CVE-2026-46597

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.005; 40th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,434; of 17,792 indexed, latest versions
Container images: 2,783; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

Carried by container images the latest versions of 2,434 of 17,792 indexed charts deploy, on 2,783 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more	0.52.0	2,783

OSV records: GHSA-q4h4-gmj2-qvw2
Also known as: GO-2026-5013

Charts affected

2,434 by stars

Chart

Latest

Affected images

Radar Score

irods-csi-drivercyverse

0.12.0

1 of 4 See more

irods-csi-driver cyverse 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.52.0

Open the chart page →

5,295

domain-exporterd0main-exp0rter

0.1.0

1 of 1 See more

domain-exporter d0main-exp0rter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	golang.org/x/crypto@v0.0.0-20211215165025-cf75a172585e	0.52.0

Open the chart page →

1,832

jupyterhubd4n

3.3.7

2 of 7 See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
aristidetm/basic-notebook :3.6.5	469dbc951224	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	golang.org/x/crypto@v0.21.0	0.52.0

Open the chart page →

16,732

miniod4n

5.2.1

2 of 2 See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-04-29T09-56-05Z	c574fac67f60	golang.org/x/crypto@v0.22.0	0.52.0
quay.io/minio/minio :RELEASE.2024-06-04T19-20-08Z	c6b68f158628	golang.org/x/crypto@v0.23.0	0.52.0

Open the chart page →

2,659

cloudflareddamoun

3.3.0

1 of 1 See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2024.5.0	5d5f70a59d5e	golang.org/x/crypto@v0.23.0	0.52.0

Open the chart page →

1,313

gickupdamoun

1.11.0

1 of 1 See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
buddyspencer/gickup :0.10.30	9e7dbf923c12	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

1,028

home-assistantdamoun

1.1.0

1 of 1 See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.52.0

Open the chart page →

6,190

nvidia-gpu-exporterdanchev

1.0.3

1 of 1 See more

nvidia-gpu-exporter danchev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/utkuozdemir/nvidia_gpu_exporter :1.5.0	d75967a4dd72	golang.org/x/crypto@v0.51.0	0.52.0

Open the chart page →

1,238

grafana-agentdandydev-charts

0.19.2

1 of 1 See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
grafana/agent :v0.20.0	825c09373d27	golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63	0.52.0

Open the chart page →

3,247

dapr-agentsdapr-agents-dev

0.1.5

14 of 31 See more

dapr-agents dapr-agents-dev 0.1.5

14 of the 31 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/crypto@v0.45.0	0.52.0
grafana/loki :3.6.5	847c287ada0e	golang.org/x/crypto@v0.45.0	0.52.0
grafana/loki-canary :3.6.5	fbb984bab741	golang.org/x/crypto@v0.45.0	0.52.0
grafana/tempo :2.9.0	65a578975943	golang.org/x/crypto@v0.41.0	0.52.0
otel/opentelemetry-collector-contrib :0.145.0	a7343f018690	golang.org/x/crypto@v0.47.0	0.52.0
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/crypto@v0.42.0	0.52.0
ghcr.io/dapr/injector :1.17.0-rc.3	7a2fd888ed5f	golang.org/x/crypto@v0.47.0	0.52.0
ghcr.io/dapr/operator :1.17.0-rc.3	d5cc61cbe735	golang.org/x/crypto@v0.47.0	0.52.0
ghcr.io/dapr/placement :1.17.0-rc.3	a237b43cd5c6	golang.org/x/crypto@v0.47.0	0.52.0
ghcr.io/dapr/scheduler :1.17.0-rc.3	6c62e01e736b	golang.org/x/crypto@v0.47.0	0.52.0
ghcr.io/dapr/sentry :1.17.0-rc.3	bf79b03591e0	golang.org/x/crypto@v0.47.0	0.52.0
ghcr.io/kagent-dev/kagent/tools :0.0.13	c8882543f693	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.52.0

Open the chart page →

22,370

dask-gatewaydask

2026.3.0

1 of 2 See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
library/traefik :3.3.5	104204dadedf	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

