StackRadar

CVE-2026-56852

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,285
of 17,790 indexed, latest versions
Container images
4,054
deployed by those charts
Fix available
1 of 1
affected package

Infinite loop on invalid input in golang.org/x/text

Carried by container images the latest versions of 3,285 of 17,790 indexed charts deploy, on 4,054 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+44 more0.39.04,054
OSV records
GO-2026-5970

Charts affected

3,285 by stars
ChartLatestAffected imagesRadar Score
goferchronicleVerified publisher0.4.41 of 1See more

gofer chronicle 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/gofer:0.613915d2e41e04
golang.org/x/text@v0.25.0
0.39.0

Open the chart page →

721
mantlechronicleVerified publisher0.1.31 of 1See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
mantlenetworkio/l2geth:v0.4.36bf383d14291
golang.org/x/text@v0.9.0
0.39.0

Open the chart page →

1,934
spirechronicleVerified publisher0.3.61 of 1See more

spire chronicle 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/spire:0.68.379df4fb20322
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

1,521
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

3,595
chekrckotzbauerVerified publisher0.5.31 of 2See more

chekr ckotzbauer 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/chekrdigest-pinnedf299baf467b5
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

3,470
vulnerability-operatorckotzbauerVerified publisher0.31.151 of 1See more

vulnerability-operator ckotzbauer 0.31.15

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/vulnerability-operator:0.28.167008df32715c
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

187
clairclair-helmVerified publisher0.12.01 of 3See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.9.023329c3368e4
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

1,618
calico-cniclastixVerified publisher3.28.13 of 3See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
calico/cni:v3.28.1e486870cfde8
golang.org/x/text@v0.14.0
0.39.0
calico/kube-controllers:v3.28.1eadb3a25109a
golang.org/x/text@v0.14.0
0.39.0
calico/node:v3.28.1d8c644a8a3ee
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

3,050
capi-kamaji-vsphere-fullclastixVerified publisher1.0.19 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

9 of the 9 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
golang.org/x/text@v0.23.0
0.39.0
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/csi-vsphere/driver:v3.4.0f5349a8ae3f3
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
golang.org/x/text@v0.14.0
0.39.0
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
golang.org/x/text@v0.21.0
0.39.0

Open the chart page →

5,933
capsule-rancher-addonclastixVerified publisher0.1.15 of 5See more

capsule-rancher-addon clastix 0.1.1

5 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
clastix/capsule-rancher-addon:v0.1.143d301afbca8
golang.org/x/text@v0.5.0
0.39.0
quay.io/jetstack/cert-manager-cainjector:v1.11.05c3eb25b0854
golang.org/x/text@v0.6.0
0.39.0
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
golang.org/x/text@v0.6.0
0.39.0
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
golang.org/x/text@v0.6.0
0.39.0
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
golang.org/x/text@v0.6.0
0.39.0

Open the chart page →

7,104
kamajiclastixVerified publisher0.0.0+latest2 of 4See more

kamaji clastix 0.0.0+latest

2 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
golang.org/x/text@v0.3.6
0.39.0
quay.io/coreos/etcd:v3.6.12702d7b4881c6
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

4,630
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

2,761
kamaji-etcdclastixVerified publisher0.17.03 of 4See more

kamaji-etcd clastix 0.17.0

3 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
golang.org/x/text@v0.14.0
0.39.0
quay.io/coreos/etcd:v3.5.628cb0630cb85
golang.org/x/text@v0.3.6
0.39.0
quay.io/coreos/etcd:v3.6.12702d7b4881c6
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

12,021
local-path-provisionerclastixVerified publisher0.0.301 of 1See more

local-path-provisioner clastix 0.0.30

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.309b9148811700
golang.org/x/text@v0.16.0
0.39.0

Open the chart page →

1,208
vcloud-csiclastixVerified publisher1.6.04 of 5See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
golang.org/x/text@v0.3.6
0.39.0
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
golang.org/x/text@v0.3.5
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/text@v0.3.5
0.39.0
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

7,386
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
golang.org/x/text@v0.25.0
0.39.0

Open the chart page →

1,750
kube-acp-stackcloudentity2.28.02 of 7See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
golang.org/x/text@v0.14.0
0.39.0
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
golang.org/x/text@v0.3.4
0.39.0

Open the chart page →

20,936
openbankingcloudentity0.1.95 of 6See more

openbanking cloudentity 0.1.9

5 of the 6 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
cloudentity/openbanking-quickstart-bank:1.11.19402ec4b5016
golang.org/x/text@v0.3.6
0.39.0
cloudentity/openbanking-quickstart-consent-admin-portal:1.11.1ee83cdd45b7b
golang.org/x/text@v0.3.6
0.39.0
cloudentity/openbanking-quickstart-consent-page:1.11.15728654cecb7
golang.org/x/text@v0.3.6
0.39.0
cloudentity/openbanking-quickstart-consent-self-service-portal:1.11.18ca94ae6acf4
golang.org/x/text@v0.3.6
0.39.0
cloudentity/openbanking-quickstart-financroo-tpp:1.11.1c04eb10c77b7
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

