StackRadar

CVE-2026-56852

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,296
of 17,792 indexed, latest versions
Container images
4,056
deployed by those charts
Fix available
1 of 1
affected package

Infinite loop on invalid input in golang.org/x/text

Carried by container images the latest versions of 3,296 of 17,792 indexed charts deploy, on 4,056 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+44 more0.39.04,056
OSV records
GO-2026-5970

Charts affected

3,296 by stars
ChartLatestAffected imagesRadar Score
nai-knative-istio-controllernutanix-helm-releasesVerified publisher1.13.12 of 2See more

nai-knative-istio-controller nutanix-helm-releases 1.13.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.13.1a5b041ba3c9e
golang.org/x/text@v0.14.0
0.39.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.13.1f066376eee17
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

1,566
nai-knative-servingnutanix-helm-releasesVerified publisher1.13.14 of 4See more

nai-knative-serving nutanix-helm-releases 1.13.1

4 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.13.121f8e11a44bf
golang.org/x/text@v0.14.0
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.13.134796e9f760b
golang.org/x/text@v0.14.0
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
golang.org/x/text@v0.14.0
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.13.1700c69915dc7
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

3,765
nutanix-core-files-cluster-operatornutanix-helm-releasesVerified publisher1.1.01 of 1See more

nutanix-core-files-cluster-operator nutanix-helm-releases 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
nutanix/cn-rwx-operator:1.1.00082e0cebd42
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

317
nutanix-flow-cninutanix-helm-releasesVerified publisher1.1.02 of 7See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

2 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
golang.org/x/text@v0.8.0
0.39.0
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.1.39751856cacc8
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

4,997
gpu-operatornvidia-gpu-operator26.7.01 of 2See more

gpu-operator nvidia-gpu-operator 26.7.0

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/nfd/node-feature-discovery:v0.19.02fa1c99ad09b
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

213
firecrawlobeoneVerified publisher3.0.51 of 5See more

firecrawl obeone 3.0.5

1 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/firecrawl:2.11.34132de0537d308
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

10,110
lensoci-ai-incubations0.1.1410 of 16See more

lens oci-ai-incubations 0.1.14

10 of the 16 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
golang.org/x/text@v0.14.0
0.39.0
grafana/grafana:12.1.1a1701c218024
golang.org/x/text@v0.26.0
0.39.0
quay.io/jetstack/cert-manager-cainjector:v1.13.2858fee0c4af0
golang.org/x/text@v0.13.0
0.39.0
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
golang.org/x/text@v0.13.0
0.39.0
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
golang.org/x/text@v0.13.0
0.39.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.85.0ebb560bcb6bd
golang.org/x/text@v0.28.0
0.39.0
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
golang.org/x/text@v0.26.0
0.39.0
quay.io/prometheus/pushgateway:v1.11.103738d278e08
golang.org/x/text@v0.22.0
0.39.0
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
golang.org/x/text@v0.28.0
0.39.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.2050a34002d5b
golang.org/x/text@v0.28.0
0.39.0

Open the chart page →

17,161
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

2,349
argocd-agent-addonocm-helm-chartsVerified publisher0.29.01 of 2See more

argocd-agent-addon ocm-helm-charts 0.29.0

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-operator:v0.18.0a09814522a72
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

640
cluster-gateway-addon-managerocm-helm-chartsVerified publisher1.4.01 of 1See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
oamdev/cluster-gateway-addon-manager:v1.4.01bcae00bd7b0
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

1,607
cluster-managerocm-helm-chartsVerified publisher1.3.11 of 1See more

cluster-manager ocm-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/registration-operator:v1.3.1df6c926a2b54
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

799
cluster-proxyocm-helm-chartsVerified publisher0.12.01 of 1See more

cluster-proxy ocm-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/cluster-proxy:v0.12.035f9c3ad644a
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

1,198
dynamic-scoring-frameworkocm-helm-chartsVerified publisher0.1.02 of 2See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
golang.org/x/text@v0.31.0
0.39.0
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

981
klusterletocm-helm-chartsVerified publisher1.3.11 of 1See more

klusterlet ocm-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/registration-operator:v1.3.1df6c926a2b54
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

799
kueue-addonocm-helm-chartsVerified publisher0.1.41 of 1See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
golang.org/x/text@v0.24.0
0.39.0

Open the chart page →

1,596
multicluster-controlplaneocm-helm-chartsVerified publisher0.8.01 of 1See more

multicluster-controlplane ocm-helm-charts 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-controlplane:latest9888240f644b
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

618
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

2,131
octantoctant0.1.861 of 1See more

octant octant 0.1.86

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

542
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
golang.org/x/text@v0.7.0
0.39.0

Open the chart page →

5,826
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

8,548
exposecontrollerolli-aiVerified publisher1.0.51 of 1See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
olliai/exposecontroller:1.0.5a470d96525e4
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

