CVE-2026-56852

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 40th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,378; of 17,813 indexed, latest versions
Container images: 4,102; deployed by those charts
Fix available: 1 of 1; affected package

Infinite loop on invalid input in golang.org/x/text

Carried by container images the latest versions of 3,378 of 17,813 indexed charts deploy, on 4,102 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/textgolang	v0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+44 more	0.39.0	4,102

OSV records: GO-2026-5970

Charts affected

3,378 by stars

Chart

Latest

Affected images

Radar Score

workspacekaito

0.12.0

2 of 7 See more

workspace kaito 0.12.0

2 of the 7 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner :v5.2.0	afdfa3da79df	golang.org/x/text@v0.21.0	0.39.0
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v1.13.2	fa8eba9843ff	golang.org/x/text@v0.21.0	0.39.0

Open the chart page →

2,539

jenkinskallakruparaju-jenkins

1.0.0

1 of 1 See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/text@v0.23.0	0.39.0

Open the chart page →

2,549

crashlooping-pod-deleterkarljorgensen

0.1.3

1 of 1 See more

crashlooping-pod-deleter karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/text@v0.23.0	0.39.0

Open the chart page →

1,155

dockerdkarljorgensen

0.1.0

1 of 1 See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
library/docker :28.5.2-dind	2a232a42256f	golang.org/x/text@v0.25.0	0.39.0

Open the chart page →

2,055

k10restorekasten

8.0.14

1 of 1 See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
gcr.io/kasten-images/restorectl :8.0.14	5a0884f9a90c	golang.org/x/text@v0.31.0	0.39.0

Open the chart page →

1,508

kbot-self-hostedkbot-self-hosted

0.1.8

1 of 7 See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.30	206a6c708fc6	golang.org/x/text@v0.30.0	0.39.0

Open the chart page →

33,242

kcmkcm

1.12.0

5 of 12 See more

kcm kcm 1.12.0

5 of the 12 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.2	37396519f399	golang.org/x/text@v0.37.0	0.39.0
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	golang.org/x/text@v0.38.0	0.39.0
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	golang.org/x/text@v0.38.0	0.39.0
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	golang.org/x/text@v0.38.0	0.39.0
quay.io/reactiveops/rbac-manager :v1.9.5	87e3f461446f	golang.org/x/text@v0.32.0	0.39.0

Open the chart page →

3,330

keeper-injectorkeeper-injector

0.10.0

2 of 2 See more

keeper-injector keeper-injector 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
keeper/injector-webhook :0.10.0	aeb5476b95f0	golang.org/x/text@v0.31.0	0.39.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/text@v0.17.0	0.39.0

Open the chart page →

758

keeper-injectorkeeper-security

0.11.3

2 of 2 See more

keeper-injector keeper-security 0.11.3

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
keeper/injector-webhook :0.11.3	3eb609f3e60c	golang.org/x/text@v0.37.0	0.39.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/text@v0.17.0	0.39.0

Open the chart page →

505

kestra-starterkestra

2.0.2

2 of 5 See more

kestra-starter kestra 2.0.2

2 of the 5 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
library/docker :dind-rootless	c876e00a0d81	golang.org/x/text@v0.38.0	0.39.0
versity/versitygw :v1.1.0	f730e0dbc1ef	golang.org/x/text@v0.33.0	0.39.0

Open the chart page →

5,633

keycloak-operator-legacykeycloak-operator-legacy

1.0.0

1 of 1 See more

keycloak-operator-legacy keycloak-operator-legacy 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.2-legacy	15fa0ed662b1	golang.org/x/text@v0.3.4	0.39.0

Open the chart page →

5,068

csi-driver-nfskeyporttech

0.1.4

1 of 2 See more

csi-driver-nfs keyporttech 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
keyporttech/csi-driver-nfs :2.0.0	5bd7955ea2f1	golang.org/x/text@v0.3.1-0.20181227161524-e6919f6577db	0.39.0

Open the chart page →

3,365

gogskeyporttech

0.1.3

1 of 3 See more

gogs keyporttech 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
gogs/gogs :0.12.3	0195b095d0b2	golang.org/x/text@v0.3.3	0.39.0

Open the chart page →

3,525

helm-mongodb-operatorkeyporttech

0.1.0

1 of 1 See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	golang.org/x/text@v0.3.3	0.39.0

