StackRadar

CVE-2026-56852

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,292
of 17,803 indexed, latest versions
Container images
4,052
deployed by those charts
Fix available
1 of 1
affected package

Infinite loop on invalid input in golang.org/x/text

Carried by container images the latest versions of 3,292 of 17,803 indexed charts deploy, on 4,052 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+44 more0.39.04,052
OSV records
GO-2026-5970

Charts affected

3,292 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher91.4.11 of 6See more

kube-prometheus-stack prometheus-community 91.4.1

1 of the 6 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

682
argo-cdargoOfficialVerified publisher10.9.22 of 3See more

argo-cd argo 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
golang.org/x/text@v0.33.0
0.39.0
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
golang.org/x/text@v0.28.0
0.39.0

Open the chart page →

3,032
ingress-nginxingress-nginx4.15.12 of 2See more

ingress-nginx ingress-nginx 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
golang.org/x/text@v0.35.0
0.39.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

1,541
prometheusprometheus-communityOfficialVerified publisher29.30.11 of 6See more

prometheus prometheus-community 29.30.1

1 of the 6 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.11.374fa117cef2d
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

466
metrics-servermetrics-serverVerified publisher3.14.01 of 1See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

171
harborharborOfficialVerified publisher1.19.25 of 8See more

harbor harbor 1.19.2

5 of the 8 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.2d7b780d23721
golang.org/x/text@v0.37.0
0.39.0
goharbor/harbor-jobservice:v2.15.2f71a4452a095
golang.org/x/text@v0.37.0
0.39.0
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
golang.org/x/text@v0.37.0
0.39.0
goharbor/registry-photon:v2.15.2c4ebef61ceb5
golang.org/x/text@v0.37.0
0.39.0
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

1,738
jenkinsjenkinsciOfficialVerified publisher5.9.631 of 2See more

jenkins jenkinsci 5.9.63

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
jenkins/jenkins:2.568.3-jdk21c1e4c349365f
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

2,557
gitlab-runnergitlabVerified publisher0.93.01 of 1See more

gitlab-runner gitlab 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.4.0a4838319e55b
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

280
airflowapache-airflowOfficialVerified publisher1.22.01 of 4See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/prometheus/statsd-exporter:v0.30.0378cb79c4ac7
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

3,244
velerovmware-tanzu12.2.01 of 1See more

velero vmware-tanzu 12.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

1,091
metallbmetallbVerified publisher0.16.13 of 4See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
golang.org/x/text@v0.36.0
0.39.0
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
golang.org/x/text@v0.24.0
0.39.0
quay.io/metallb/speaker:v0.16.116561e96531e
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

2,173
cloudnative-pgcloudnative-pgVerified publisher0.29.01 of 1See more

cloudnative-pg cloudnative-pg 0.29.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.30.0a2701eb97cdd
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

124
argo-workflowsargoOfficialVerified publisher2.0.61 of 3See more

argo-workflows argo 2.0.6

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-workflows-crdinstaller:v4.1.394a031823f2a
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

279
rancherrancher-stable2.15.12 of 2See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
golang.org/x/text@v0.36.0
0.39.0
rancher/shell:v0.8.1f293af9c635f
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

1,528
oauth2-proxyoauth2-proxyOfficialVerified publisher10.7.01 of 1See more

oauth2-proxy oauth2-proxy 10.7.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.15.310a1165743a1
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

154
kedakedacore2.20.23 of 3See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.20.2fe74c7b88495
golang.org/x/text@v0.37.0
0.39.0
ghcr.io/kedacore/keda-admission-webhooks:2.20.241f74102aba7
golang.org/x/text@v0.37.0
0.39.0
ghcr.io/kedacore/keda-metrics-apiserver:2.20.227286536a8a7
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

1,133
nfs-subdir-external-provisionernfs-subdir-external-provisioner4.0.181 of 1See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

2,745
artifact-hubartifact-hubVerified publisher1.23.05 of 7See more

artifact-hub artifact-hub 1.23.0

5 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
golang.org/x/text@v0.32.0
0.39.0
artifacthub/db-migrator:v1.23.028c13565ac5c
golang.org/x/text@v0.3.3
0.39.0
artifacthub/hub:v1.23.07d3a91c539dc
golang.org/x/text@v0.38.0
0.39.0
artifacthub/scanner:v1.23.02d8365601f0e
golang.org/x/text@v0.32.0
0.39.0
artifacthub/tracker:v1.23.05368d21a6e5c
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

11,020
alloygrafana1.12.11 of 2See more

alloy grafana 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

1,183
prometheus-blackbox-exporterprometheus-communityOfficialVerified publisher11.18.01 of 1See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.28.0e753ff9f3fc4
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

600
deschedulerdescheduler0.36.01 of 1See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/descheduler/descheduler:v0.36.07ca92c0a7b4f
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