18,040
cloudflare-ddns-updatecloudflare-ddns-update0.1.21 of 1See more

cloudflare-ddns-update cloudflare-ddns-update 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/dploeger/cloudflare-ddns-update:v0.1.0ec06685b9ff4
golang.org/x/text@v0.15.0
0.39.0

Open the chart page →

1,338
cloudflare-tunnel-ingress-controllercloudflare-tunnel-ingress-controller0.2.31 of 1See more

cloudflare-tunnel-ingress-controller cloudflare-tunnel-ingress-controller 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/oliverbaehler/cloudflare-tunnel-ingress-controller:0.2.30aec31e36d95
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

438
cloudfront-tenant-operatorcloudfront-tenant-operatorVerified publisher0.3.01 of 1See more

cloudfront-tenant-operator cloudfront-tenant-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/dsp0x4/cloudfront-tenant-operator:0.3.0eb40174cd20d
golang.org/x/text@v0.34.0
0.39.0

Open the chart page →

269
hcloud-csi-mgmtcloudhippieVerified publisher2.10.02 of 5See more

hcloud-csi-mgmt cloudhippie 2.10.0

2 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
golang.org/x/text@v0.37.0
0.39.0
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

583
mercurecloudnativeapp1.0.21 of 1See more

mercure cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
dunglas/mercure:v0916834e49961
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

1,098
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
golang.org/x/text@v0.11.0
0.39.0

Open the chart page →

25,152
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

6,696
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

6,921
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
robotshop/rs-mongodb:latest119b545823cd
golang.org/x/text@v0.3.5
0.39.0

Open the chart page →

29,594
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
golang.org/x/text@v0.3.7
0.39.0
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
golang.org/x/text@v0.27.0
0.39.0

Open the chart page →

18,256
cloud-provider-kubevirtcloud-provider-kubevirtVerified publisher0.2.01 of 1See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

656
k8s-monitoring-appcloudscriptVerified publisher1.0.01 of 1See more

k8s-monitoring-app cloudscript 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/k8s-monitoring-app:v0.0.25cab66a6b3574
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

1,294
ctrox-csi-s3cloudve0.1.01 of 4See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

3,136
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
tusproject/tusd:v1.13.0f8088058b80f
golang.org/x/text@v0.12.0
0.39.0

Open the chart page →

5,552
galaxy-cvmfs-csicloudve2.5.12 of 3See more

galaxy-cvmfs-csi cloudve 2.5.1

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
golang.org/x/text@v0.14.0
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

1,501
galaxy-depscloudve1.1.16 of 7See more

galaxy-deps cloudve 1.1.1

6 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
golang.org/x/text@v0.23.0
0.39.0
bitnamilegacy/rabbitmq-cluster-operator:1.14.0-scratch-r567ac64a9623a
golang.org/x/text@v0.3.7
0.39.0
bitnamilegacy/rmq-messaging-topology-operator:1.7.1-scratch-r33c26208691a1
golang.org/x/text@v0.3.7
0.39.0
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
golang.org/x/text@v0.8.0
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
golang.org/x/text@v0.8.0
0.39.0

Open the chart page →

10,543
galaxy-k8s-monitorcloudve0.1.11 of 1See more

galaxy-k8s-monitor cloudve 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
afgane/galaxy-k8s-monitor:latest457173db5640
golang.org/x/text@v0.19.0
0.39.0

Open the chart page →

313
galaxykubemancloudve2.10.14 of 7See more

galaxykubeman cloudve 2.10.1

4 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
golang.org/x/text@v0.3.7
0.39.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
golang.org/x/text@v0.8.0
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
golang.org/x/text@v0.8.0
0.39.0
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

16,117
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

14,285
openstack-cinder-csicloudve1.2.01 of 5See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
k8scloudprovider/cinder-csi-plugin:latesta30c7a2a594a
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

2,061
proxyinjectorcloudve0.0.231 of 1See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

2,853
pulsarcloudve0.2.02 of 2See more

pulsar cloudve 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
golang.org/x/text@v0.22.0
0.39.0
library/docker:dind5efed980cba3
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

5,994
argo-cdcluster-deploy0.3.22 of 3See more

argo-cd cluster-deploy 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
golang.org/x/text@v0.38.0
0.39.0
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

3,733
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

1,036
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

2,457
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
golang.org/x/text@v0.6.0
0.39.0

Open the chart page →

7,521
mla-external-secretscluster-deploy0.3.01 of 1See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

716
monitoringcluster-deploy0.3.09 of 11See more

monitoring cluster-deploy 0.3.0

9 of the 11 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
golang.org/x/text@v0.33.0
0.39.0
grafana/loki:3.6.73c8fd3570dd9
golang.org/x/text@v0.31.0
0.39.0
grafana/loki-canary:3.6.70dac7d5cb383
golang.org/x/text@v0.31.0
0.39.0
prom/memcached-exporter:v0.15.592a6ad5a3d3e
golang.org/x/text@v0.31.0
0.39.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
golang.org/x/text@v0.33.0
0.39.0
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
golang.org/x/text@v0.29.0
0.39.0
quay.io/prometheus/prometheus:v3.10.07571a304e67f
golang.org/x/text@v0.34.0
0.39.0
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
golang.org/x/text@v0.30.0
0.39.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/text@v0.32.0
0.39.0