Open the chart page →

8,841

connectkfirfer

1.15.0

2 of 2 See more

connect kfirfer 1.15.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
1password/connect-api :1.7.2	6aa94cf713f9	golang.org/x/text@v0.12.0	0.39.0
1password/connect-sync :1.7.2	fe527ed9d81f	golang.org/x/text@v0.12.0	0.39.0

Open the chart page →

2,787

dex-k8s-authenticatorkfirfer

0.0.3

1 of 1 See more

dex-k8s-authenticator kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/text@v0.3.0	0.39.0

Open the chart page →

2,792

keelkfirfer

1.0.5

1 of 1 See more

keel kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
keelhq/keel :0.19.2	02ac4ea616c4	golang.org/x/text@v0.9.0	0.39.0

Open the chart page →

2,083

kubernetes-replicatorkfirfer

2.9.1

1 of 1 See more

kubernetes-replicator kfirfer 2.9.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-replicator :v2.9.1	baf5f784398b	golang.org/x/text@v0.8.0	0.39.0

Open the chart page →

864

mysqldumpkfirfer

2.8.0

1 of 1 See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
kfirfer/gcloud-mysql :1.0.3	c257c1e0e8b9	golang.org/x/text@v0.13.0	0.39.0

Open the chart page →

3,525

pod-cleanupkfirfer

0.0.4

1 of 1 See more

pod-cleanup kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup :latest	4369f3ba1d9a	golang.org/x/text@v0.28.0	0.39.0

Open the chart page →

743

prometheus-elasticsearch-exporterkfirfer

6.5.1

1 of 1 See more

prometheus-elasticsearch-exporter kfirfer 6.5.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/elasticsearch-exporter :v1.8.0	073dd360de2c	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

779

kiaekiae

0.1.6

6 of 9 See more

kiae kiae 0.1.6

6 of the 9 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
grafana/loki :2.6.1	1ee60f980950	golang.org/x/text@v0.3.7	0.39.0
grafana/promtail :2.6.1	072527b12cdf	golang.org/x/text@v0.3.7	0.39.0
istio/pilot :1.15.2	db08d6963975	golang.org/x/text@v0.3.7	0.39.0
otel/opentelemetry-collector-contrib :0.63.1	dfb3a55ea8c9	golang.org/x/text@v0.4.0	0.39.0
ghcr.io/dexidp/dex :v2.35.3	13964b29d63e	golang.org/x/text@v0.3.7	0.39.0
ghcr.io/kiaedev/kiae :latest	ebd03028ff6a	golang.org/x/text@v0.3.7	0.39.0

Open the chart page →

19,288

local-path-provisionerkir4h

0.0.35

1 of 1 See more

local-path-provisioner kir4h 0.0.35

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.35	34ff0847cc47	golang.org/x/text@v0.23.0	0.39.0

Open the chart page →

754

process-exporterkir4h

1.0.1

1 of 1 See more

process-exporter kir4h 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ncabatoff/process-exporterdigest-pinned	6f0549dc24e9	golang.org/x/text@v0.21.0	0.39.0

Open the chart page →

742

cdashkitware

0.19.0

1 of 3 See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	golang.org/x/text@v0.18.0	0.39.0

Open the chart page →

12,478

rabbitmq-cluster-operatorklicktipp

0.4.2

3 of 3 See more

rabbitmq-cluster-operator klicktipp 0.4.2

3 of the 3 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ghcr.io/klicktipp/kubectl :1.36.3	0c2402d92b5c	golang.org/x/text@v0.33.0	0.39.0
ghcr.io/rabbitmq/cluster-operator :2.20.1	a96853470256	golang.org/x/text@v0.36.0	0.39.0
ghcr.io/rabbitmq/messaging-topology-operator :1.19.1	24c4649ef3ef	golang.org/x/text@v0.36.0	0.39.0

Open the chart page →

826

rabbitmq-topology-operatorklicktipp

0.4.1

2 of 2 See more

rabbitmq-topology-operator klicktipp 0.4.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ghcr.io/klicktipp/kubectl :1.36.3	0c2402d92b5c	golang.org/x/text@v0.33.0	0.39.0
ghcr.io/rabbitmq/messaging-topology-operator :1.19.1	24c4649ef3ef	golang.org/x/text@v0.36.0	0.39.0

Open the chart page →

557

kloudlite-platformkloudlite

1.1.5

1 of 3 See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/text@v0.8.0	0.39.0

Open the chart page →

1,971

klumklum

1.17.1

1 of 1 See more

klum klum 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ghcr.io/jadolg/klum :v0.8.17	c66cc93f9d03	golang.org/x/text@v0.37.0	0.39.0

