CVE-2026-56852

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.005; 40th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,378; of 17,813 indexed, latest versions
Container images: 4,102; deployed by those charts
Fix available: 1 of 1; affected package

Infinite loop on invalid input in golang.org/x/text

Carried by container images the latest versions of 3,378 of 17,813 indexed charts deploy, on 4,102 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/textgolang	v0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+44 more	0.39.0	4,102

OSV records: GO-2026-5970

Charts affected

3,378 by stars

Chart

Latest

Affected images

Radar Score

workspacekaito

0.12.0

2 of 7 See more

workspace kaito 0.12.0

2 of the 7 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner :v5.2.0	afdfa3da79df	golang.org/x/text@v0.21.0	0.39.0
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v1.13.2	fa8eba9843ff	golang.org/x/text@v0.21.0	0.39.0

Open the chart page →

2,539

jenkinskallakruparaju-jenkins

1.0.0

1 of 1 See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	golang.org/x/text@v0.23.0	0.39.0

Open the chart page →

2,549

crashlooping-pod-deleterkarljorgensen

0.1.3

1 of 1 See more

crashlooping-pod-deleter karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	golang.org/x/text@v0.23.0	0.39.0

Open the chart page →

1,155

dockerdkarljorgensen

0.1.0

1 of 1 See more

dockerd karljorgensen 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
library/docker :28.5.2-dind	2a232a42256f	golang.org/x/text@v0.25.0	0.39.0

Open the chart page →

2,055

k10restorekasten

8.0.14

1 of 1 See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
gcr.io/kasten-images/restorectl :8.0.14	5a0884f9a90c	golang.org/x/text@v0.31.0	0.39.0

Open the chart page →

1,508

kbot-self-hostedkbot-self-hosted

0.1.8

1 of 7 See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.30	206a6c708fc6	golang.org/x/text@v0.30.0	0.39.0

Open the chart page →

33,242

kcmkcm

1.12.0

5 of 12 See more

kcm kcm 1.12.0

5 of the 12 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.2	37396519f399	golang.org/x/text@v0.37.0	0.39.0
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	golang.org/x/text@v0.38.0	0.39.0
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	golang.org/x/text@v0.38.0	0.39.0
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	golang.org/x/text@v0.38.0	0.39.0
quay.io/reactiveops/rbac-manager :v1.9.5	87e3f461446f	golang.org/x/text@v0.32.0	0.39.0

Open the chart page →

3,330

keeper-injectorkeeper-injector

0.10.0

2 of 2 See more

keeper-injector keeper-injector 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
keeper/injector-webhook :0.10.0	aeb5476b95f0	golang.org/x/text@v0.31.0	0.39.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/text@v0.17.0	0.39.0

Open the chart page →

758

keeper-injectorkeeper-security

0.11.3

2 of 2 See more

keeper-injector keeper-security 0.11.3

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
keeper/injector-webhook :0.11.3	3eb609f3e60c	golang.org/x/text@v0.37.0	0.39.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/text@v0.17.0	0.39.0

Open the chart page →

505

kestra-starterkestra

2.0.2

2 of 5 See more

kestra-starter kestra 2.0.2

2 of the 5 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
library/docker :dind-rootless	c876e00a0d81	golang.org/x/text@v0.38.0	0.39.0
versity/versitygw :v1.1.0	f730e0dbc1ef	golang.org/x/text@v0.33.0	0.39.0

Open the chart page →

5,633

keycloak-operator-legacykeycloak-operator-legacy

1.0.0

1 of 1 See more

keycloak-operator-legacy keycloak-operator-legacy 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.2-legacy	15fa0ed662b1	golang.org/x/text@v0.3.4	0.39.0

Open the chart page →

5,068

csi-driver-nfskeyporttech

0.1.4

1 of 2 See more

csi-driver-nfs keyporttech 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
keyporttech/csi-driver-nfs :2.0.0	5bd7955ea2f1	golang.org/x/text@v0.3.1-0.20181227161524-e6919f6577db	0.39.0

