StackRadar

CVE-2026-46597

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,502
of 17,813 indexed, latest versions
Container images
2,828
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

Carried by container images the latest versions of 2,502 of 17,813 indexed charts deploy, on 2,828 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+154 more0.52.02,828
OSV records
GHSA-q4h4-gmj2-qvw2
Also known as
GO-2026-5013

Charts affected

2,502 by stars
ChartLatestAffected imagesRadar Score
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.52.0

Open the chart page →

3,472
avalanchesnowplow-devopsVerified publisher0.12.11 of 6See more

avalanche snowplow-devops 0.12.1

1 of the 6 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
golang.org/x/crypto@v0.37.0
0.52.0

Open the chart page →

1,332
snspingsnsping1.2.91 of 1See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
udhos/snsping:1.2.96ae70677b6a3
golang.org/x/crypto@v0.31.0
0.52.0

Open the chart page →

1,343
tracing-stacksnubisks0.1.04 of 8See more

tracing-stack snubisks 0.1.0

4 of the 8 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
golang.org/x/crypto@v0.49.0
0.52.0
grafana/loki:3.6.5847c287ada0e
golang.org/x/crypto@v0.45.0
0.52.0
grafana/tempo:2.9.065a578975943
golang.org/x/crypto@v0.41.0
0.52.0
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

5,650
cost-analyzersoftonic2.5.53 of 6See more

cost-analyzer softonic 2.5.5

3 of the 6 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
golang.org/x/crypto@v0.32.0
0.52.0
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
golang.org/x/crypto@v0.31.0
0.52.0
quay.io/prometheus/prometheus:v3.2.16927e0919a14
golang.org/x/crypto@v0.32.0
0.52.0

Open the chart page →

8,189
harborsoftonic1.13.04 of 8See more

harbor softonic 1.13.0

4 of the 8 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.9.06412d679fdc3
golang.org/x/crypto@v0.7.0
0.52.0
goharbor/harbor-jobservice:v2.9.039435daedd0c
golang.org/x/crypto@v0.7.0
0.52.0
goharbor/harbor-registryctl:v2.9.0cce272836449
golang.org/x/crypto@v0.7.0
0.52.0
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
golang.org/x/crypto@v0.11.0
0.52.0

Open the chart page →

7,710
kedasoftonic2.17.03 of 3See more

keda softonic 2.17.0

3 of the 3 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.0112fc427d933
golang.org/x/crypto@v0.37.0
0.52.0
ghcr.io/kedacore/keda-admission-webhooks:2.17.0a87c42275757
golang.org/x/crypto@v0.37.0
0.52.0
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
golang.org/x/crypto@v0.37.0
0.52.0

Open the chart page →

2,836
kube-prometheus-stacksoftonic81.5.13 of 6See more

kube-prometheus-stack softonic 81.5.1

3 of the 6 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
golang.org/x/crypto@v0.45.0
0.52.0
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
golang.org/x/crypto@v0.42.0
0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/crypto@v0.46.0
0.52.0

Open the chart page →

5,022
pod-defaultersoftonic0.1.31 of 1See more

pod-defaulter softonic 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
softonic/pod-defaulter:0.1.072017aed5902
golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de
0.52.0

Open the chart page →

2,562
rate-limit-operatorsoftonic1.1.01 of 2See more

rate-limit-operator softonic 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
softonic/rate-limit-operator:0.1.1910f6de37763
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0

Open the chart page →

2,220
rclonesoftonic2.1.01 of 1See more

rclone softonic 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
golang.org/x/crypto@v0.25.0
0.52.0

Open the chart page →

1,680
sealed-secretssoftonic2.6.91 of 1See more

sealed-secrets softonic 2.6.9

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
bitnami/sealed-secrets-controller:v0.18.50516f987fae2
golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90
0.52.0

Open the chart page →

1,516
trivy-operatorsoftonic0.18.01 of 1See more

trivy-operator softonic 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
golang.org/x/crypto@v0.12.0
0.52.0

Open the chart page →

2,514
gloo-meshsolo-gloo-mesh1.1.21 of 1See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.52.0

Open the chart page →

3,267
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.52.0

Open the chart page →

101,945
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
golang.org/x/crypto@v0.31.0
0.52.0

Open the chart page →

3,313
spinnakerspinnakerVerified publisher2.2.132 of 4See more

spinnaker spinnaker 2.2.13

2 of the 4 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee
0.52.0
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
golang.org/x/crypto@v0.0.0-20191117063200-497ca9f6d64f
0.52.0

Open the chart page →

6,878
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
golang.org/x/crypto@v0.47.0
0.52.0

Open the chart page →

51,218
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0

Open the chart page →

66,239
airflowsqream-chartsVerified publisher1.17.01 of 4See more

airflow sqream-charts 1.17.0

1 of the 4 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
quay.io/prometheus/statsd-exporter:v0.27.29ed70604d941
golang.org/x/crypto@v0.26.0
0.52.0

Open the chart page →

1,832
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
golang.org/x/crypto@v0.21.0
0.52.0

Open the chart page →

2,426
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
golang.org/x/crypto@v0.3.0
0.52.0

