StackRadar

CVE-2026-56852

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,296
of 17,792 indexed, latest versions
Container images
4,056
deployed by those charts
Fix available
1 of 1
affected package

Infinite loop on invalid input in golang.org/x/text

Carried by container images the latest versions of 3,296 of 17,792 indexed charts deploy, on 4,056 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+44 more0.39.04,056
OSV records
GO-2026-5970

Charts affected

3,296 by stars
ChartLatestAffected imagesRadar Score
paperless-ngx-backuptaskmediaVerified publisher1.1.01 of 1See more

paperless-ngx-backup taskmedia 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/taskmedia/kubectl-gpg-ncftp:main0fb2b5584f7c
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

518
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
library/docker:23.0.6-dindafa5d5134900
golang.org/x/text@v0.11.0
0.39.0

Open the chart page →

4,218
pingmetektonops0.1.21 of 1See more

pingme tektonops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
khaliq/pingme:v0.2.749f96888d2ab
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

1,254
telegraf-ds-k3stelegraf-ds-k3s1.0.01 of 1See more

telegraf-ds-k3s telegraf-ds-k3s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
library/telegraf:1.19.0-alpine794079a7f241
golang.org/x/text@v0.3.4
0.39.0

Open the chart page →

3,772
clickhousetemp-charts0.7.12 of 3See more

clickhouse temp-charts 0.7.1

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.16.1db7dde971407
golang.org/x/text@v0.3.6
0.39.0
altinity/metrics-exporter:0.16.185b4fdbae053
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

8,707
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
golang.org/x/text@v0.3.5
0.39.0

Open the chart page →

10,606
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
golang.org/x/text@v0.3.5
0.39.0

Open the chart page →

10,551
temporaltemporal0.28.97 of 13See more

temporal temporal 0.28.9

7 of the 13 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/text@v0.3.2
0.39.0
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/text@v0.3.6
0.39.0
temporalio/admin-tools:1.22.0836af062af30
golang.org/x/text@v0.8.0
0.39.0
temporalio/server:1.22.0ddeebf8bad8f
golang.org/x/text@v0.10.0
0.39.0
temporalio/ui:2.16.2af9c9349708f
golang.org/x/text@v0.9.0
0.39.0
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
golang.org/x/text@v0.3.6
0.39.0
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

21,042
echoserverteochenglim0.1.01 of 1See more

echoserver teochenglim 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
jmalloc/echo-server:0.3.1e4eaee2c7998
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

1,443
terminusterminusVerified publisher1.1.01 of 1See more

terminus terminus 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
golang.org/x/text@v0.34.0
0.39.0

Open the chart page →

640
gmctest-opea1.0.01 of 1See more

gmc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
opea/gmcmanager:1.0514af17c495c
golang.org/x/text@v0.15.0
0.39.0

Open the chart page →

517
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
golang.org/x/text@v0.12.0
0.39.0

Open the chart page →

20,406
local-path-provisionerth-chartsVerified publisher0.0.291 of 1See more

local-path-provisioner th-charts 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.299bebefa0b908
golang.org/x/text@v0.16.0
0.39.0

Open the chart page →

1,300
openmeteo-exporterth-chartsVerified publisher0.1.61 of 1See more

openmeteo-exporter th-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
thelande/openmeteo_exporter:v1.0.77e9072ace15f
golang.org/x/text@v0.26.0
0.39.0

Open the chart page →

1,381
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
golang.org/x/text@v0.16.0
0.39.0

Open the chart page →

10,101
ping-exporterth-chartsVerified publisher0.1.11 of 1See more

ping-exporter th-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
czerwonk/ping_exporter:v1.1.394f51e1ef1e2
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

1,236
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
golang.org/x/text@v0.24.0
0.39.0

Open the chart page →

7,342
trafficlight-apithecampagnards0.1.11 of 1See more

trafficlight-api thecampagnards 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
thecampagnards/trafficlight-api:main7dca9d973837
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

4,406
mc-routerthl-chartsVerified publisher0.1.01 of 1See more

mc-router thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
itzg/mc-router:1.16.1bb552b59fb53
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

