CVE-2026-46597

High

Advisory

Published 22 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.005; 40th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,422; of 17,781 indexed, latest versions
Container images: 2,761; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

Carried by container images the latest versions of 2,422 of 17,781 indexed charts deploy, on 2,761 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+153 more	0.52.0	2,761

OSV records: GHSA-q4h4-gmj2-qvw2
Also known as: GO-2026-5013

Charts affected

2,422 by stars

Chart

Latest

Affected images

Radar Score

cluster-setupcluster-setup

1.5.0

6 of 8 See more

cluster-setup cluster-setup 1.5.0

6 of the 8 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.43.1	0881d3c9359b	golang.org/x/crypto@v0.37.0	0.52.0
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	golang.org/x/crypto@v0.36.0	0.52.0
quay.io/jetstack/cert-manager-cainjector :v1.17.2	ec56edb1161d	golang.org/x/crypto@v0.36.0	0.52.0
quay.io/jetstack/cert-manager-controller :v1.17.2	2c314feeb5e8	golang.org/x/crypto@v0.36.0	0.52.0
quay.io/jetstack/cert-manager-startupapicheck :v1.17.2	e18989b4f912	golang.org/x/crypto@v0.36.0	0.52.0
quay.io/jetstack/cert-manager-webhook :v1.17.2	37b16a9dff00	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

10,037

istio-allcode4devs

1.2.0

4 of 6 See more

istio-all code4devs 1.2.0

4 of the 6 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/crypto@v0.27.0	0.52.0
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/crypto@v0.27.0	0.52.0
quay.io/kiali/kiali :v1.89.3	0dcdb1c1e747	golang.org/x/crypto@v0.22.0	0.52.0
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/crypto@v0.25.0	0.52.0

Open the chart page →

4,784

istio-control-planecode4devs

1.0.0

2 of 3 See more

istio-control-plane code4devs 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/crypto@v0.27.0	0.52.0
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/crypto@v0.27.0	0.52.0

Open the chart page →

2,360

maintenancecodewithemad

0.1.6

1 of 1 See more

maintenance codewithemad 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
library/caddy :2.9-alpine	b4e3952384eb	golang.org/x/crypto@v0.31.0	0.52.0

Open the chart page →

1,469

contactcataloguscontact-catalogus

1.0.0

1 of 3 See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/contactcatalogus-php :latest	eeb625bd660c	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,303

cortex-tenantcortex-tenant

0.8.1

1 of 1 See more

cortex-tenant cortex-tenant 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/blind-oracle/cortex-tenant :v2.0.0	9f8896ffc15b	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

779

cosmo-controller-managercosmo

0.9.0

1 of 2 See more

cosmo-controller-manager cosmo 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-workspace/cosmo-controller-manager :v0.9.0	8c7fa5552028	golang.org/x/crypto@v0.9.0	0.52.0

Open the chart page →

1,927

cosmo-dashboardcosmo

0.9.1

1 of 1 See more

cosmo-dashboard cosmo 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-workspace/cosmo-dashboard :v0.9.1	6a1c4a81a924	golang.org/x/crypto@v0.9.0	0.52.0

Open the chart page →

1,939

sops-operatorcraftypath

0.8.0

1 of 1 See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
craftypath/sops-operator :v0.8.0	402a0024c732	golang.org/x/crypto@v0.0.0-20210506145944-38f3c27a63bf	0.52.0

Open the chart page →

6,473

duplicaticronce

0.1.0

1 of 1 See more

duplicati cronce 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
duplicati/duplicati :2.0.5.111_canary_2020-09-26	8660f0eda7c9	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

3,026

cryptlex-enterprisecryptlex

3.21.25

1 of 8 See more

cryptlex-enterprise cryptlex 3.21.25

1 of the 8 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2025-03-12T18-04-18Z	46b3009bf704	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

2,345

revadcs3org

1.6.1

1 of 1 See more

revad cs3org 1.6.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/crypto@v0.5.0	0.52.0

Open the chart page →

1,704

cubefscubefs

3.2.0

2 of 10 See more

cubefs cubefs 3.2.0

2 of the 10 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0

Open the chart page →

15,891

cview-issuercview-issuer

0.0.42

1 of 1 See more

cview-issuer cview-issuer 0.0.42

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
devsecurely/cview-issuer :0.0.42	eecd4314e933	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

412

data-fairdata354-helm

1.1.2

1 of 12 See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	golang.org/x/crypto@v0.25.0	0.52.0

Open the chart page →

38,346

extendeddaemonsetdatadog

0.3.3

1 of 1 See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
datadog/extendeddaemonset :v0.8.0	513a4377aed5	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.52.0

Open the chart page →

4,759

datadogdatadog-test

2.4.23

1 of 2 See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
datadog/agent :7.22.0	8f20e56b5311	golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d	0.52.0