2,002

cloudwatch-agent-prometheusdasmeta

0.2.2

1 of 1 See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,985

mongodb-bi-connectordasmeta

1.0.3

1 of 1 See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
dasmeta/mongodb-bi-connector :1.0.3	fa657960dfec	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.52.0

Open the chart page →

5,849

nfs-provisionerdasmeta

1.0.3

1 of 1 See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0

Open the chart page →

2,806

spqr-routerdasmeta

0.1.1

1 of 1 See more

spqr-router dasmeta 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
pgsharding/spqr-router :nightly-2.8.3-1839-f66048d8	4734940216d3	golang.org/x/crypto@v0.45.0	0.52.0

Open the chart page →

687

adot-exporter-for-eks-on-ec2dasmeta-adot

0.15.5

1 of 1 See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
amazon/aws-otel-collector :v0.27.0	d8ab0eef5074	golang.org/x/crypto@v0.1.0	0.52.0

Open the chart page →

1,933

datadog-operatordatadog-test

0.1.2

1 of 1 See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
datadog/operator :0.3.1	17f08a860090	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

3,979

agent-helmdatasaker

0.1.8

4 of 6 See more

agent-helm datasaker 0.1.8

4 of the 6 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
datasaker/dsk-container-agent :latest	08b52999f67b	golang.org/x/crypto@v0.14.0	0.52.0
datasaker/dsk-kube-state-agent :latest	d6d2eb48589d	golang.org/x/crypto@v0.14.0	0.52.0
datasaker/dsk-node-agent :latest	1b95913b6729	golang.org/x/crypto@v0.14.0	0.52.0
datasaker/dsk-process-agent :latest	2f38720a637d	golang.org/x/crypto@v0.13.0	0.52.0

Open the chart page →

7,606

ambassador-operatordatawire

0.3.0

1 of 1 See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
datawire/ambassador-operator :v1.3.0	f95ae710d75c	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.52.0

Open the chart page →

7,495

eg-edge-stackdatawire

0.0.1

2 of 7 See more

eg-edge-stack datawire 0.0.1

2 of the 7 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ambassador/aes-authsvc :v4.0.0-preview.1	2a4598b03a6a	golang.org/x/crypto@v0.10.0	0.52.0
ambassador/aes-wafsvc :v4.0.0-preview.1	5fc571509b8c	golang.org/x/crypto@v0.10.0	0.52.0

Open the chart page →

15,882

dbgatedbgate

0.1.1

1 of 1 See more

dbgate dbgate 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
nathanfirmo/dbgate :latest	6b0487e6e987	golang.org/x/crypto@v0.32.0	0.52.0

Open the chart page →

630

defactopsdefactops

1.0.9

1 of 2 See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
defactops/defactops-ui :1.0.16	825cdf9ba706	golang.org/x/crypto@v0.23.0	0.52.0

Open the chart page →

4,547

symfony-appdefault-gh

0.6.5

1 of 3 See more

symfony-app default-gh 0.6.5

1 of the 3 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
alpine/git :2.36.3	66b210a97bc0	golang.org/x/crypto@v0.0.0-20221005025214-4161e89ecf1b	0.52.0

Open the chart page →

5,123

csi-driver-smbdeimosfr-charts

1.20.3

1 of 5 See more

csi-driver-smb deimosfr-charts 1.20.3

1 of the 5 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

2,985

garage-webuideimosfr-charts

1.1.0

1 of 1 See more

garage-webui deimosfr-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
khairul169/garage-webui :1.1.0	17c793551873	golang.org/x/crypto@v0.35.0	0.52.0

Open the chart page →

567

cortex-gatewaydeliveryhero

0.1.9

1 of 1 See more

cortex-gateway deliveryhero 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.52.0