Open the chart page →

8,185
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

7,136
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

6,926
cluster-monitor-agentcluster-monitor-agent0.10.21 of 1See more

cluster-monitor-agent cluster-monitor-agent 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent:0.10.26769c2275a43
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

468
cluster-monitor-servercluster-monitor-server0.10.21 of 1See more

cluster-monitor-server cluster-monitor-server 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server:0.10.22d28f9e3eab4
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

746

Container images carrying it

4,054 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
golang.org/x/text@v0.8.0
0.39.0
3
quay.io/devtron/ai-agent:0.0.16545dac92173
golang.org/x/text@v0.16.0
0.39.0
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
golang.org/x/text@v0.5.0
0.39.0
3
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
golang.org/x/text@v0.3.4
0.39.0
3
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
golang.org/x/text@v0.3.4
0.39.0
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
golang.org/x/text@v0.3.4
0.39.0
3
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
golang.org/x/text@v0.32.0
0.39.0
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
golang.org/x/text@v0.33.0
0.39.0
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
golang.org/x/text@v0.33.0
0.39.0
3
quay.io/devtron/clair:4.3.675fb847ac045
golang.org/x/text@v0.3.6
0.39.0
3
quay.io/devtron/cost-sync:172ef62b-1159-39429edf210d763ca
golang.org/x/text@v0.25.0
0.39.0
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
golang.org/x/text@v0.32.0
0.39.0
3
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
golang.org/x/text@v0.32.0
0.39.0
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
golang.org/x/text@v0.32.0
0.39.0
3
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
golang.org/x/text@v0.3.7
0.39.0
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
golang.org/x/text@v0.13.0
0.39.0
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
golang.org/x/text@v0.3.4
0.39.0
3
quay.io/devtron/jcmhproxy-ingress:v0.14.64286bcccda3e
golang.org/x/text@v0.14.0
0.39.0
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
golang.org/x/text@v0.8.0
0.39.0
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
golang.org/x/text@v0.32.0
0.39.0
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
golang.org/x/text@v0.32.0
0.39.0
3
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
golang.org/x/text@v0.32.0
0.39.0
3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
golang.org/x/text@v0.8.0
0.39.0
3
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
golang.org/x/text@v0.32.0
0.39.0
3
quay.io/devtron/nats-box:latest48cdd3054b20
golang.org/x/text@v0.3.7
0.39.0
3
quay.io/devtron/silver-surfer:e3b9a2f6-1191-387899640e2dc4316
golang.org/x/text@v0.17.0
0.39.0
3
quay.io/devtron/winter-soldier:abf5a822-196-14744093844c46c19
golang.org/x/text@v0.3.7
0.39.0
3
quay.io/dexidp/dex:v2.25.07bcf286807b8
golang.org/x/text@v0.3.2
0.39.0
3
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/text@v0.3.2
0.39.0
3
quay.io/metallb/controller:v0.13.101b33357b3595
golang.org/x/text@v0.8.0
0.39.0
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
golang.org/x/text@v0.13.0
0.39.0
3
quay.io/prometheus/alertmanager:v0.26.0361db356b330
golang.org/x/text@v0.9.0
0.39.0
3
quay.io/prometheus/node-exporter:v1.1.222fbde17ab64
golang.org/x/text@v0.3.3
0.39.0
3
quay.io/prometheus/node-exporter:v1.6.181f94e50ea37
golang.org/x/text@v0.9.0
0.39.0
3
quay.io/prometheus/node-exporter:v1.2.2a990408ed288
golang.org/x/text@v0.3.6
0.39.0
3
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
golang.org/x/text@v0.36.0
0.39.0
3
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
golang.org/x/text@v0.15.0
0.39.0
3
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
golang.org/x/text@v0.35.0
0.39.0
3
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
golang.org/x/text@v0.38.0
0.39.0
3
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
golang.org/x/text@v0.3.6
0.39.0
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
golang.org/x/text@v0.5.0
0.39.0
3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
golang.org/x/text@v0.18.0
0.39.0
3
quay.io/prometheus/prometheus:v2.26.038d40a760569
golang.org/x/text@v0.3.5
0.39.0
3
quay.io/prometheus/prometheus:v3.10.07571a304e67f
golang.org/x/text@v0.34.0
0.39.0
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
golang.org/x/text@v0.3.6
0.39.0
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
golang.org/x/text@v0.8.0
0.39.0
3
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
golang.org/x/text@v0.17.0
0.39.0
3
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
golang.org/x/text@v0.14.0
0.39.0
3
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
golang.org/x/text@v0.3.3
0.39.0
3
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
golang.org/x/text@v0.3.2
0.39.0
3

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.