Open the chart page →

357

klustre-csi-pluginklustre-csi-plugin

0.1.1

1 of 2 See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

1,474

knative-servingknative-serving

1.18.3

7 of 7 See more

knative-serving knative-serving 1.18.3

7 of the 7 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned	0d5f740b4224	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned	697668be7893	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	031408ec516f	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	3502bb5aa60f	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned	7405faeb7636	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	5b93308a392c	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	50831d9aaa69	golang.org/x/text@v0.24.0	0.39.0

Open the chart page →

3,777

kollektorkollektor

1.0.5

1 of 1 See more

kollektor kollektor 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
pannoi/kollektor :1.0.5	9559617788fc	golang.org/x/text@v0.13.0	0.39.0

Open the chart page →

717

ingress-nginxkomailo-helm-charts

1.0.0

2 of 2 See more

ingress-nginx komailo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.11.3	d56f135b6462	golang.org/x/text@v0.19.0	0.39.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/text@v0.17.0	0.39.0

Open the chart page →

1,548

k8s-metrics-serverkomailo-helm-charts

1.2.0

1 of 1 See more

k8s-metrics-server komailo-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	golang.org/x/text@v0.38.0	0.39.0

Open the chart page →

171

metallbkomailo-helm-charts

1.2.4

3 of 4 See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	golang.org/x/text@v0.36.0	0.39.0
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	golang.org/x/text@v0.24.0	0.39.0
quay.io/metallb/speaker :v0.16.1	16561e96531e	golang.org/x/text@v0.36.0	0.39.0

Open the chart page →

2,176

komiserkomiser-eks

3.1.10

1 of 1 See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
tailwarden/komiser :3.1.10	3f68c8ae7993	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

1,272

komoplanekomodor

0.1.8

1 of 1 See more

komoplane komodor 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
komodorio/komoplane :0.2.1	9678d02c3f2e	golang.org/x/text@v0.31.0	0.39.0

Open the chart page →

955

simple-oauth2-proxykostiantyn-matsebora-helm-charts

0.3.7

1 of 1 See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.7.0	9ed7eaf72050	golang.org/x/text@v0.18.0	0.39.0

Open the chart page →

927

kovi-tile38kovi-charts

0.1.1

1 of 1 See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
tile38/tile38 :1.33.4	afb7e82f9485	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

1,208

cadvisorkrakazyabra

1.0.1

1 of 1 See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.40.0	135327c978de	golang.org/x/text@v0.3.4	0.39.0

Open the chart page →

3,186

authnkrateo

0.23.0

1 of 1 See more

authn krateo 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ghcr.io/krateoplatformops/authn :0.23.0	791c8f9d885a	golang.org/x/text@v0.23.0	0.39.0

Open the chart page →

678

installerkrateo

2.7.1

2 of 2 See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/text@v0.14.0	0.39.0
ghcr.io/krateoplatformops/installer/installer :0.6.3	a7e922ddac55	golang.org/x/text@v0.31.0	0.39.0

Open the chart page →

3,277

installer-pre-upgradekrateo

2.7.1

1 of 1 See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

2,543

sweeperkrateo

0.2.1

2 of 2 See more

sweeper krateo 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.36.0	1ee9df6316d4	golang.org/x/text@v0.33.0	0.39.0
ghcr.io/krateoplatformops/eventstack/sweeper :0.1.0	5d5e24119ff1	golang.org/x/text@v0.23.0	0.39.0