Open the chart page →

3,365

gogskeyporttech

0.1.3

1 of 3 See more

gogs keyporttech 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
gogs/gogs :0.12.3	0195b095d0b2	golang.org/x/text@v0.3.3	0.39.0

Open the chart page →

3,525

helm-mongodb-operatorkeyporttech

0.1.0

1 of 1 See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	golang.org/x/text@v0.3.3	0.39.0

Open the chart page →

8,841

connectkfirfer

1.15.0

2 of 2 See more

connect kfirfer 1.15.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
1password/connect-api :1.7.2	6aa94cf713f9	golang.org/x/text@v0.12.0	0.39.0
1password/connect-sync :1.7.2	fe527ed9d81f	golang.org/x/text@v0.12.0	0.39.0

Open the chart page →

2,787

dex-k8s-authenticatorkfirfer

0.0.3

1 of 1 See more

dex-k8s-authenticator kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/text@v0.3.0	0.39.0

Open the chart page →

2,792

keelkfirfer

1.0.5

1 of 1 See more

keel kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
keelhq/keel :0.19.2	02ac4ea616c4	golang.org/x/text@v0.9.0	0.39.0

Open the chart page →

2,083

kubernetes-replicatorkfirfer

2.9.1

1 of 1 See more

kubernetes-replicator kfirfer 2.9.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-replicator :v2.9.1	baf5f784398b	golang.org/x/text@v0.8.0	0.39.0

Open the chart page →

864

mysqldumpkfirfer

2.8.0

1 of 1 See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
kfirfer/gcloud-mysql :1.0.3	c257c1e0e8b9	golang.org/x/text@v0.13.0	0.39.0

Open the chart page →

3,525

pod-cleanupkfirfer

0.0.4

1 of 1 See more

pod-cleanup kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup :latest	4369f3ba1d9a	golang.org/x/text@v0.28.0	0.39.0

Open the chart page →

743

prometheus-elasticsearch-exporterkfirfer

6.5.1

1 of 1 See more

prometheus-elasticsearch-exporter kfirfer 6.5.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/elasticsearch-exporter :v1.8.0	073dd360de2c	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

779

kiaekiae

0.1.6

6 of 9 See more

kiae kiae 0.1.6

6 of the 9 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
grafana/loki :2.6.1	1ee60f980950	golang.org/x/text@v0.3.7	0.39.0
grafana/promtail :2.6.1	072527b12cdf	golang.org/x/text@v0.3.7	0.39.0
istio/pilot :1.15.2	db08d6963975	golang.org/x/text@v0.3.7	0.39.0
otel/opentelemetry-collector-contrib :0.63.1	dfb3a55ea8c9	golang.org/x/text@v0.4.0	0.39.0
ghcr.io/dexidp/dex :v2.35.3	13964b29d63e	golang.org/x/text@v0.3.7	0.39.0
ghcr.io/kiaedev/kiae :latest	ebd03028ff6a	golang.org/x/text@v0.3.7	0.39.0

Open the chart page →

19,288

local-path-provisionerkir4h

0.0.35

1 of 1 See more

local-path-provisioner kir4h 0.0.35

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.35	34ff0847cc47	golang.org/x/text@v0.23.0	0.39.0

Open the chart page →

754

process-exporterkir4h

1.0.1

1 of 1 See more

process-exporter kir4h 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ncabatoff/process-exporterdigest-pinned	6f0549dc24e9	golang.org/x/text@v0.21.0	0.39.0

Open the chart page →

742

cdashkitware

0.19.0

1 of 3 See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	golang.org/x/text@v0.18.0	0.39.0

