CVE-2026-56852
UnscoredAdvisory
Published 14 Jul 2026In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.005
- 40th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 3,378
- of 17,813 indexed, latest versions
- Container images
- 4,102
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Infinite loop on invalid input in golang.org/x/text
Carried by container images the latest versions of 3,378 of 17,813 indexed charts deploy, on 4,102 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang.org/ | v0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+44 more | 0.39.0 | 4,102 |
- OSV records
- GO-2026-5970
Charts affected
3,378 by stars
Container images carrying it
4,102 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | f75e48af0598 | golang.org/ | 0.39.0 | 1 |
| library/ | 7232f6388a4d | golang.org/ | 0.39.0 | 1 |
| library/ | 0032d2ca20db | golang.org/ | 0.39.0 | 1 |
| library/ | 05678ae4e5e1 | golang.org/ | 0.39.0 | 1 |
| library/ | 3b6c281e1c08 | golang.org/ | 0.39.0 | 1 |
| library/ | 3d0e6df9fd5b | golang.org/ | 0.39.0 | 1 |
| library/ | 50cae5081ab4 | golang.org/ | 0.39.0 | 1 |
| library/ | 646902910d6a | golang.org/ | 0.39.0 | 1 |
| library/ | 71a63fc2438e | golang.org/ | 0.39.0 | 1 |
| library/ | 7c81758cb295 | golang.org/ | 0.39.0 | 1 |
| library/ | 88785f6f665a | golang.org/ | 0.39.0 | 1 |
| library/ | ae1cf99fa7bf | golang.org/ | 0.39.0 | 1 |
| library/ | d23ec07162ca | golang.org/ | 0.39.0 | 1 |
| library/ | dca8d11fe467 | golang.org/ | 0.39.0 | 1 |
| library/ | fd374bae807c | golang.org/ | 0.39.0 | 1 |
| library/ | 28e98eece020 | golang.org/ | 0.39.0 | 1 |
| library/ | 507a3eecf809 | golang.org/ | 0.39.0 | 1 |
| library/ | 794079a7f241 | golang.org/ | 0.39.0 | 1 |
| library/ | addb86c0c520 | golang.org/ | 0.39.0 | 1 |
| library/ | 0a5157f742d2 | golang.org/ | 0.39.0 | 1 |
| library/ | 104204dadedf | golang.org/ | 0.39.0 | 1 |
| library/ | 1489caffaedb | golang.org/ | 0.39.0 | 1 |
| library/ | 1957e3314f43 | golang.org/ | 0.39.0 | 1 |
| library/ | 2f603f8d3abe | golang.org/ | 0.39.0 | 1 |
| library/ | 34d5089d0b41 | golang.org/ | 0.39.0 | 1 |
| library/ | 5d47b7bb2546 | golang.org/ | 0.39.0 | 1 |
| library/ | 7d0228d19042 | golang.org/ | 0.39.0 | 1 |
| library/ | b70710baceeb | golang.org/ | 0.39.0 | 1 |
| library/ | eda951fd29a8 | golang.org/ | 0.39.0 | 1 |
| library/ | f98ac9dd97b0 | golang.org/ | 0.39.0 | 1 |
| lifailon/ | ea37e4b6b952 | golang.org/ | 0.39.0 | 1 |
| lightstep/ | c800e05e1eff | golang.org/ | 0.39.0 | 1 |
| linode/ | 09f3282bf53d | golang.org/ | 0.39.0 | 1 |
| linuxserver/ | 241009026e6f | golang.org/ | 0.39.0 | 1 |
| linuxserver/ | 938810eca3d3 | golang.org/ | 0.39.0 | 1 |
| lishimeng/ | 3d5752dac834 | golang.org/ | 0.39.0 | 1 |
| lishimeng/ | c79a67657baf | golang.org/ | 0.39.0 | 1 |
| lishimeng/ | 3d00485e64dc | golang.org/ | 0.39.0 | 1 |
| lishimeng/ | 3e7d05ded625 | golang.org/ | 0.39.0 | 1 |
| lishimeng/ | 0970dfe5dc8f | golang.org/ | 0.39.0 | 1 |
| lishimeng/ | 8145c3dc83c8 | golang.org/ | 0.39.0 | 1 |
| lishimeng/ | 9b2f8be6c7d3 | golang.org/ | 0.39.0 | 1 |
| lishimeng/ | e0b8d2d8ca28 | golang.org/ | 0.39.0 | 1 |
| listmonk/ | bf3903d54a46 | golang.org/ | 0.39.0 | 1 |
| litestream/ | c5a1e1b01916 | golang.org/ | 0.39.0 | 1 |
| livekit/ | 1ab01641b366 | golang.org/ | 0.39.0 | 1 |
| livekit/ | ecf1409c75e0 | golang.org/ | 0.39.0 | 1 |
| livekit/ | 3602a85840d5 | golang.org/ | 0.39.0 | 1 |
| livekit/ | 8391fd1b834f | golang.org/ | 0.39.0 | 1 |
| lmierzwa/ | 3751e5eed656 | golang.org/ | 0.39.0 | 1 |