583
argo-rolloutsargoOfficialVerified publisher2.43.21 of 1See more

argo-rollouts argo 2.43.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

122
argo-cdargo-cd-oci10.9.22 of 3See more

argo-cd argo-cd-oci 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
golang.org/x/text@v0.33.0
0.39.0
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
golang.org/x/text@v0.28.0
0.39.0

Open the chart page →

3,032
jaegerjaegertracingOfficialVerified publisher4.13.11 of 1See more

jaeger jaegertracing 4.13.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.20.046a886260e04
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

320
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

8,295
mimir-distributedgrafana6.2.03 of 6See more

mimir-distributed grafana 6.2.0

3 of the 6 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/rollout-operator:v0.38.132fe838b79dd
golang.org/x/text@v0.38.0
0.39.0
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/text@v0.18.0
0.39.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/text@v0.18.0
0.39.0

Open the chart page →

4,696
natsnatsVerified publisher2.14.61 of 3See more

nats nats 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.7ffce8bd10338
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

2,308
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
golang.org/x/text@v0.27.0
0.39.0

Open the chart page →

1,775
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

30,645
falcofalcosecurity9.1.03 of 3See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
falcosecurity/falco:0.44.1d0cfe422d6ac
golang.org/x/text@v0.33.0
0.39.0
falcosecurity/falco-driver-loader:0.44.17df783d5269a
golang.org/x/text@v0.33.0
0.39.0
falcosecurity/falcoctl:0.13.00eeb79adc580
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

5,523
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

2,315
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

1,513
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/cephcsi/ceph-csi-operator:v1.0.4c62933fd4083
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

1,472
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

1,093
grafanagrafana-communityVerified publisher13.2.51 of 1See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

449
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.14 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

4 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
golang.org/x/text@v0.33.0
0.39.0
ghcr.io/victoriametrics/sync-job:v0.0.17b6f233532a85
golang.org/x/text@v0.38.0
0.39.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/text@v0.35.0
0.39.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

1,953
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
golang.org/x/text@v0.4.0
0.39.0

Open the chart page →

1,445
kuredkuredOfficialVerified publisher6.1.01 of 1See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/kubereboot/kured:1.23.08dfd3c2e8893
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

231
openebsopenebsOfficialVerified publisher4.6.117 of 35See more

openebs openebs 4.6.1

17 of the 35 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
golang.org/x/text@v0.23.0
0.39.0
grafana/loki:3.4.258a6c186ce78
golang.org/x/text@v0.21.0
0.39.0
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
golang.org/x/text@v0.23.0
0.39.0
openebs/lvm-driver:1.10.141f73aba7f31
golang.org/x/text@v0.32.0
0.39.0
openebs/provisioner-localpv:4.6.099f5116f5cb8
golang.org/x/text@v0.37.0
0.39.0
openebs/zfs-driver:2.11.116f1a74bb249
golang.org/x/text@v0.37.0
0.39.0
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
golang.org/x/text@v0.18.0
0.39.0
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
golang.org/x/text@v0.18.0
0.39.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/text@v0.23.0
0.39.0
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
golang.org/x/text@v0.28.0
0.39.0
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
golang.org/x/text@v0.24.0
0.39.0
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
golang.org/x/text@v0.21.0
0.39.0
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
golang.org/x/text@v0.20.0
0.39.0
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
golang.org/x/text@v0.20.0
0.39.0

Open the chart page →

24,469
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

945
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
golang.org/x/text@v0.11.0
0.39.0
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

2,890
corednscorednsVerified publisher1.47.11 of 1See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
coredns/coredns:1.14.6900f9c109f7a
golang.org/x/text@v0.38.0
0.39.0

Open the chart page →

362
vpafairwinds-stableVerified publisher5.1.04 of 4See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
golang.org/x/text@v0.37.0
0.39.0
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
golang.org/x/text@v0.37.0
0.39.0
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
golang.org/x/text@v0.37.0
0.39.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
golang.org/x/text@v0.7.0
0.39.0

Open the chart page →

1,233
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

2,060
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

3,166
prometheus-pushgatewayprometheus-communityOfficialVerified publisher3.8.01 of 1See more

prometheus-pushgateway prometheus-community 3.8.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.11.374fa117cef2d
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

124
trinotrino1.42.21 of 1See more

trino trino 1.42.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
trinodb/trino:4801565e8cac299
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

1,312
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
golang.org/x/text@v0.26.0
0.39.0

Open the chart page →

13,987
graylogkong-zVerified publisher3.0.331 of 5See more

graylog kong-z 3.0.33

1 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
golang.org/x/text@v0.24.0
0.39.0

Open the chart page →

2,723
connectonepassword-connect2.4.12 of 2See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
1password/connect-api:1.8.2e915c0c84397
golang.org/x/text@v0.34.0
0.39.0
1password/connect-sync:1.8.26297ca6136c0
golang.org/x/text@v0.34.0
0.39.0