1,855
monitoringthl-chartsVerified publisher0.1.17 of 10See more

monitoring thl-charts 0.1.1

7 of the 10 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
golang.org/x/text@v0.3.7
0.39.0
grafana/loki:2.5.0f9ef133793af
golang.org/x/text@v0.3.7
0.39.0
grafana/promtail:2.4.2626900031c4e
golang.org/x/text@v0.3.7
0.39.0
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/text@v0.3.6
0.39.0
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
golang.org/x/text@v0.3.6
0.39.0
quay.io/prometheus/node-exporter:v1.3.023ff46c728b9
golang.org/x/text@v0.3.6
0.39.0
quay.io/prometheus/prometheus:v2.34.0b37103e03399
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

18,940
tile38tile380.6.11 of 2See more

tile38 tile38 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
tile38/tile38:1.38.05b61c6f3b32e
golang.org/x/text@v0.32.0
0.39.0

Open the chart page →

420
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
nginx/nginx-ingress:1.11.1eb5b4fd73325
golang.org/x/text@v0.3.4
0.39.0

Open the chart page →

6,889
grafanatnh5.3.01 of 1See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

3,198
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

4,445
prometheustnh11.6.03 of 6See more

prometheus tnh 11.6.0

3 of the 6 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/text@v0.3.2
0.39.0
prom/prometheus:v2.19.0bfad037f95e5
golang.org/x/text@v0.3.2
0.39.0
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

8,492
todolist-charttodolist-chart0.1.73 of 10See more

todolist-chart todolist-chart 0.1.7

3 of the 10 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
erenozcan17/go_backend:v4.250b4f23422b6
golang.org/x/text@v0.9.0
0.39.0
grafana/grafana:latestf772d434e8fa
golang.org/x/text@v0.37.0
0.39.0
quay.io/prometheus/blackbox-exporter:lateste753ff9f3fc4
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

7,028
token-servertoken-server1.0.91 of 1See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
udhos/token-server:1.0.9728013f2fac1
golang.org/x/text@v0.29.0
0.39.0

Open the chart page →

1,246
netbirdtotmicro1.8.23 of 4See more

netbird totmicro 1.8.2

3 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
netbirdio/management:0.60.252682e5f48f9
golang.org/x/text@v0.28.0
0.39.0
netbirdio/relay:0.60.2a10762533793
golang.org/x/text@v0.28.0
0.39.0
netbirdio/signal:0.60.267176bcbf6ab
golang.org/x/text@v0.28.0
0.39.0

Open the chart page →

6,041
traefik-secrets-exportertraefik-secrets-exporter0.0.21 of 1See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

1,669
ats-ingresstrafficserver-ingress-controller0.1.01 of 1See more

ats-ingress trafficserver-ingress-controller 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/apache/ats-ingress:latest2d4d776f6362
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

407
traktortraktorVerified publisher0.0.171 of 1See more

traktor traktor 0.0.17

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
gdxbsv/traktor:0.0.17675693335054
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

375
nfs-servertranhailongVerified publisher0.1.21 of 1See more

nfs-server tranhailong 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
golang.org/x/text@v0.5.0
0.39.0

Open the chart page →

2,331
trident-protecttrident-protect100.2606.02 of 2See more

trident-protect trident-protect 100.2606.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
netapp/controller:26.06.08235a77cfc92
golang.org/x/text@v0.37.0
0.39.0
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
golang.org/x/text@v0.26.0
0.39.0

Open the chart page →

1,347
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview3 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

3 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
netapp/controller:25.11.0-bxp-preview06f6c9a0653f
golang.org/x/text@v0.24.0
0.39.0
netapp/trident-protect-connector:25.11.0-bxp-previewec22fc6e5c5a
golang.org/x/text@v0.23.0
0.39.0
netapp/trident-protect-utils:v1.0.058b9fac358bd
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

2,191
trident-protect-consoletrident-protect100.2608.0-console1 of 3See more

trident-protect-console trident-protect 100.2608.0-console

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
golang.org/x/text@v0.26.0
0.39.0

Open the chart page →

1,338
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

2,486
posteetrivy-operator2.14.02 of 3See more

postee trivy-operator 2.14.0

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
aquasec/postee:2.12.0-amd640795cba777e7
golang.org/x/text@v0.7.0
0.39.0
aquasec/postee-ui:2.12.0-amd64c0467c3941dc
golang.org/x/text@v0.7.0
0.39.0

