StackRadar

CVE-2026-56852

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,303
of 17,790 indexed, latest versions
Container images
4,072
deployed by those charts
Fix available
1 of 1
affected package

Infinite loop on invalid input in golang.org/x/text

Carried by container images the latest versions of 3,303 of 17,790 indexed charts deploy, on 4,072 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+44 more0.39.04,072
OSV records
GO-2026-5970

Charts affected

3,303 by stars
ChartLatestAffected imagesRadar Score
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

1,993
netbird-reverse-proxychristianhuthVerified publisher0.1.01 of 1See more

netbird-reverse-proxy christianhuth 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
netbirdio/reverse-proxy:0.72.43104d5ca3a76
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

935
promlenschristianhuthVerified publisher1.6.01 of 1See more

promlens christianhuth 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
prom/promlens:v0.4.04a377d1a0eaa
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

135
sloopchristianhuthVerified publisher0.4.01 of 1See more

sloop christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/salesforce/sloop:sha-2ce8bbe119e24f24b1d
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

2,290
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

7,034
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
golang.org/x/text@v0.19.0
0.39.0

Open the chart page →

4,865
ethereumchronicleVerified publisher0.3.11 of 1See more

ethereum chronicle 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ethereum/client-go:v1.16.532b878e4144a
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

1,351
goferchronicleVerified publisher0.4.41 of 1See more

gofer chronicle 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/gofer:0.613915d2e41e04
golang.org/x/text@v0.25.0
0.39.0

Open the chart page →

721
mantlechronicleVerified publisher0.1.31 of 1See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
mantlenetworkio/l2geth:v0.4.36bf383d14291
golang.org/x/text@v0.9.0
0.39.0

Open the chart page →

1,941
spirechronicleVerified publisher0.3.61 of 1See more

spire chronicle 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/spire:0.68.379df4fb20322
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

1,535
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

3,602
chekrckotzbauerVerified publisher0.5.31 of 2See more

chekr ckotzbauer 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/chekrdigest-pinnedf299baf467b5
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

3,470
vulnerability-operatorckotzbauerVerified publisher0.31.151 of 1See more

vulnerability-operator ckotzbauer 0.31.15

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/vulnerability-operator:0.28.167008df32715c
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

196
clairclair-helmVerified publisher0.12.01 of 3See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.9.023329c3368e4
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

1,625
calico-cniclastixVerified publisher3.28.13 of 3See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
calico/cni:v3.28.1e486870cfde8
golang.org/x/text@v0.14.0
0.39.0
calico/kube-controllers:v3.28.1eadb3a25109a
golang.org/x/text@v0.14.0
0.39.0
calico/node:v3.28.1d8c644a8a3ee
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

3,071
capi-kamaji-vsphere-fullclastixVerified publisher1.0.19 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
golang.org/x/text@v0.23.0
0.39.0
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/csi-vsphere/driver:v3.4.0f5349a8ae3f3
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
golang.org/x/text@v0.14.0
0.39.0
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
golang.org/x/text@v0.21.0
0.39.0

Open the chart page →

5,991
capsule-rancher-addonclastixVerified publisher0.1.15 of 5See more

capsule-rancher-addon clastix 0.1.1

5 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
clastix/capsule-rancher-addon:v0.1.143d301afbca8
golang.org/x/text@v0.5.0
0.39.0
quay.io/jetstack/cert-manager-cainjector:v1.11.05c3eb25b0854
golang.org/x/text@v0.6.0
0.39.0
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
golang.org/x/text@v0.6.0
0.39.0
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
golang.org/x/text@v0.6.0
0.39.0
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
golang.org/x/text@v0.6.0
0.39.0

Open the chart page →

7,126
kamajiclastixVerified publisher0.0.0+latest2 of 4See more

kamaji clastix 0.0.0+latest

2 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
golang.org/x/text@v0.3.6
0.39.0
quay.io/coreos/etcd:v3.6.12702d7b4881c6
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