Open the chart page →

2,610

Container images carrying it

4,052 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
golang.org/x/text@v0.3.2
0.39.0
1
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller:v0.2.23c708e508197
golang.org/x/text@v0.25.0
0.39.0
1
ghcr.io/metio/jaas:2026.6.15e28772028e56
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/metio/stageset-controller:2026.6.14234b66bb3319
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/metrico/gigapipe:v4.1.6caeb2652ce5e
golang.org/x/text@v0.36.0
0.39.0
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
golang.org/x/text@v0.5.0
0.39.0
1
ghcr.io/middleware-labs/mw-auto-injector:0.1.18512248e17e8
golang.org/x/text@v0.16.0
0.39.0
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
golang.org/x/text@v0.12.0
0.39.0
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
golang.org/x/text@v0.21.0
0.39.0
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
golang.org/x/text@v0.36.0
0.39.0
1
ghcr.io/middleware-labs/mw-kube-agent-config-updater:1.21.0d4edc3f244f4
golang.org/x/text@v0.36.0
0.39.0
1
ghcr.io/middleware-labs/mw-lang-aggregator:0.1.0ae6e13970ec2
golang.org/x/text@v0.16.0
0.39.0
1
ghcr.io/middleware-labs/mw-lang-detector:0.1.2a4776aa2a56b
golang.org/x/text@v0.16.0
0.39.0
1
ghcr.io/middleware-labs/odigos-autoscaler:middleware-test-0.0.14aac0389614e4
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/middleware-labs/odigos-instrumentor:middleware-test-0.0.104ae1fc698a5
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
golang.org/x/text@v0.5.0
0.39.0
1
ghcr.io/middleware-labs/odigos-scheduler:middleware-test-0.0.109741c86aee7
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/middleware-labs/vision-autoscaler:middleware-test-0.0.231f7f89bc6585
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/middleware-labs/vision-instrumentor:middleware-test-0.0.4dfa5907170c4
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
golang.org/x/text@v0.5.0
0.39.0
1
ghcr.io/middleware-labs/vision-scheduler:middleware-test-0.0.33609a075c825
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
golang.org/x/text@v0.24.0
0.39.0
1
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
golang.org/x/text@v0.21.0
0.39.0
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
golang.org/x/text@v0.38.0
0.39.0
1
ghcr.io/mmontes11/echoperator:v0.0.4a544a71c6e3b
golang.org/x/text@v0.3.4
0.39.0
1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
golang.org/x/text@v0.9.0
0.39.0
1
ghcr.io/mondu-ai/eks-pod-identity-webhook:latestc2ac3bad857d
golang.org/x/text@v0.31.0
0.39.0
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/movetokube/postgres-operator:2.4.0def57d85a2da
golang.org/x/text@v0.31.0
0.39.0
1
ghcr.io/mschenck/ddns-kubernetes-controller:latest590d55aab53c
golang.org/x/text@v0.5.0
0.39.0
1
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
golang.org/x/text@v0.19.0
0.39.0
1
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
golang.org/x/text@v0.17.0
0.39.0
1
ghcr.io/mvisonneau/approuvez:v0.1.0441da62e6cb3
golang.org/x/text@v0.3.0
0.39.0
1
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
golang.org/x/text@v0.35.0
0.39.0
1
ghcr.io/nabokihms/events_exporter:latest68d44646e8b2
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/naval-group/butane-operator:v0.1.1-rc285818b510780
golang.org/x/text@v0.33.0
0.39.0
1
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
golang.org/x/text@v0.31.0
0.39.0
1
ghcr.io/nefelim4ag/k8s-ondemand-proxy:0.0.2078b25d48cf7
golang.org/x/text@v0.11.0
0.39.0
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/netbirdio/netbird-operator:v0.8.0ae2c26cfc547
golang.org/x/text@v0.38.0
0.39.0
1
ghcr.io/netsoc/iamd:1.1.22fe6b69b20d7
golang.org/x/text@v0.3.6
0.39.0
1
ghcr.io/netsoc/shhd:0.1.60bb44992b62c
golang.org/x/text@v0.3.5
0.39.0
1
ghcr.io/netsoc/webspaced:0.5.1edc238a538a0
golang.org/x/text@v0.3.6
0.39.0
1
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
golang.org/x/text@v0.33.0
0.39.0
1
ghcr.io/nginx/nginx-gateway-fabric:2.6.6c10f734589e9
golang.org/x/text@v0.38.0
0.39.0
1
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent:0.1.0e0c7cf2415f0
golang.org/x/text@v0.3.6
0.39.0
1
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
golang.org/x/text@v0.30.0
0.39.0
1
ghcr.io/nlamirault/bbox_exporter:1.0.0f5dd1f7794c6
golang.org/x/text@v0.3.7
0.39.0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.