CVE-2026-46595

Critical

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 10.0; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,438; of 17,790 indexed, latest versions
Container images: 2,789; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement

Carried by container images the latest versions of 2,438 of 17,790 indexed charts deploy, on 2,789 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more	0.52.0	2,789

OSV records: GHSA-x527-x647-q7gg
Also known as: GO-2026-5023

Charts affected

2,438 by stars

Chart

Latest

Affected images

Radar Score

juicefs-csi-driverkubegems

0.19.2

2 of 6 See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.23.0	3e4daf9626d5	golang.org/x/crypto@v0.14.0	0.52.0
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

4,838

knative-servingkubegems

1.0.1

1 of 8 See more

knative-serving kubegems 1.0.1

1 of the 8 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	bac158dfb0c7	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0

Open the chart page →

10,469

kubegems-edgekubegems

1.24.10

1 of 1 See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

3,390

logging-operatorkubegems

3.17.6

1 of 1 See more

logging-operator kubegems 3.17.6

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0

Open the chart page →

1,800

prometheus-adapterkubegems

4.14.1

1 of 1 See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

937

prometheus-blackbox-exporterkubegems

7.1.3

1 of 1 See more

prometheus-blackbox-exporter kubegems 7.1.3

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.52.0

Open the chart page →

1,634

volcanokubegems

1.12.1

2 of 3 See more

volcano kubegems 1.12.1

2 of the 3 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	golang.org/x/crypto@v0.37.0	0.52.0
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	golang.org/x/crypto@v0.37.0	0.52.0

Open the chart page →

5,036

xpai-schedulerkubegems

1.12.1

1 of 2 See more

xpai-scheduler kubegems 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,324

gptchat-api-feishubotkubegemsapp

0.1.1

2 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0

Open the chart page →

8,487

log-generatorkube-logging

0.6.0

1 of 1 See more

log-generator kube-logging 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.6.0	8324bbc0ec08	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

1,269

logging-demokube-logging

4.0.3

1 of 1 See more

logging-demo kube-logging 4.0.3

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.4.1	05aa441b20aa	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

1,267

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.52.0

Open the chart page →

7,208

lokikube-ops

1.7.3

1 of 1 See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/loki :2.2.1	4fbd63194674	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0

Open the chart page →

2,653

promtailkube-ops

1.5.1

1 of 2 See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/promtail :2.2.1	34de6387233b	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0

Open the chart page →

4,157

adguard-homekubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

adguard-home kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.76	7157eb1dc3b2	golang.org/x/crypto@v0.50.0	0.52.0

Open the chart page →

725

cloudflaredkubernetes-homelab-helm-charts

0.1.1

1 of 1 See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/crypto@v0.38.0	0.52.0

Open the chart page →

1,460

navidromekubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

navidrome kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.61.2	9fa40b3d8dec	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

901

pocket-idkubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
ghcr.io/pocket-id/pocket-id :v2.7.0	45bdeaf3fcd6	golang.org/x/crypto@v0.50.0	0.52.0

Open the chart page →

1,520

scrutinykubernetes-homelab-helm-charts

0.2.2

2 of 3 See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
library/influxdb :2.8	571eb4514977	golang.org/x/crypto@v0.39.0	0.52.0
ghcr.io/analogj/scrutiny :v0.9.2-web	71be54e99608	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

5,547

syncthingkubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

syncthing kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
syncthing/syncthing :2.1.0	7c60eb0ec887	golang.org/x/crypto@v0.51.0	0.52.0

Open the chart page →

1,311

tor-proxykubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
peterdavehello/tor-socks-proxy :latest	0cc12d36d312	golang.org/x/crypto@v0.33.0	0.52.0

Open the chart page →

1,481

uptime-kumakubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.2.1-slim	059b49d64739	golang.org/x/crypto@v0.38.0	0.52.0

Open the chart page →

6,391

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/crypto@v0.13.0	0.52.0

Open the chart page →

3,630

harbor-operatorkubernetes-replicator

1.6.3

1 of 1 See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

1,205

kubernetes-secret-generatorkubernetes-replicator

3.4.1

1 of 1 See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	golang.org/x/crypto@v0.24.0	0.52.0

Open the chart page →

855

api-serverkubeshop

0.11.16

2 of 2 See more

api-server kubeshop 0.11.16

2 of the 2 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :0.11.16	0ad97f07a78b	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0
minio/minio :latest	14cea493d9a3	golang.org/x/crypto@v0.40.0	0.52.0

Open the chart page →

3,432

kusk-gatewaykubeshop

0.0.65

1 of 2 See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway :v1.5.4	8b5bfd57a3ce	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.52.0

Open the chart page →

1,621

testkube-apikubeshop

2.1.162

1 of 2 See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.1.162	e97dc620d9b4	golang.org/x/crypto@v0.38.0	0.52.0

Open the chart page →

1,670

testkube-logskubeshop

0.2.2

1 of 1 See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubeshop/testkube-logs-server :latest	094186b19698	golang.org/x/crypto@v0.32.0	0.52.0

Open the chart page →

1,286

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

1,562

cloudnative-pgkube-site-follower

0.23.0

1 of 1 See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

909

fluentbit-operatorkubesphere

0.1.0

1 of 2 See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubesphere/fluentbit-operator :v0.9.0	b87db3c57cb3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,902

gitlabkubesphere

4.2.3

5 of 17 See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.52.0
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0

Open the chart page →

38,178

harborkubesphere

1.9.3

7 of 11 See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	golang.org/x/crypto@v0.0.0-20220513210258-46612604a0f9	0.52.0