Open the chart page →

2,241

k8s-cloudwatch-adapterdeliveryhero

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,475

prometheus-dellhw-exporterdellhw-exporter

1.3.0

1 of 1 See more

prometheus-dellhw-exporter dellhw-exporter 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/galexrt/dellhw_exporter :v2.0.0	b3a5806d73b5	golang.org/x/crypto@v0.46.0	0.52.0

Open the chart page →

1,876

kubeteach-coredergeberl

0.2.3

1 of 1 See more

kubeteach-core dergeberl 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

1,505

kubeteach-exerciseset1dergeberl

0.2.3

1 of 2 See more

kubeteach-exerciseset1 dergeberl 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

1,505

clamav-apidevhat

1.0.1

1 of 1 See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	golang.org/x/crypto@v0.23.0	0.52.0

Open the chart page →

2,099

kyvernodevopstales

2.5.1

2 of 2 See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.52.0

Open the chart page →

4,736

octolxddevplayer0

0.1.1

1 of 1 See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

2,525

ai-agentdevtron

0.0.1

1 of 1 See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.52.0

Open the chart page →

9,703

argocddevtron

1.8.1

2 of 3 See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0

Open the chart page →

10,484

argocd-certificate-refreshdevtron

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

13,033

argo-workflowdevtron

0.1.6

1 of 1 See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.52.0

Open the chart page →

1,587

devtron-enterprisedevtron

48.0.0

18 of 28 See more

devtron-enterprise devtron 48.0.0

18 of the 28 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/cost-sync :172ef62b-1159-39429	edf210d763ca	golang.org/x/crypto@v0.38.0	0.52.0
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.52.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.52.0
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.52.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.52.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	golang.org/x/crypto@v0.46.0	0.52.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.52.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.52.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.52.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0

Open the chart page →

68,765

devtron-in-clustercddevtron

0.10.2

2 of 2 See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.52.0

Open the chart page →

5,055

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.52.0

Open the chart page →

11,981

jcmhproxy-ingressdevtron

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.52.0

Open the chart page →

1,379

kube-prometheus-stackdevtron

19.3.0

2 of 6 See more

kube-prometheus-stack devtron 19.3.0

2 of the 6 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0

Open the chart page →

8,659

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.52.0

Open the chart page →

2,442

zincdevtron

0.1.2

1 of 1 See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.52.0

Open the chart page →

1,514

ai-agentdevtron-labs

0.0.1

1 of 1 See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.52.0

Open the chart page →

9,703

argocddevtron-labs

1.8.1

2 of 3 See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0

Open the chart page →

10,484

argocd-certificate-refreshdevtron-labs

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

13,033

argo-workflowdevtron-labs

0.1.6

1 of 1 See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.52.0

Open the chart page →

1,587

calicodevtron-labs

0.1.1

3 of 4 See more

calico devtron-labs 0.1.1

3 of the 4 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Open the chart page →