Open the chart page →

69,984
ecr-cleanersstarcher0.1.1+d13a1ab1 of 1See more

ecr-cleaner sstarcher 0.1.1+d13a1ab

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
sstarcher/ecr-cleaner:0.1.12d43c390cb19
golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734
0.52.0

Open the chart page →

2,576
kube-ebs-taggersstarcher0.1.0+7abf4f71 of 1See more

kube-ebs-tagger sstarcher 0.1.0+7abf4f7

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
0.52.0

Open the chart page →

3,097
prestashopstack-prestahop22.0.01 of 4See more

prestashop stack-prestahop 22.0.0

1 of the 4 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.23.086e8449ff8ff
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.52.0

Open the chart page →

3,076
retail-store-sample-catalog-chartstacksimplifyVerified publisher2.0.01 of 1See more

retail-store-sample-catalog-chart stacksimplify 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-catalog:1.3.0b654b266fa32
golang.org/x/crypto@v0.39.0
0.52.0

Open the chart page →

773
stageset-controllerstageset-controllerOfficialVerified publisher2026.6.15+1543421 of 1See more

stageset-controller stageset-controller 2026.6.15+154342

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
ghcr.io/metio/stageset-controller:2026.6.14234b66bb3319
golang.org/x/crypto@v0.51.0
0.52.0

Open the chart page →

313
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.52.0

Open the chart page →

28,612
external-secretsstakaterVerified publisher0.3.12-40dbdfc1 of 1See more

external-secrets stakater 0.3.12-40dbdfc

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.52.0

Open the chart page →

2,089
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
golang.org/x/crypto@v0.36.0
0.52.0

Open the chart page →

2,549
konfiguratorstakaterVerified publisher0.1.391 of 1See more

konfigurator stakater 0.1.39

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
stakater/konfigurator:v0.1.393409565b1ef5
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

1,280
proxyinjectorstakaterVerified publisher0.0.231 of 1See more

proxyinjector stakater 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.52.0

Open the chart page →

2,854
tronadorstakaterVerified publisher0.0.11 of 1See more

tronador stakater 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
stakater/tronador:v0.0.137ce9acf2722
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0

Open the chart page →

2,174
vaultstakaterVerified publisher0.8.41 of 2See more

vault stakater 0.8.4

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.4dfc3500beb0e
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.52.0

Open the chart page →

5,873
whitelisterstakaterVerified publisher0.0.161 of 1See more

whitelister stakater 0.0.16

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
stakater/whitelister:v0.0.1639107924063e
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.52.0

Open the chart page →

2,565
workshop-operatorstakaterVerified publisher0.0.381 of 2See more

workshop-operator stakater 0.0.38

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
stakater/workshop-operator:v0.0.3897bf456cc97c
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0

Open the chart page →

6,680
stakefishstakefish0.1.06 of 8See more

stakefish stakefish 0.1.0

6 of the 8 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
golang.org/x/crypto@v0.22.0
0.52.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.73.2706cde441321
golang.org/x/crypto@v0.21.0
0.52.0
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
golang.org/x/crypto@v0.18.0
0.52.0
quay.io/prometheus/node-exporter:v1.8.08a57af80a4c7
golang.org/x/crypto@v0.21.0
0.52.0
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
golang.org/x/crypto@v0.21.0
0.52.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
golang.org/x/crypto@v0.21.0
0.52.0

Open the chart page →

20,474
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
golang.org/x/crypto@v0.31.0
0.52.0

Open the chart page →

3,002
ipfsstakewise2.2.01 of 2See more

ipfs stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
golang.org/x/crypto@v0.32.0
0.52.0

Open the chart page →

1,262
mev-booststakewise1.7.41 of 1See more

mev-boost stakewise 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
flashbots/mev-boost:1.8.07c486b5789da
golang.org/x/crypto@v0.23.0
0.52.0

Open the chart page →

1,261
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
ethereum/client-go:v1.10.15d99fbb9585c7
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.52.0

Open the chart page →

6,609
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
golang.org/x/crypto@v0.32.0
0.52.0

Open the chart page →

7,054
v3-backendstakewise3.6.01 of 5See more

v3-backend stakewise 3.6.0

1 of the 5 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
golang.org/x/crypto@v0.32.0
0.52.0

Open the chart page →

1,262
mediamtxstartechnicaVerified publisher0.1.11 of 1See more

mediamtx startechnica 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
bluenviron/mediamtx:1.17.19e39256d1ba3
golang.org/x/crypto@v0.49.0
0.52.0

Open the chart page →

576
argocd-operatorstatcan0.5.01 of 1See more

argocd-operator statcan 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-operator:v0.4.0cf8faa986789
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.52.0

Open the chart page →

1,986
cost-analyzerstatcan1.82.24 of 9See more

cost-analyzer statcan 1.82.2

4 of the 9 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
grafana/grafana:7.5.609bb407e26ab
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.52.0
prom/prometheus:v2.22.2f7ffebdd428b
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.52.0
gcr.io/kubecost1/cost-model:prod-1.82.2989a60847416
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.52.0
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.52.0