2,861
k8s-replicatorolli-aiVerified publisher1.3.01 of 1See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
olliai/k8s-replicator:1.3.05716f2a8bd4c
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

2,825
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

4,228
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

6,108
one-green-coreone-green-coreVerified publisher0.0.73 of 8See more

one-green-core one-green-core 0.0.7

3 of the 8 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/grafana:8.5.3ecc1b80b8ca2
golang.org/x/text@v0.3.7
0.39.0
library/influxdb:2.0.8ba10ac9ba17a
golang.org/x/text@v0.3.5
0.39.0
library/telegraf:1.20.428e98eece020
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

9,582
onyx-stackonyx0.3.14 of 12See more

onyx-stack onyx 0.3.1

4 of the 12 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
golang.org/x/text@v0.24.0
0.39.0
ghcr.io/kedacore/keda:2.17.272dc058e478d
golang.org/x/text@v0.24.0
0.39.0
ghcr.io/kedacore/keda-admission-webhooks:2.17.2c8227c6edb4d
golang.org/x/text@v0.24.0
0.39.0
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
golang.org/x/text@v0.24.0
0.39.0

Open the chart page →

6,422
oom-traceroom-tracerVerified publisher0.1.01 of 1See more

oom-tracer oom-tracer 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

1,125
opa-nginxopa-nginx0.0.31 of 2See more

opa-nginx opa-nginx 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
openpolicyagent/opa:0.53.16a58dea59933
golang.org/x/text@v0.9.0
0.39.0

Open the chart page →

2,176
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
golang.org/x/text@v0.25.0
0.39.0

Open the chart page →

2,424
openclaw-operatoropenclaw-operatorVerified publisher0.40.01 of 1See more

openclaw-operator openclaw-operator 0.40.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/paperclipinc/openclaw-operator:v0.40.038e0da31c520
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

28
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
golang.org/x/text@v0.3.3
0.39.0

Open the chart page →

18,032
bbsimopencord4.8.111 of 1See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
voltha/bbsim:1.16.7d90403d58016
golang.org/x/text@v0.3.5
0.39.0

Open the chart page →

3,915
bbsim-sadis-serveropencord0.3.51 of 1See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
voltha/bbsim-sadis-server:0.4.0762b272d439e
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

3,729
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

4,619
volthaopencord2.14.02 of 2See more

voltha opencord 2.14.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
golang.org/x/text@v0.3.6
0.39.0
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

3,825
voltha-adapter-openoltopencord2.14.01 of 1See more

voltha-adapter-openolt opencord 2.14.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
golang.org/x/text@v0.16.0
0.39.0

Open the chart page →

898
voltha-adapter-openonuopencord2.14.01 of 1See more

voltha-adapter-openonu opencord 2.14.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
voltha/voltha-openonu-adapter-go:2.12.25d8f2eb5f2a7e
golang.org/x/text@v0.21.0
0.39.0

Open the chart page →

844
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
golang.org/x/text@v0.3.4
0.39.0
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

41,148
voltha-stackopencord2.14.04 of 4See more

voltha-stack opencord 2.14.0

4 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
golang.org/x/text@v0.3.6
0.39.0
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
golang.org/x/text@v0.16.0
0.39.0
voltha/voltha-openonu-adapter-go:2.12.25d8f2eb5f2a7e
golang.org/x/text@v0.21.0
0.39.0
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

5,567
everest-db-namespaceopeneverestVerified publisher1.16.21 of 1See more

everest-db-namespace openeverest 1.16.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
percona/everest-helmtools:0.0.1904458d04a18
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

769
gcp-pubsub-connectoropenfaas0.0.11 of 1See more

gcp-pubsub-connector openfaas 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/gcp-pubsub-connector:0.0.18df071f5b719
golang.org/x/text@v0.22.0
0.39.0

Open the chart page →

1,162
headroom-controlleropenfaas0.1.71 of 1See more

headroom-controller openfaas 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

247
kafka-connectoropenfaas0.7.151 of 1See more

kafka-connector openfaas 0.7.15

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/kafka-connector:0.7.160e58eac0e2f7
golang.org/x/text@v0.32.0
0.39.0

Open the chart page →

1,164
postgres-connectoropenfaas0.1.21 of 1See more

postgres-connector openfaas 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
golang.org/x/text@v0.21.0
0.39.0

Open the chart page →

1,071
pro-builderopenfaas0.6.131 of 2See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

2,739
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

4,761
agents-sandbox-controlleropenkruise0.3.01 of 1See more

agents-sandbox-controller openkruise 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
openkruise/agent-sandbox-controller:v0.3.0e0a3bf7c0dc5
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

266
kruise-gameopenkruise1.1.01 of 1See more

kruise-game openkruise 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
golang.org/x/text@v0.28.0
0.39.0