Open the chart page →

17,851

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.52.0

Open the chart page →

8,580

cranekubesphere-stable

0.5.2

2 of 3 See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0
gocrane/craned :v0.5.1	a1400909118c	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.52.0

Open the chart page →

8,902

csi-qingcloudkubesphere-stable

1.4.0

3 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

3 of the 6 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0

Open the chart page →

12,444

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/crypto@v0.1.0	0.52.0
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/crypto@v0.4.0	0.52.0

Open the chart page →

18,420

easegresskubesphere-stable

1.0.0

1 of 1 See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
megaease/easegress :latest	fad1c7452958	golang.org/x/crypto@v0.46.0	0.52.0

Open the chart page →

1,315

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/crypto@v0.7.0	0.52.0
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0

Open the chart page →

4,108

fpga-operatorkubesphere-stable

2.7.4

2 of 7 See more

fpga-operator kubesphere-stable 2.7.4

2 of the 7 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/crypto@v0.16.0	0.52.0
inaccel/reef :latest	c967218739f3	golang.org/x/crypto@v0.17.0	0.52.0

Open the chart page →

5,770

iomeshkubesphere-stable

1.1.0

11 of 25 See more

iomesh kubesphere-stable 1.1.0

11 of the 25 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/crypto@v0.16.0	0.52.0
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/crypto@v0.16.0	0.52.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/crypto@v0.14.0	0.52.0
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

48,954

IOMeshkubesphere-stable

1.2.0

11 of 25 See more

IOMesh kubesphere-stable 1.2.0

11 of the 25 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/crypto@v0.16.0	0.52.0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/crypto@v0.16.0	0.52.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/crypto@v0.14.0	0.52.0
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/crypto@v0.14.0	0.52.0

Open the chart page →

46,639

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.52.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0

Open the chart page →

14,401

csi-neonsankubesphere-test

1.3.0

3 of 6 See more

csi-neonsan kubesphere-test 1.3.0

3 of the 6 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0

Open the chart page →

18,526

csi-qingcloudkubesphere-test

1.4.0

3 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

3 of the 6 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.52.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0

Open the chart page →

12,444

minio-gatewaykubesphere-test

0.1.0

1 of 1 See more

minio-gateway kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
minio/minio :latest	14cea493d9a3	golang.org/x/crypto@v0.40.0	0.52.0

Open the chart page →

1,084

openelbkubesphere-test

0.2.4

1 of 2 See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

4,336

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,791

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-46595.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0

Open the chart page →

2,220

Container images carrying it

2,789 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/crypto@v0.21.0	0.52.0	2
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/crypto@v0.21.0	0.52.0	2
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/crypto@v0.21.0	0.52.0	2
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/crypto@v0.21.0	0.52.0	2
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/crypto@v0.21.0	0.52.0	2
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/crypto@v0.21.0	0.52.0	2
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/crypto@v0.21.0	0.52.0	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.52.0	2
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0	2
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.52.0	2
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/crypto@v0.36.0	0.52.0	2
grafana/alloy :v1.12.2	f94b1c82957a	golang.org/x/crypto@v0.43.0	0.52.0	2
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.52.0	2
grafana/grafana :11.1.0	079600c9517b	golang.org/x/crypto@v0.24.0	0.52.0	2
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/crypto@v0.43.0	0.52.0	2
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0	2
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.52.0	2
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/crypto@v0.24.0	0.52.0	2
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/crypto@v0.45.0	0.52.0	2
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/crypto@v0.27.0	0.52.0	2
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/crypto@v0.47.0	0.52.0	2
grafana/loki :3.6.11	44148ad243c0	golang.org/x/crypto@v0.49.0	0.52.0	2
grafana/loki :1.5.0	922b3f412fdd	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.52.0	2
grafana/loki :3.1.0	d947e68a84d9	golang.org/x/crypto@v0.21.0	0.52.0	2
grafana/loki :2.5.0	f9ef133793af	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0	2
grafana/promtail :1.5.0	46e88d390cd6	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.52.0	2
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/crypto@v0.22.0	0.52.0	2
hashicorp/consul :1.14.2	e38576edcdfd	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.52.0	2
hashicorp/consul-k8s-control-plane :1.0.2	538a3436398d	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0	2
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0	2
hashicorp/vault :1.15.2	6b4e5dadf082	golang.org/x/crypto@v0.14.0	0.52.0	2
hashicorp/vault :1.12.1	8de4d5f31b38	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.52.0	2
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	golang.org/x/crypto@v0.14.0	0.52.0	2
hashicorp/vault-k8s :1.1.0	844337076b72	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0	2
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0	2
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/crypto@v0.14.0	0.52.0	2
ilum/api :6.7.3	624fd09528c8	golang.org/x/crypto@v0.36.0	0.52.0	2
ilum/mongodb :6.0.5	42b6d774c37d	golang.org/x/crypto@v0.14.0	0.52.0	2
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/crypto@v0.16.0	0.52.0	2
inaccel/reef :latest	c967218739f3	golang.org/x/crypto@v0.17.0	0.52.0	2
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0	2
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0	2
ipfs/ipfs-cluster :latest :v1.1.6	a83266c524f1	golang.org/x/crypto@v0.51.0	0.52.0	2
ipfs/kubo :v0.33.2	1a30f5ed8579	golang.org/x/crypto@v0.32.0	0.52.0	2
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/crypto@v0.27.0	0.52.0	2
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/crypto@v0.27.0	0.52.0	2
istio/proxyv2 :1.18.0	757d28c24100	golang.org/x/crypto@v0.7.0	0.52.0	2
istio/proxyv2 :1.10.3	a78b7a165744	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0	2
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63	0.52.0	2