Open the chart page →

4,568

dbrepodbrepo

1.13.3

5 of 25 See more

dbrepo dbrepo 1.13.3

5 of the 25 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	golang.org/x/crypto@v0.27.0	0.52.0
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	golang.org/x/crypto@v0.14.0	0.52.0
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	golang.org/x/crypto@v0.14.0	0.52.0
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	golang.org/x/crypto@v0.25.0	0.52.0
bitnamilegacy/seaweedfs :3.87.0-debian-12-r1	0cb31d0fc356	golang.org/x/crypto@v0.37.0	0.52.0

Open the chart page →

52,635

dregsydeliveryhero

0.1.5

1 of 1 See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.52.0

Open the chart page →

2,969

labelsmanager-controllerdeliveryhero

1.0.4

1 of 1 See more

labelsmanager-controller deliveryhero 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.52.0

Open the chart page →

2,305

weblatedeliveryhero

0.3.2

1 of 3 See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.52.0

Open the chart page →

7,984

developer-operatordeveloper-operator

2.1.2

1 of 1 See more

developer-operator developer-operator 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	golang.org/x/crypto@v0.39.0	0.52.0

Open the chart page →

1,828

kubedashdevopstales

4.0.0

3 of 8 See more

kubedash devopstales 4.0.0

3 of the 8 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.82.0-alpine	da9e89ee4e75	golang.org/x/crypto@v0.48.0	0.52.0
sosedoff/pgweb :latest	a5256d416e2e	golang.org/x/crypto@v0.45.0	0.52.0
quay.io/prometheuscommunity/postgres-exporter :v0.19.1	e96064f87622	golang.org/x/crypto@v0.46.0	0.52.0

Open the chart page →

9,205

permission-managerdevopstales

1.8.0

1 of 1 See more

permission-manager devopstales 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.52.0

Open the chart page →

2,266

trivy-operatordevopstales

2.5.0

1 of 1 See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
devopstales/trivy-operator :2.5	75136aa7a26e	golang.org/x/crypto@v0.3.0	0.52.0

Open the chart page →

5,598

calicodevtron

0.1.1

3 of 4 See more

calico devtron 0.1.1

3 of the 4 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Open the chart page →

10,071

clairdevtron

0.1.14

1 of 2 See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0

Open the chart page →

6,237

dex-serverdex-server

1.19.1

2 of 3 See more

dex-server dex-server 1.19.1

2 of the 3 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/crypto@v0.18.0	0.52.0
public.ecr.aws/cloudnatix/llmariner/database-creator :1.19.1	62375abc3c56	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

2,238

digispoof-interfacedigispoof-interface

1.0.0

1 of 3 See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/digispoof-interface-php :latest	03aba499950f	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.52.0

Open the chart page →

7,779

alertmanager-ntfydjjudas21

0.1.2

1 of 1 See more

alertmanager-ntfy djjudas21 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/alexbakker/alertmanager-ntfy :1.0.1	2f4db8064595	golang.org/x/crypto@v0.39.0	0.52.0

Open the chart page →

641

dnation-pingdnationcloud

0.1.9

3 of 5 See more

dnation-ping dnationcloud 0.1.9

3 of the 5 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.52.0
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

10,454

docker-in-dockerdocker-in-docker

0.0.3

1 of 2 See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
library/docker :24.0.2-dind	1d148deae16a	golang.org/x/crypto@v0.7.0	0.52.0

Open the chart page →

2,576

docker-registrydocker-repository

0.1.0

1 of 1 See more

docker-registry docker-repository 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
library/registry :latest	1be55279f18a	golang.org/x/crypto@v0.49.0	0.52.0

Open the chart page →

633

dockyarddockyard

0.4.0

1 of 1 See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/kgma74/dockyard :0.4.0	b40439329191	golang.org/x/crypto@v0.27.0	0.52.0

Open the chart page →

1,542

thermitedollarshaveclub

0.1.17

1 of 1 See more

thermite dollarshaveclub 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0

Open the chart page →

2,732

archerydouban

0.4.3

1 of 6 See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

5,853

dragonfly-stackdragonfly

0.1.2

3 of 7 See more

dragonfly-stack dragonfly 0.1.2

3 of the 7 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/crypto@v0.17.0	0.52.0
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/crypto@v0.17.0	0.52.0
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/crypto@v0.24.0	0.52.0

Open the chart page →

18,376

gethdysnix

1.1.2

1 of 1 See more

geth dysnix 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.14.8	886ec69b35b0	golang.org/x/crypto@v0.22.0	0.52.0

Open the chart page →

1,624

jenkinsedu

2.7.1

1 of 2 See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/crypto@v0.36.0	0.52.0

Open the chart page →

4,423

glideeinstack

0.0.2

1 of 1 See more

glide einstack 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/crypto@v0.16.0	0.52.0

Open the chart page →

1,335

elchi-stackelchi

1.13.0

3 of 10 See more

elchi-stack elchi 1.13.0

3 of the 10 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
grafana/grafana :12.2.0	74144189b384	golang.org/x/crypto@v0.41.0	0.52.0
library/mongo :6.0.12	646902910d6a	golang.org/x/crypto@v0.14.0	0.52.0
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/crypto@v0.15.0	0.52.0