4,652
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

2,761
kamaji-etcdclastixVerified publisher0.17.03 of 4See more

kamaji-etcd clastix 0.17.0

3 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
golang.org/x/text@v0.14.0
0.39.0
quay.io/coreos/etcd:v3.5.628cb0630cb85
golang.org/x/text@v0.3.6
0.39.0
quay.io/coreos/etcd:v3.6.12702d7b4881c6
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

12,082
local-path-provisionerclastixVerified publisher0.0.301 of 1See more

local-path-provisioner clastix 0.0.30

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.309b9148811700
golang.org/x/text@v0.16.0
0.39.0

Open the chart page →

1,209
vcloud-csiclastixVerified publisher1.6.04 of 5See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
golang.org/x/text@v0.3.6
0.39.0
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
golang.org/x/text@v0.3.5
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/text@v0.3.5
0.39.0
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

7,413
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
golang.org/x/text@v0.25.0
0.39.0

Open the chart page →

1,768
kube-acp-stackcloudentity2.28.02 of 7See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
golang.org/x/text@v0.14.0
0.39.0
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
golang.org/x/text@v0.3.4
0.39.0

Open the chart page →

21,034
openbankingcloudentity0.1.95 of 6See more

openbanking cloudentity 0.1.9

5 of the 6 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
cloudentity/openbanking-quickstart-bank:1.11.19402ec4b5016
golang.org/x/text@v0.3.6
0.39.0
cloudentity/openbanking-quickstart-consent-admin-portal:1.11.1ee83cdd45b7b
golang.org/x/text@v0.3.6
0.39.0
cloudentity/openbanking-quickstart-consent-page:1.11.15728654cecb7
golang.org/x/text@v0.3.6
0.39.0
cloudentity/openbanking-quickstart-consent-self-service-portal:1.11.18ca94ae6acf4
golang.org/x/text@v0.3.6
0.39.0
cloudentity/openbanking-quickstart-financroo-tpp:1.11.1c04eb10c77b7
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

18,040
cloudflare-ddns-updatecloudflare-ddns-update0.1.21 of 1See more

cloudflare-ddns-update cloudflare-ddns-update 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/dploeger/cloudflare-ddns-update:v0.1.0ec06685b9ff4
golang.org/x/text@v0.15.0
0.39.0

Open the chart page →

1,338
cloudflare-tunnel-ingress-controllercloudflare-tunnel-ingress-controller0.2.31 of 1See more

cloudflare-tunnel-ingress-controller cloudflare-tunnel-ingress-controller 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/oliverbaehler/cloudflare-tunnel-ingress-controller:0.2.30aec31e36d95
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

438
cloudfront-tenant-operatorcloudfront-tenant-operatorVerified publisher0.3.01 of 1See more

cloudfront-tenant-operator cloudfront-tenant-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/dsp0x4/cloudfront-tenant-operator:0.3.0eb40174cd20d
golang.org/x/text@v0.34.0
0.39.0

Open the chart page →

276
hcloud-csi-mgmtcloudhippieVerified publisher2.10.02 of 5See more

hcloud-csi-mgmt cloudhippie 2.10.0

2 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
golang.org/x/text@v0.37.0
0.39.0
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

597
mercurecloudnativeapp1.0.21 of 1See more

mercure cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
dunglas/mercure:v0916834e49961
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

1,105
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
golang.org/x/text@v0.11.0
0.39.0

Open the chart page →

25,513
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

6,704
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

6,930
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
robotshop/rs-mongodb:latest119b545823cd
golang.org/x/text@v0.3.5
0.39.0

Open the chart page →

29,602
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
golang.org/x/text@v0.3.7
0.39.0
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
golang.org/x/text@v0.27.0
0.39.0

Open the chart page →

18,374
cloud-provider-kubevirtcloud-provider-kubevirtVerified publisher0.2.01 of 1See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