Open the chart page →

1,506

kubeflowkromanow94-kubeflow

0.5.1

16 of 30 See more

kubeflow kromanow94-kubeflow 0.5.1

16 of the 30 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
kubeflow/model-registry :v0.2.9	5783f6db428f	golang.org/x/text@v0.17.0	0.39.0
kubeflow/training-operator :v1-04f9f13	dabb76dbda29	golang.org/x/text@v0.14.0	0.39.0
kubeflowkatib/katib-controller :v0.17.0	72f14e03b9e1	golang.org/x/text@v0.14.0	0.39.0
kubeflowkatib/katib-db-manager :v0.17.0	916a7695b0dd	golang.org/x/text@v0.14.0	0.39.0
kubeflowkatib/katib-ui :v0.17.0	7a41c508deb1	golang.org/x/text@v0.14.0	0.39.0
kubeflownotebookswg/kfam :v1.9.2	2060a2ede788	golang.org/x/text@v0.13.0	0.39.0
kubeflownotebookswg/notebook-controller :v1.9.2	0f14bd28fdd5	golang.org/x/text@v0.3.7	0.39.0
kubeflownotebookswg/poddefaults-webhook :v1.9.2	bde88d98ad74	golang.org/x/text@v0.11.0	0.39.0
kubeflownotebookswg/profile-controller :v1.9.2	f05a5538ae7e	golang.org/x/text@v0.3.7	0.39.0
kubeflownotebookswg/pvcviewer-controller :v1.9.2	9815e9b1728f	golang.org/x/text@v0.14.0	0.39.0
kubeflownotebookswg/tensorboard-controller :v1.9.2	6536a9f61193	golang.org/x/text@v0.13.0	0.39.0
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	golang.org/x/text@v0.14.0	0.39.0
gcr.io/ml-pipeline/cache-server :2.3.0	293941ee4f65	golang.org/x/text@v0.14.0	0.39.0
gcr.io/ml-pipeline/persistenceagent :2.3.0	109ac1b38c41	golang.org/x/text@v0.14.0	0.39.0
gcr.io/ml-pipeline/scheduledworkflow :2.3.0	f7e67e0bc071	golang.org/x/text@v0.14.0	0.39.0
gcr.io/ml-pipeline/viewer-crd-controller :2.3.0	8cf8213d69e4	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

71,574

kron-aapm-sidecarkron-aapm-sidecar

1.1.0

1 of 1 See more

kron-aapm-sidecar kron-aapm-sidecar 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
krontechnology/aapm-sidecar-injector :1.1.0	e078d54c1711	golang.org/x/text@v0.3.7	0.39.0

Open the chart page →

2,112

lndkronkltd

0.3.9

3 of 4 See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
thesisrobot/lnd :v0.14.1-beta	d94c8dbf6dac	golang.org/x/text@v0.3.6	0.39.0
thesisrobot/loop :v0.11.1-beta	89ae07e787ca	golang.org/x/text@v0.3.1-0.20180807135948-17ff2d5776d2	0.39.0
thesisrobot/pool :v0.3.3-alpha	2d1c388a4bda	golang.org/x/text@v0.3.1-0.20180807135948-17ff2d5776d2	0.39.0

Open the chart page →

8,476

casdoorkrzwiatrzyk

1.0.0

1 of 1 See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
casbin/casdoor :v1.224.0	66f836ef778b	golang.org/x/text@v0.3.7	0.39.0

Open the chart page →

3,650

nocodbkrzwiatrzyk

0.0.1

1 of 1 See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.100.2	b0b91ec2a2dd	golang.org/x/text@v0.3.7	0.39.0

Open the chart page →

2,321

pipecdkrzwiatrzyk

0.39.0

1 of 3 See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	golang.org/x/text@v0.3.2	0.39.0