Open the chart page →

918
kruise-rolloutopenkruise0.6.21 of 1See more

kruise-rollout openkruise 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
openkruise/kruise-rollout:v0.6.2a75e6739ea7d
golang.org/x/text@v0.7.0
0.39.0

Open the chart page →

1,034
kruise-state-metricsopenkruise0.2.01 of 1See more

kruise-state-metrics openkruise 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
openkruise/kruise-state-metrics:v0.2.0a8108f771287
golang.org/x/text@v0.8.0
0.39.0

Open the chart page →

1,929

Container images carrying it

4,056 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
golang.org/x/text@v0.37.0
0.39.0
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
golang.org/x/text@v0.6.0
0.39.0
4
ghcr.io/sigstore/scaffolding/createtree:v0.7.31e5232e8c9122
golang.org/x/text@v0.30.0
0.39.0
4
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
golang.org/x/text@v0.22.0
0.39.0
4
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
golang.org/x/text@v0.13.0
0.39.0
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
golang.org/x/text@v0.13.0
0.39.0
4
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
golang.org/x/text@v0.13.0
0.39.0
4
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
golang.org/x/text@v0.13.0
0.39.0
4
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
golang.org/x/text@v0.5.0
0.39.0
4
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
golang.org/x/text@v0.4.0
0.39.0
4
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/text@v0.23.0
0.39.0
4
quay.io/thanos/thanos:v0.42.4b567818fe608
golang.org/x/text@v0.38.0
0.39.0
4
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
golang.org/x/text@v0.37.0
0.39.0
4
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
golang.org/x/text@v0.37.0
0.39.0
4
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
golang.org/x/text@v0.37.0
0.39.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
golang.org/x/text@v0.3.6
0.39.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
golang.org/x/text@v0.4.0
0.39.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
golang.org/x/text@v0.3.6
0.39.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.0c9f76a75fd00
golang.org/x/text@v0.26.0
0.39.0
4
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
golang.org/x/text@v0.25.0
0.39.0
4
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
golang.org/x/text@v0.38.0
0.39.0
4
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
golang.org/x/text@v0.14.0
0.39.0
4
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
golang.org/x/text@v0.21.0
0.39.0
4
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
golang.org/x/text@v0.21.0
0.39.0
4
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
golang.org/x/text@v0.14.0
0.39.0
4
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
golang.org/x/text@v0.25.0
0.39.0
4
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
golang.org/x/text@v0.33.0
0.39.0
4
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
golang.org/x/text@v0.37.0
0.39.0
4
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
golang.org/x/text@v0.20.0
0.39.0
4
alpine/git:latest:v2.54.06f3b5029566d
golang.org/x/text@v0.37.0
0.39.0
3
argoproj/argocd:v1.8.1830e86cacefd
golang.org/x/text@v0.3.2
0.39.0
3
bitnamilegacy/kubectl:latestcd354d5b2556
golang.org/x/text@v0.23.0
0.39.0
3
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
golang.org/x/text@v0.3.7
0.39.0
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
golang.org/x/text@v0.27.0
0.39.0
3
caddy/ingress:v0.2.118d1366fc0e9
golang.org/x/text@v0.14.0
0.39.0
3
ciscolabs/rtsp-server:latestb59fc10bb821
golang.org/x/text@v0.3.7
0.39.0
3
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
golang.org/x/text@v0.31.0
0.39.0
3
cockroachdb/cockroach-self-signer-cert:1.1007a49acec18d
golang.org/x/text@v0.23.0
0.39.0
3
csiplugin/csi-resizer:v1.2.036c31f7e1f43
golang.org/x/text@v0.3.5
0.39.0
3
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/text@v0.3.4
0.39.0
3
derailed/popeye:v0.22.18e68e22c7663
golang.org/x/text@v0.21.0
0.39.0
3
dgraph/dgraph:v21.12.03b55ea83fffe
golang.org/x/text@v0.3.6
0.39.0
3
envoyproxy/gateway:v1.7.5156b7d32c73b
golang.org/x/text@v0.38.0
0.39.0
3
ethpandaops/tracoor:latestd8514b9f4c59
golang.org/x/text@v0.25.0
0.39.0
3
goharbor/harbor-core:v2.15.2d7b780d23721
golang.org/x/text@v0.37.0
0.39.0
3
goharbor/harbor-jobservice:v2.15.2f71a4452a095
golang.org/x/text@v0.37.0
0.39.0
3
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
golang.org/x/text@v0.37.0
0.39.0
3
goharbor/registry-photon:v2.15.2c4ebef61ceb5
golang.org/x/text@v0.37.0
0.39.0
3
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
golang.org/x/text@v0.38.0
0.39.0
3
grafana/grafana:8.2.500568d89c4f8
golang.org/x/text@v0.3.6
0.39.0
3

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.