Open the chart page →

16,542
fluentd-operatorstatcan0.5.11 of 1See more

fluentd-operator statcan 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
vmware/kube-fluentd-operator:latestf028c138a5f4
golang.org/x/crypto@v0.17.0
0.52.0

Open the chart page →

1,960
ingress-istio-controllerstatcan1.4.01 of 1See more

ingress-istio-controller statcan 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
statcan/ingress-istio-controller:1.4.0d7d6bd180c46
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.52.0

Open the chart page →

1,584
minio-operatorstatcan4.1.01 of 2See more

minio-operator statcan 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
minio/operator:v4.1.02adc5be088f5
golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b
0.52.0

Open the chart page →

6,598
prometheus-operatorstatcan0.2.24 of 7See more

prometheus-operator statcan 0.2.2

4 of the 7 container images this version deploys carry CVE-2026-46597.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71
0.52.0
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/crypto@v0.0.0-20181203042331-505ab145d0a9
0.52.0
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/crypto@v0.0.0-20191002192127-34f69633bfdc
0.52.0
quay.io/prometheus/node-exporter:v1.0.08a3a33cad0bd
golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37
0.52.0

Open the chart page →

12,256

Container images carrying it

2,828 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.52.0
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
golang.org/x/crypto@v0.22.0
0.52.0
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
0.52.0
1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
golang.org/x/crypto@v0.22.0
0.52.0
1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
0.52.0
1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
0.52.0
1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
golang.org/x/crypto@v0.22.0
0.52.0
1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
0.52.0
1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
golang.org/x/crypto@v0.22.0
0.52.0
1
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
0.52.0
1
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
golang.org/x/crypto@v0.1.0
0.52.0
1
gcr.io/projectsigstore/cosigned784518ff3ee7
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.52.0
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.52.0
1
ghcr.io/0xerr0r/blocky:v0.29.0a6d99f323d30
golang.org/x/crypto@v0.48.0
0.52.0
1
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b
0.52.0
1
ghcr.io/actions/gha-runner-scale-set-controller:0.14.21b4c7f62e971
golang.org/x/crypto@v0.49.0
0.52.0
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
golang.org/x/crypto@v0.37.0
0.52.0
1
ghcr.io/alexbakker/alertmanager-ntfy:1.0.12f4db8064595
golang.org/x/crypto@v0.39.0
0.52.0
1
ghcr.io/alpineworks/katalog-backend:v1.0.77e7a26393cd1
golang.org/x/crypto@v0.27.0
0.52.0
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
golang.org/x/crypto@v0.27.0
0.52.0
1
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy:v1.0.06e9ced773732
golang.org/x/crypto@v0.38.0
0.52.0
1
ghcr.io/amaanx86/oci-prometheus-sd-proxy:latest297a8379a328
golang.org/x/crypto@v0.45.0
0.52.0
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
golang.org/x/crypto@v0.1.0
0.52.0
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
golang.org/x/crypto@v0.47.0
0.52.0
1
ghcr.io/andibraeu/cert-manager-webhook-inwx:v0.9.0f015e745983e
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/angelnu/dnsmadeeasy-webhook:v1.9.0a5ca158b1f02
golang.org/x/crypto@v0.35.0
0.52.0
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
golang.org/x/crypto@v0.15.0
0.52.0
1
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
golang.org/x/crypto@v0.35.0
0.52.0
1
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/auditor:v0.0.1c62c89ee706d
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.52.0
1
ghcr.io/appscode/azure-credential-manager:v0.1.0f5c797f7fbe7
golang.org/x/crypto@v0.47.0
0.52.0
1
ghcr.io/appscode/b3:v2026.9.1178a9fb785ec5
golang.org/x/crypto@v0.38.0
0.52.0
1
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
golang.org/x/crypto@v0.15.0
0.52.0
1
ghcr.io/appscode/capi-ops-manager:v0.0.57465f35b684c
golang.org/x/crypto@v0.31.0
0.52.0
1
ghcr.io/appscode/cattleset:v0.0.145554a03e448
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/cert-manager-webhook-ace:v0.0.2dc6b5fdcec06
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/cloudflare-dns-proxy:v0.0.5dfbef0285e14
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/cluster-connector:v0.0.140efd9d9ef6ca
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/csi-driver-cacerts:v0.6.0ab213b156017
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
golang.org/x/crypto@v0.21.0
0.52.0
1
ghcr.io/appscode/falco-ui-server:v0.0.66ec488d89b56
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/fileserver:v0.0.2b1857871e06c
golang.org/x/crypto@v0.24.0
0.52.0
1
ghcr.io/appscode/gcp-credential-manager:v0.1.0b58345fe8209
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
golang.org/x/crypto@v0.31.0
0.52.0
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
golang.org/x/crypto@v0.45.0
0.52.0
1
ghcr.io/appscode/grafana:v2025.2.367d18880448c
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.52.0
1
ghcr.io/appscode/inbox-agent:v0.0.66b99ee9feece
golang.org/x/crypto@v0.46.0
0.52.0
1
ghcr.io/appscode/kube-rbac-proxy:v0.18.27de54b6dedc8
golang.org/x/crypto@v0.29.0
0.52.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.