Open the chart page →

4,816
traceetrivy-operator0.24.11 of 1See more

tracee trivy-operator 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
aquasec/tracee:0.24.1cfbbfee972e6
golang.org/x/text@v0.27.0
0.39.0

Open the chart page →

1,083
trivy-webhook-aws-security-hubtrivy-webhook-aws-security-hubVerified publisher0.1.201 of 1See more

trivy-webhook-aws-security-hub trivy-webhook-aws-security-hub 0.1.20

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/csepulveda/trivy-webhook-aws-security-hub:v0.1.206836b779b060
golang.org/x/text@v0.34.0
0.39.0

Open the chart page →

617
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

7,519
monitorortrozz0.0.11 of 1See more

monitoror trozz 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
monitoror/monitoror:44b88edcf51ff
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

3,110
clickhouse-operatortruefoundryVerified publisher0.1.12 of 3See more

clickhouse-operator truefoundry 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.23.34baec90b20cd
golang.org/x/text@v0.13.0
0.39.0
altinity/metrics-exporter:0.23.32912a6c15b44
golang.org/x/text@v0.13.0
0.39.0

Open the chart page →

1,430
tfy-agenttruefoundryVerified publisher0.2.1042 of 5See more

tfy-agent truefoundry 0.2.104

2 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
golang.org/x/text@v0.35.0
0.39.0
ghcr.io/stakater/reloader:v1.4.190530cf462fa3
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

688
tfy-cloudflaredtruefoundryVerified publisher0.6.01 of 2See more

tfy-cloudflared truefoundry 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
golang.org/x/text@v0.6.0
0.39.0

Open the chart page →

2,022
tfy-inferentia-operatortruefoundryVerified publisher0.2.83 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

3 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
golang.org/x/text@v0.14.0
0.39.0
public.ecr.aws/neuron/neuron-device-plugin:2.23.30.075a6d5ce3bd3
golang.org/x/text@v0.14.0
0.39.0
public.ecr.aws/neuron/neuron-scheduler:2.23.30.04cd274463e6b
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

2,918
tfy-karpentertruefoundryVerified publisher0.5.112 of 3See more

tfy-karpenter truefoundry 0.5.11

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
public.ecr.aws/karpenter/controller:1.9.030a506c64fbb
golang.org/x/text@v0.33.0
0.39.0
public.ecr.aws/truefoundrycloud/eks/eks-node-monitoring-agent:v1.5.1-eksbuild.1988c8e1a273a
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

654
tfy-kservetruefoundryVerified publisher0.1.11 of 2See more

tfy-kserve truefoundry 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
kserve/kserve-controller:v0.10.022ff858b57c1
golang.org/x/text@v0.5.0
0.39.0

Open the chart page →

1,178
tfy-llm-gateway-infratruefoundryVerified publisher0.2.102 of 3See more

tfy-llm-gateway-infra truefoundry 0.2.10

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.23.774315beb57db
golang.org/x/text@v0.13.0
0.39.0
altinity/metrics-exporter:0.23.7a4d7ff0c727e
golang.org/x/text@v0.13.0
0.39.0

Open the chart page →

1,206
tfy-lokitruefoundryVerified publisher0.1.62 of 2See more

tfy-loki truefoundry 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/loki:2.9.1035b02acc6765
golang.org/x/text@v0.16.0
0.39.0
grafana/promtail:2.9.1063a2e57a5b14
golang.org/x/text@v0.16.0
0.39.0

Open the chart page →

2,827
truefoundry-monitoringtruefoundryVerified publisher0.1.64 of 8See more

truefoundry-monitoring truefoundry 0.1.6

4 of the 8 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
golang.org/x/text@v0.30.0
0.39.0
ghcr.io/jkroepke/kube-webhook-certgen:1.7.47a62bba56a7c
golang.org/x/text@v0.32.0
0.39.0
quay.io/prometheus-operator/prometheus-operator:v0.88.0b4f51de53357
golang.org/x/text@v0.32.0
0.39.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/text@v0.32.0
0.39.0