Open the chart page →

15,383

navidromeemmas-charts

0.0.6

1 of 1 See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.50.0	2cf4442b0099	golang.org/x/crypto@v0.15.0	0.52.0

Open the chart page →

2,129

enbuildenbuild

0.0.50

3 of 6 See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend :1.0.31	c7afac3446d6	golang.org/x/crypto@v0.36.0	0.52.0
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	golang.org/x/crypto@v0.48.0	0.52.0
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5	0.52.0

Open the chart page →

31,510

nexus-operatorepmdedp-dev

2.11.0-MDTU-DDM-SNAPSHOT.1

1 of 1 See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0

Open the chart page →

2,266

beaconchain-explorerethereum-helm-charts

0.1.6

1 of 2 See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	golang.org/x/crypto@v0.32.0	0.52.0

Open the chart page →

3,048

genesis-generatorethereum-helm-charts

0.2.3

1 of 2 See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
skylenet/ethereum-genesis-generator :latest	210353ce7c89	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.52.0

Open the chart page →

3,135

ipfs-clusterethereum-helm-charts

0.1.14

2 of 3 See more

ipfs-cluster ethereum-helm-charts 0.1.14

2 of the 3 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
ipfs/ipfs-cluster :latest	a83266c524f1	golang.org/x/crypto@v0.51.0	0.52.0
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.52.0

Open the chart page →

4,614

evccevcc

1.0.47

1 of 1 See more

evcc evcc 1.0.47

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
evcc/evcc :0.300.8	ddf2a25afce5	golang.org/x/crypto@v0.47.0	0.52.0

Open the chart page →

1,181

github-actions-runner-operatorevryfs-oss

2.8.1

1 of 1 See more

github-actions-runner-operator evryfs-oss 2.8.1

1 of the 1 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
quay.io/evryfs/github-actions-runner-operator :v0.11.1	6b084e0bd082	golang.org/x/crypto@v0.11.0	0.52.0

Open the chart page →

1,236

vidcheckfactly

0.5.2

1 of 2 See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-46597.

Container image	Digest	Package	Fixed in
factly/vidcheck-server :0.12.0	87064eb0463c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.52.0

Open the chart page →

3,617

Container images carrying it

2,761 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
minio/minio :latest :RELEASE.2025-09-07T16-13-09Z	14cea493d9a3	golang.org/x/crypto@v0.40.0	0.52.0	16
jenkins/jenkins :2.568.3-jdk21 :2.568.3-lts-jdk21 :lts	c1e4c349365f	golang.org/x/crypto@v0.36.0	0.52.0	13
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.52.0	12
jwilder/dockerize :latest	f94fb59fb4f6	golang.org/x/crypto@v0.45.0	0.52.0	10
library/mongo :5.0.6-focal	8e70544b6c76	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.52.0	10
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.52.0	9
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0	8
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.52.0	8
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.52.0	8
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.52.0	8
minio/mc :latest :RELEASE.2025-08-13T08-35-41Z	a7fe349ef4bd	golang.org/x/crypto@v0.40.0	0.52.0	7
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.52.0	7
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.52.0	7
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	golang.org/x/crypto@v0.38.0	0.52.0	7
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.52.0	7
quay.io/thanos/thanos :v0.37.2	4ec6df40fdb9	golang.org/x/crypto@v0.28.0	0.52.0	7
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.52.0	7
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.52.0	6
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71	0.52.0	6
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.52.0	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.52.0	6
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.52.0	6
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.52.0	6
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.52.0	6
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0	6
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.52.0	6
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/crypto@v0.49.0	0.52.0	6
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.52.0	6
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.52.0	6
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/crypto@v0.36.0	0.52.0	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.52.0	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	golang.org/x/crypto@v0.24.0	0.52.0	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.52.0	6
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	golang.org/x/crypto@v0.51.0	0.52.0	6
keelhq/keel :latest	73714afb4443	golang.org/x/crypto@v0.31.0	0.52.0	5
library/mongo :4.4	4be76f674fc4	golang.org/x/crypto@v0.25.0	0.52.0	5
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/crypto@v0.13.0	0.52.0	5
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56	0.52.0	5
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/crypto@v0.42.0	0.52.0	5
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.52.0	5
sigma2as/goidc-proxy :next	656ac798963a	golang.org/x/crypto@v0.48.0	0.52.0	5
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	golang.org/x/crypto@v0.37.0	0.52.0	5
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.52.0	5
quay.io/prometheus/blackbox-exporter :latest :v0.28.0	e753ff9f3fc4	golang.org/x/crypto@v0.45.0	0.52.0	5
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.52.0	5
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.52.0	5
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.52.0	5
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/crypto@v0.47.0	0.52.0	5
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.52.0	5
cloudflare/cloudflared :2026.3.0	6b599ca3e974	golang.org/x/crypto@v0.38.0	0.52.0	4