Open the chart page →

12,478

rabbitmq-cluster-operatorklicktipp

0.4.2

3 of 3 See more

rabbitmq-cluster-operator klicktipp 0.4.2

3 of the 3 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ghcr.io/klicktipp/kubectl :1.36.3	0c2402d92b5c	golang.org/x/text@v0.33.0	0.39.0
ghcr.io/rabbitmq/cluster-operator :2.20.1	a96853470256	golang.org/x/text@v0.36.0	0.39.0
ghcr.io/rabbitmq/messaging-topology-operator :1.19.1	24c4649ef3ef	golang.org/x/text@v0.36.0	0.39.0

Open the chart page →

826

rabbitmq-topology-operatorklicktipp

0.4.1

2 of 2 See more

rabbitmq-topology-operator klicktipp 0.4.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ghcr.io/klicktipp/kubectl :1.36.3	0c2402d92b5c	golang.org/x/text@v0.33.0	0.39.0
ghcr.io/rabbitmq/messaging-topology-operator :1.19.1	24c4649ef3ef	golang.org/x/text@v0.36.0	0.39.0

Open the chart page →

557

kloudlite-platformkloudlite

1.1.5

1 of 3 See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/text@v0.8.0	0.39.0

Open the chart page →

1,971

klumklum

1.17.1

1 of 1 See more

klum klum 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ghcr.io/jadolg/klum :v0.8.17	c66cc93f9d03	golang.org/x/text@v0.37.0	0.39.0

Open the chart page →

357

klustre-csi-pluginklustre-csi-plugin

0.1.1

1 of 2 See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

1,474

knative-servingknative-serving

1.18.3

7 of 7 See more

knative-serving knative-serving 1.18.3

7 of the 7 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinned	0d5f740b4224	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned	697668be7893	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	031408ec516f	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	3502bb5aa60f	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpadigest-pinned	7405faeb7636	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	5b93308a392c	golang.org/x/text@v0.24.0	0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	50831d9aaa69	golang.org/x/text@v0.24.0	0.39.0

Open the chart page →

3,777

kollektorkollektor

1.0.5

1 of 1 See more

kollektor kollektor 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
pannoi/kollektor :1.0.5	9559617788fc	golang.org/x/text@v0.13.0	0.39.0

Open the chart page →

717

ingress-nginxkomailo-helm-charts

1.0.0

2 of 2 See more

ingress-nginx komailo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.11.3	d56f135b6462	golang.org/x/text@v0.19.0	0.39.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.4	a9f03b34a3cb	golang.org/x/text@v0.17.0	0.39.0

Open the chart page →

1,548

k8s-metrics-serverkomailo-helm-charts

1.2.0

1 of 1 See more

k8s-metrics-server komailo-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	golang.org/x/text@v0.38.0	0.39.0

Open the chart page →

171

metallbkomailo-helm-charts

1.2.4

3 of 4 See more

metallb komailo-helm-charts 1.2.4

3 of the 4 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.16.1	f51ab515de9c	golang.org/x/text@v0.36.0	0.39.0
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	golang.org/x/text@v0.24.0	0.39.0
quay.io/metallb/speaker :v0.16.1	16561e96531e	golang.org/x/text@v0.36.0	0.39.0

Open the chart page →

2,176

komiserkomiser-eks

3.1.10

1 of 1 See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
tailwarden/komiser :3.1.10	3f68c8ae7993	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

1,272

komoplanekomodor

0.1.8

1 of 1 See more

komoplane komodor 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
komodorio/komoplane :0.2.1	9678d02c3f2e	golang.org/x/text@v0.31.0	0.39.0

Open the chart page →

955

simple-oauth2-proxykostiantyn-matsebora-helm-charts

0.3.7

1 of 1 See more

simple-oauth2-proxy kostiantyn-matsebora-helm-charts 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.7.0	9ed7eaf72050	golang.org/x/text@v0.18.0	0.39.0

Open the chart page →

927

kovi-tile38kovi-charts

0.1.1

1 of 1 See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
tile38/tile38 :1.33.4	afb7e82f9485	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