663
k8s-monitoring-appcloudscriptVerified publisher1.0.01 of 1See more

k8s-monitoring-app cloudscript 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/k8s-monitoring-app:v0.0.25cab66a6b3574
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

1,294
ctrox-csi-s3cloudve0.1.01 of 4See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

3,143
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
tusproject/tusd:v1.13.0f8088058b80f
golang.org/x/text@v0.12.0
0.39.0

Open the chart page →

5,603
galaxy-cvmfs-csicloudve2.5.12 of 3See more

galaxy-cvmfs-csi cloudve 2.5.1

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
golang.org/x/text@v0.14.0
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

1,515
galaxy-depscloudve1.1.16 of 7See more

galaxy-deps cloudve 1.1.1

6 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
golang.org/x/text@v0.23.0
0.39.0
bitnamilegacy/rabbitmq-cluster-operator:1.14.0-scratch-r567ac64a9623a
golang.org/x/text@v0.3.7
0.39.0
bitnamilegacy/rmq-messaging-topology-operator:1.7.1-scratch-r33c26208691a1
golang.org/x/text@v0.3.7
0.39.0
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
golang.org/x/text@v0.8.0
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
golang.org/x/text@v0.8.0
0.39.0

Open the chart page →

10,581
galaxy-k8s-monitorcloudve0.1.11 of 1See more

galaxy-k8s-monitor cloudve 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
afgane/galaxy-k8s-monitor:latest457173db5640
golang.org/x/text@v0.19.0
0.39.0

Open the chart page →

313
galaxykubemancloudve2.10.14 of 7See more

galaxykubeman cloudve 2.10.1

4 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
golang.org/x/text@v0.3.7
0.39.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
golang.org/x/text@v0.8.0
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
golang.org/x/text@v0.8.0
0.39.0
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

16,134
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

14,304
openstack-cinder-csicloudve1.2.01 of 5See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
k8scloudprovider/cinder-csi-plugin:latesta30c7a2a594a
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

2,068
proxyinjectorcloudve0.0.231 of 1See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

2,853
pulsarcloudve0.2.02 of 2See more

pulsar cloudve 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
golang.org/x/text@v0.22.0
0.39.0
library/docker:dind5efed980cba3
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

6,204
argo-cdcluster-deploy0.3.22 of 3See more

argo-cd cluster-deploy 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
golang.org/x/text@v0.38.0
0.39.0
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