Open the chart page →

4,549

Container images carrying it

4,056 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
golang.org/x/text@v0.37.0
0.39.0
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
golang.org/x/text@v0.6.0
0.39.0
4
ghcr.io/sigstore/scaffolding/createtree:v0.7.31e5232e8c9122
golang.org/x/text@v0.30.0
0.39.0
4
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
golang.org/x/text@v0.22.0
0.39.0
4
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
golang.org/x/text@v0.13.0
0.39.0
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
golang.org/x/text@v0.13.0
0.39.0
4
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
golang.org/x/text@v0.13.0
0.39.0
4
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
golang.org/x/text@v0.13.0
0.39.0
4
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
golang.org/x/text@v0.5.0
0.39.0
4
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
golang.org/x/text@v0.4.0
0.39.0
4
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/text@v0.23.0
0.39.0
4
quay.io/thanos/thanos:v0.42.4b567818fe608
golang.org/x/text@v0.38.0
0.39.0
4
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
golang.org/x/text@v0.37.0
0.39.0
4
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
golang.org/x/text@v0.37.0
0.39.0
4
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
golang.org/x/text@v0.37.0
0.39.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
golang.org/x/text@v0.3.6
0.39.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
golang.org/x/text@v0.4.0
0.39.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
golang.org/x/text@v0.3.6
0.39.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.0c9f76a75fd00
golang.org/x/text@v0.26.0
0.39.0
4
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
golang.org/x/text@v0.25.0
0.39.0
4
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
golang.org/x/text@v0.38.0
0.39.0
4
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
golang.org/x/text@v0.14.0
0.39.0
4
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
golang.org/x/text@v0.21.0
0.39.0
4
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
golang.org/x/text@v0.21.0
0.39.0
4
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
golang.org/x/text@v0.14.0
0.39.0
4
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
golang.org/x/text@v0.25.0
0.39.0
4
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
golang.org/x/text@v0.33.0
0.39.0
4
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
golang.org/x/text@v0.37.0
0.39.0
4
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
golang.org/x/text@v0.20.0
0.39.0
4
alpine/git:latest:v2.54.06f3b5029566d
golang.org/x/text@v0.37.0
0.39.0
3
argoproj/argocd:v1.8.1830e86cacefd
golang.org/x/text@v0.3.2
0.39.0
3
bitnamilegacy/kubectl:latestcd354d5b2556
golang.org/x/text@v0.23.0
0.39.0
3
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
golang.org/x/text@v0.3.7
0.39.0
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
golang.org/x/text@v0.27.0
0.39.0
3
caddy/ingress:v0.2.118d1366fc0e9
golang.org/x/text@v0.14.0
0.39.0
3
ciscolabs/rtsp-server:latestb59fc10bb821
golang.org/x/text@v0.3.7
0.39.0
3
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
golang.org/x/text@v0.31.0
0.39.0
3
cockroachdb/cockroach-self-signer-cert:1.1007a49acec18d
golang.org/x/text@v0.23.0
0.39.0
3
csiplugin/csi-resizer:v1.2.036c31f7e1f43
golang.org/x/text@v0.3.5
0.39.0
3
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/text@v0.3.4
0.39.0
3
derailed/popeye:v0.22.18e68e22c7663
golang.org/x/text@v0.21.0
0.39.0
3
dgraph/dgraph:v21.12.03b55ea83fffe
golang.org/x/text@v0.3.6
0.39.0
3
envoyproxy/gateway:v1.7.5156b7d32c73b
golang.org/x/text@v0.38.0
0.39.0
3
ethpandaops/tracoor:latestd8514b9f4c59
golang.org/x/text@v0.25.0
0.39.0
3
goharbor/harbor-core:v2.15.2d7b780d23721
golang.org/x/text@v0.37.0
0.39.0
3
goharbor/harbor-jobservice:v2.15.2f71a4452a095
golang.org/x/text@v0.37.0
0.39.0
3
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
golang.org/x/text@v0.37.0
0.39.0
3
goharbor/registry-photon:v2.15.2c4ebef61ceb5
golang.org/x/text@v0.37.0
0.39.0
3
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
golang.org/x/text@v0.38.0
0.39.0
3
grafana/grafana:8.2.500568d89c4f8
golang.org/x/text@v0.3.6
0.39.0
3

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.