang.org/x/crypto@v0.24.0
0.52.0
1
rokk42/seashells:1.0-k8sdfc850a5db9e
golang.org/x/crypto@v0.23.0
0.52.0
1
rook/ceph:v1.19.2944a1dd70496
golang.org/x/crypto@v0.45.0
0.52.0
1
rookout/k8s-operator:latest0d083f3ef1a7
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.52.0
1
rotationalio/beacon:0.2.0f8d8b694515a
golang.org/x/crypto@v0.51.0
0.52.0
1
rotationalio/geoping:1.3.034bcb6fc3cb7
golang.org/x/crypto@v0.48.0
0.52.0
1
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
golang.org/x/crypto@v0.46.0
0.52.0
1
rotationalio/rotational-api:1.3.0f1a2d05d8fff
golang.org/x/crypto@v0.49.0
0.52.0
1
rqlite/rqlite:9.1.37b992a526eee
golang.org/x/crypto@v0.43.0
0.52.0
1
rss3/op-batcher:d2c5ced00901227473fc196fda838191f0cb4e02e8adc09d9c07
golang.org/x/crypto@v0.16.0
0.52.0
1
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
golang.org/x/crypto@v0.16.0
0.52.0
1
rss3/op-proposer:d2c5ced00901227473fc196fda838191f0cb4e0296672897ba9e
golang.org/x/crypto@v0.16.0
0.52.0
1
rss3/proxyd:6edce9ddfeee0b00a2d98f24c3ce67885653651b865a0a6bdf4c
golang.org/x/crypto@v0.17.0
0.52.0
1
rss3/proxyd:d2c5ced00901227473fc196fda838191f0cb4e028d9a44c650fa
golang.org/x/crypto@v0.14.0
0.52.0
1
runatlantis/atlantis:v0.16.145fbaf7e207c
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.52.0
1
ryuunosukeds3/orbital:latest0879f7261b10
golang.org/x/crypto@v0.36.0
0.52.0
1
samarthya/spinnaker:v1.0ef06d81036af
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.52.0
1
samcm/checkpointz:latesta66b24a87766
golang.org/x/crypto@v0.45.0
0.52.0
1
sarwansharma/minio:v359d1da9385d1
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.52.0
1
schemahero/schemahero-manager:0.22.11609e1a05cd3
golang.org/x/crypto@v0.38.0
0.52.0
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
golang.org/x/crypto@v0.37.0
0.52.0
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
golang.org/x/crypto@v0.37.0
0.52.0
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
golang.org/x/crypto@v0.37.0
0.52.0
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
golang.org/x/crypto@v0.37.0
0.52.0
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
golang.org/x/crypto@v0.37.0
0.52.0
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
golang.org/x/crypto@v0.37.0
0.52.0
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
golang.org/x/crypto@v0.38.0
0.52.0
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
golang.org/x/crypto@v0.38.0
0.52.0
1
sealio/hermitcrab:v0.1.4a326a2f03660
golang.org/x/crypto@v0.22.0
0.52.0
1
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
golang.org/x/crypto@v0.1.0
0.52.0
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
golang.org/x/crypto@v0.35.0
0.52.0
1
semaphoreui/semaphore:v2.9.645b50bc11833f
golang.org/x/crypto@v0.20.0
0.52.0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.