10,094

clairdevtron-labs

0.1.14

1 of 2 See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0

Open the chart page →

6,237

Container images carrying it

2,783 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0	1
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.52.0	1
su541/cert-manager-desec-webhook :latest	371ee33f83c1	golang.org/x/crypto@v0.5.0	0.52.0	1
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.52.0	1
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	golang.org/x/crypto@v0.11.0	0.52.0	1
supabase/gotrue :v2.189.0	385184459f57	golang.org/x/crypto@v0.50.0	0.52.0	1
supabase/gotrue :v2.91.0	7174d551d720	golang.org/x/crypto@v0.9.0	0.52.0	1
supabase/gotrue :v2.163.0	ba4ddc594b0b	golang.org/x/crypto@v0.26.0	0.52.0	1
superorbital/cludod :0.0.2-alpha	d59732f61d6e	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.52.0	1
superque/smokeping-prober :v0.11.0	28ca636d1dee	golang.org/x/crypto@v0.48.0	0.52.0	1
surajwarbhe/grafana :v1	85248611e9f1	golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71	0.52.0	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	golang.org/x/crypto@v0.4.0	0.52.0	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	golang.org/x/crypto@v0.7.0	0.52.0	1
svtechnmaa/svtech_syncthing :v1.0.4	1a75d88031fe	golang.org/x/crypto@v0.16.0	0.52.0	1
syepes/network_exporter :1.8.0	00af1691570e	golang.org/x/crypto@v0.37.0	0.52.0	1
syncthing/syncthing :2.1.0	7c60eb0ec887	golang.org/x/crypto@v0.51.0	0.52.0	1
syncthing/syncthing :1.18.2	966433161272	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0	1
tailscale/k8s-operator :v1.70.0	8edd06cf5bac	golang.org/x/crypto@v0.24.0	0.52.0	1
tailscale/tailscale :v1.96.5	dbeff02d2337	golang.org/x/crypto@v0.46.0	0.52.0	1
tailwarden/komiser :3.1.10	3f68c8ae7993	golang.org/x/crypto@v0.17.0	0.52.0	1
tdengine/tdengine :3.0.2.2	4140a4021ddb	golang.org/x/crypto@v0.4.0	0.52.0	1
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/crypto@v0.14.0	0.52.0	1
temporalio/admin-tools :1.26.2	37e2e33dbd7b	golang.org/x/crypto@v0.29.0	0.52.0	1
temporalio/admin-tools :1.22.0	836af062af30	golang.org/x/crypto@v0.10.0	0.52.0	1
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	golang.org/x/crypto@v0.38.0	0.52.0	1
temporalio/admin-tools :1.25.0-tctl-1.18.1-cli-1.0.0	cda4901bab53	golang.org/x/crypto@v0.25.0	0.52.0	1
temporalio/admin-tools :1.28	cfde8170c92f	golang.org/x/crypto@v0.46.0	0.52.0	1
temporalio/auto-setup :1.29.1	5b3502a3b685	golang.org/x/crypto@v0.37.0	0.52.0	1
temporalio/auto-setup :1.27.2	b44cbfeb43db	golang.org/x/crypto@v0.36.0	0.52.0	1
temporalio/server :1.26.2	1e2626efcbc1	golang.org/x/crypto@v0.14.0	0.52.0	1
temporalio/server :1.25.0	8a5798191dea	golang.org/x/crypto@v0.25.0	0.52.0	1
temporalio/server :1.29.1	c1e3326b2ce1	golang.org/x/crypto@v0.38.0	0.52.0	1
temporalio/server :1.22.0	ddeebf8bad8f	golang.org/x/crypto@v0.12.0	0.52.0	1
temporalio/server :1.15.1	e26758f5a1bf	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
temporalio/ui :2.44.0	0b36e00aad30	golang.org/x/crypto@v0.38.0	0.52.0	1
temporalio/ui :2.30.2	5c2a3645d09c	golang.org/x/crypto@v0.14.0	0.52.0	1
temporalio/ui :2.33.0	5c586a3c8ec5	golang.org/x/crypto@v0.31.0	0.52.0	1
temporalio/ui :2.39.0	b768f87f18b5	golang.org/x/crypto@v0.32.0	0.52.0	1
temporalio/ui :2.52.0	fc47cd8202c9	golang.org/x/crypto@v0.51.0	0.52.0	1
testinprod/op-erigon :latest	0a125bd77a2d	golang.org/x/crypto@v0.31.0	0.52.0	1
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.52.0	1
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.52.0	1
thecampagnards/trafficlight-api :main	7dca9d973837	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.52.0	1
thelande/openmeteo_exporter :v1.0.7	7e9072ace15f	golang.org/x/crypto@v0.39.0	0.52.0	1
thesisrobot/lnd :v0.16.4-beta-c	287129953689	golang.org/x/crypto@v0.7.0	0.52.0	1
thesisrobot/lnd :v0.14.1-beta	d94c8dbf6dac	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.52.0	1
thetorproject/snowflake-proxy :v2.11.0	1ddc5069d354	golang.org/x/crypto@v0.33.0	0.52.0	1
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/crypto@v0.1.0	0.52.0	1
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0	1
thomseddon/traefik-forward-auth :latest	b364aa6a4117	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0	1