Open the chart page →

3,821

Container images carrying it

4,102 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	golang.org/x/text@v0.21.0	0.39.0	1
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/text@v0.7.0	0.39.0	1
ghcr.io/digitalis-io/vals-operator :v0.8.1	7c776499b8c9	golang.org/x/text@v0.33.0	0.39.0	1
ghcr.io/dirien/minecraft-exporter :0.24.0	61d89bf99ff7	golang.org/x/text@v0.35.0	0.39.0	1
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	golang.org/x/text@v0.23.0	0.39.0	1
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/text@v0.3.7	0.39.0	1
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/text@v0.9.0	0.39.0	1
ghcr.io/dntosas/capi2argo-cluster-operator :v1.5.0	fb8c6457ef6e	golang.org/x/text@v0.25.0	0.39.0	1
ghcr.io/dodevops/azure-advanced-backup :0.4.0	1041d4449e49	golang.org/x/text@v0.3.7	0.39.0	1
ghcr.io/doodlescheduling/k8s-pause :v0.1.1	6b3215e37738	golang.org/x/text@v0.3.7	0.39.0	1
ghcr.io/doodlescheduling/k8svault-controller :v0.2.0	627e5e211766	golang.org/x/text@v0.3.6	0.39.0	1
ghcr.io/dploeger/cloudflare-ddns-update :v0.1.0	ec06685b9ff4	golang.org/x/text@v0.15.0	0.39.0	1
ghcr.io/druggeri/nut_exporter :3.3.0	276460d141c7	golang.org/x/text@v0.22.0	0.39.0	1
ghcr.io/dsp0x4/cloudfront-tenant-operator :0.3.0	eb40174cd20d	golang.org/x/text@v0.34.0	0.39.0	1
ghcr.io/dysnix/bitnami/mongodb :4.4.11-debian-10-r5	073116e61007	golang.org/x/text@v0.3.5	0.39.0	1
ghcr.io/edgelesssys/continuum/continuum-proxy	24c76f294a80	golang.org/x/text@v0.21.0	0.39.0	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/text@v0.3.6	0.39.0	1
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/text@v0.14.0	0.39.0	1
ghcr.io/element-hq/ess-helm/matrix-tools :0.3.2	0eac0521be29	golang.org/x/text@v0.22.0	0.39.0	1
ghcr.io/element-hq/lk-jwt-service :0.6.0	822f0c03a3bd	golang.org/x/text@v0.38.0	0.39.0	1
ghcr.io/eminaktas/oom-tracer :v0.1.0	c90ca8389c87	golang.org/x/text@v0.23.0	0.39.0	1
ghcr.io/emissary-ingress/emissary :4.1.0	4a981156abee	golang.org/x/text@v0.34.0	0.39.0	1
ghcr.io/emqx/emqx-operator :2.3.2	3333ed546165	golang.org/x/text@v0.32.0	0.39.0	1
ghcr.io/epinio/epinio-ui :v1.7.1-0.0.1	d3de52dfb0b4	golang.org/x/text@v0.3.7	0.39.0	1
ghcr.io/erpc/erpc :0.1.1	8bfed3d49a08	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/erpc/erpc :0.0.49	f5654f745d4c	golang.org/x/text@v0.22.0	0.39.0	1
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/text@v0.14.0	0.39.0	1
ghcr.io/ethpandaops/benchmarkoor :latest	5470b2ec3161	golang.org/x/text@v0.34.0	0.39.0	1
ghcr.io/ethpandaops/dispatchoor-api :latest	a0b272f6682a	golang.org/x/text@v0.32.0	0.39.0	1
ghcr.io/ethpandaops/syncoor :master	233aa9808fc7	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/eumel8/rancher-servicemonitor :0.2.1	f34428cac187	golang.org/x/text@v0.14.0	0.39.0	1
ghcr.io/evilgn0me/ingressmonitorcontroller :v0.0.5	0bbfa4db14b9	golang.org/x/text@v0.31.0	0.39.0	1
ghcr.io/exalsius/exalsius-operator :0.12.0	d24a579a3c75	golang.org/x/text@v0.34.0	0.39.0	1
ghcr.io/external-secrets/external-secrets :v0.3.11	56a1ea4490ba	golang.org/x/text@v0.3.6	0.39.0	1
ghcr.io/external-secrets/external-secrets :v2.4.1	9440a40b3947	golang.org/x/text@v0.35.0	0.39.0	1
ghcr.io/external-secrets/external-secrets :v2.1.0	ec40c3d9c48f	golang.org/x/text@v0.33.0	0.39.0	1
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	golang.org/x/text@v0.9.0	0.39.0	1
ghcr.io/fabioluciano/tekton-events-relay :0.10.1	84cb5a2b8b81	golang.org/x/text@v0.38.0	0.39.0	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	golang.org/x/text@v0.3.7	0.39.0	1
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	golang.org/x/text@v0.5.0	0.39.0	1
ghcr.io/ferretdb/ferretdb :2.7.0	5706414241eb	golang.org/x/text@v0.30.0	0.39.0	1
ghcr.io/ferro-labs/ai-gateway :1.2.0	baa285ec0fc9	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/fikaworks/grgate :v0.6.3	7104f60d8972	golang.org/x/text@v0.8.0	0.39.0	1
ghcr.io/firecrawl/firecrawl :2.11.359	87ebe1dc85b0	golang.org/x/text@v0.38.0	0.39.0	1
ghcr.io/fission/fission-bundle :v1.27.0	d353720b037a	golang.org/x/text@v0.38.0	0.39.0	1
ghcr.io/fission/pre-upgrade-checks :v1.27.0	b053fc3539b4	golang.org/x/text@v0.38.0	0.39.0	1
ghcr.io/fission/reporter :v1.27.0	c77cc925debe	golang.org/x/text@v0.38.0	0.39.0	1
ghcr.io/flanksource/postgres :17.6-497383c	ebcf66281fc1	golang.org/x/text@v0.28.0	0.39.0	1
ghcr.io/flatcar/flatcar-linux-update-operator :v0.10.0-rc1	f9063e20b1f6	golang.org/x/text@v0.8.0	0.39.0	1
ghcr.io/flatcar/nebraska :4.0.0	5c9e99ff7167	golang.org/x/text@v0.29.0	0.39.0	1