3,752
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

1,042
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

2,509

Container images carrying it

4,072 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
conduction/checkin-component-php:dev3423845692c1
golang.org/x/text@v0.3.2
0.39.0
1
conduction/conduction-ui-php:dev2744565516e8
golang.org/x/text@v0.3.2
0.39.0
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
golang.org/x/text@v0.3.2
0.39.0
1
conduction/docparser-php:devb6f95c8ead7d
golang.org/x/text@v0.3.2
0.39.0
1
conduction/kvk-php:dev8f177f9f8a7b
golang.org/x/text@v0.3.2
0.39.0
1
conduction/pan-php:dev24f03c57568f
golang.org/x/text@v0.3.2
0.39.0
1
containous/maesh:v1.3.2587162516502
golang.org/x/text@v0.3.2
0.39.0
1
contentsquareplatform/chproxy:v1.26.524555f22d4be
golang.org/x/text@v0.14.0
0.39.0
1
coordimap/coordimap-agent:latest7748fd0fae9f
golang.org/x/text@v0.23.0
0.39.0
1
coredns/coredns:1.12.040384aa1f5ea
golang.org/x/text@v0.20.0
0.39.0
1
coredns/coredns:1.7.073ca82b4ce82
golang.org/x/text@v0.3.2
0.39.0
1
coredns/coredns:1.14.6900f9c109f7a
golang.org/x/text@v0.38.0
0.39.0
1
coredns/coredns:1.10.1a0ead06651cf
golang.org/x/text@v0.5.0
0.39.0
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
golang.org/x/text@v0.21.0
0.39.0
1
cortezaproject/corteza:2024.9.08eb7a26605c9
golang.org/x/text@v0.14.0
0.39.0
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
golang.org/x/text@v0.21.0
0.39.0
1
couchbase/admission-controller:2.9.3bf2d2e87e45f
golang.org/x/text@v0.28.0
0.39.0
1
couchbase/operator:2.9.369a385b49e1f
golang.org/x/text@v0.28.0
0.39.0
1
countly/countly-server:25.05.4e3c238248f99
golang.org/x/text@v0.15.0
0.39.0
1
craftypath/sops-operator:v0.8.0402a0024c732
golang.org/x/text@v0.3.6
0.39.0
1
crossplane/crossplane:v0.12.066666e6963af
golang.org/x/text@v0.3.2
0.39.0
1
crossplane/oam-kubernetes-runtime:v0.0.3-71.g0f235900112171c45e3
golang.org/x/text@v0.3.2
0.39.0
1
crossplane/oam-kubernetes-runtime:v0.3.1-5.g11e189407b8b410dc76
golang.org/x/text@v0.3.3
0.39.0
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
golang.org/x/text@v0.3.2
0.39.0
1
csepulvedab/secret-sync:0.5227a6f2b0ff8
golang.org/x/text@v0.3.7
0.39.0
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
golang.org/x/text@v0.3.2
0.39.0
1
csiplugin/snapshot-controller:v4.0.000fcc441ea9f
golang.org/x/text@v0.3.4
0.39.0
1
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
golang.org/x/text@v0.3.6
0.39.0
1
cube8021/push-to-k8s:v1.1.21be9baf096ff
golang.org/x/text@v0.16.0
0.39.0
1
cyberark/conjur-k8s-csi-provider:latest737a967088d9
golang.org/x/text@v0.37.0
0.39.0
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
golang.org/x/text@v0.28.0
0.39.0
1
czerwonk/ping_exporter:v1.1.394f51e1ef1e2
golang.org/x/text@v0.14.0
0.39.0
1
dalf/morty:latest248a4849c350
golang.org/x/text@v0.3.7
0.39.0
1
danielfm/kube-ecr-cleanup-controller:0.1.1012485563b1d0
golang.org/x/text@v0.7.0
0.39.0
1
danielqsj/kafka-exporter:v1.7.0e90b7ba06d97
golang.org/x/text@v0.9.0
0.39.0
1
daprio/dashboard:0.15.04be696707bd1
golang.org/x/text@v0.16.0
0.39.0
1
daprio/dashboard:0.14.07ba5d51e5b97
golang.org/x/text@v0.7.0
0.39.0
1
daprio/injector:1.11.2763b9b70b0c8
golang.org/x/text@v0.11.0
0.39.0
1
daprio/operator:1.11.2c584428aa12d
golang.org/x/text@v0.11.0
0.39.0
1
daprio/placement:1.11.2d8e1446da996
golang.org/x/text@v0.11.0
0.39.0
1
daprio/sentry:1.11.21f507c1a181b
golang.org/x/text@v0.11.0
0.39.0
1
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
golang.org/x/text@v0.16.0
0.39.0
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
golang.org/x/text@v0.29.0
0.39.0
1
darthsim/imgproxy:v3.15.040f6eb807444
golang.org/x/text@v0.7.0
0.39.0
1
darthsim/imgproxy:v3.26476cb08c816a
golang.org/x/text@v0.19.0
0.39.0
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
golang.org/x/text@v0.26.0
0.39.0
1
dashops/dash-ops:latest23537693ff05
golang.org/x/text@v0.30.0
0.39.0
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
golang.org/x/text@v0.3.3
0.39.0
1
datadog/agent:7.22.08f20e56b5311
golang.org/x/text@v0.3.2
0.39.0
1
datadog/agent:6aad9994de6a7
golang.org/x/text@v0.21.0
0.39.0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.