1,208

cadvisorkrakazyabra

1.0.1

1 of 1 See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.40.0	135327c978de	golang.org/x/text@v0.3.4	0.39.0

Open the chart page →

3,186

authnkrateo

0.23.0

1 of 1 See more

authn krateo 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ghcr.io/krateoplatformops/authn :0.23.0	791c8f9d885a	golang.org/x/text@v0.23.0	0.39.0

Open the chart page →

678

installerkrateo

2.7.1

2 of 2 See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/text@v0.14.0	0.39.0
ghcr.io/krateoplatformops/installer/installer :0.6.3	a7e922ddac55	golang.org/x/text@v0.31.0	0.39.0

Open the chart page →

3,277

installer-pre-upgradekrateo

2.7.1

1 of 1 See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

2,543

sweeperkrateo

0.2.1

2 of 2 See more

sweeper krateo 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.36.0	1ee9df6316d4	golang.org/x/text@v0.33.0	0.39.0
ghcr.io/krateoplatformops/eventstack/sweeper :0.1.0	5d5e24119ff1	golang.org/x/text@v0.23.0	0.39.0

Open the chart page →

1,506

kubeflowkromanow94-kubeflow

0.5.1

16 of 30 See more

kubeflow kromanow94-kubeflow 0.5.1

16 of the 30 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
kubeflow/model-registry :v0.2.9	5783f6db428f	golang.org/x/text@v0.17.0	0.39.0
kubeflow/training-operator :v1-04f9f13	dabb76dbda29	golang.org/x/text@v0.14.0	0.39.0
kubeflowkatib/katib-controller :v0.17.0	72f14e03b9e1	golang.org/x/text@v0.14.0	0.39.0
kubeflowkatib/katib-db-manager :v0.17.0	916a7695b0dd	golang.org/x/text@v0.14.0	0.39.0
kubeflowkatib/katib-ui :v0.17.0	7a41c508deb1	golang.org/x/text@v0.14.0	0.39.0
kubeflownotebookswg/kfam :v1.9.2	2060a2ede788	golang.org/x/text@v0.13.0	0.39.0
kubeflownotebookswg/notebook-controller :v1.9.2	0f14bd28fdd5	golang.org/x/text@v0.3.7	0.39.0
kubeflownotebookswg/poddefaults-webhook :v1.9.2	bde88d98ad74	golang.org/x/text@v0.11.0	0.39.0
kubeflownotebookswg/profile-controller :v1.9.2	f05a5538ae7e	golang.org/x/text@v0.3.7	0.39.0
kubeflownotebookswg/pvcviewer-controller :v1.9.2	9815e9b1728f	golang.org/x/text@v0.14.0	0.39.0
kubeflownotebookswg/tensorboard-controller :v1.9.2	6536a9f61193	golang.org/x/text@v0.13.0	0.39.0
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	golang.org/x/text@v0.14.0	0.39.0
gcr.io/ml-pipeline/cache-server :2.3.0	293941ee4f65	golang.org/x/text@v0.14.0	0.39.0
gcr.io/ml-pipeline/persistenceagent :2.3.0	109ac1b38c41	golang.org/x/text@v0.14.0	0.39.0
gcr.io/ml-pipeline/scheduledworkflow :2.3.0	f7e67e0bc071	golang.org/x/text@v0.14.0	0.39.0
gcr.io/ml-pipeline/viewer-crd-controller :2.3.0	8cf8213d69e4	golang.org/x/text@v0.14.0	0.39.0

Open the chart page →

71,574

kron-aapm-sidecarkron-aapm-sidecar

1.1.0

1 of 1 See more

kron-aapm-sidecar kron-aapm-sidecar 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
krontechnology/aapm-sidecar-injector :1.1.0	e078d54c1711	golang.org/x/text@v0.3.7	0.39.0

Open the chart page →

2,112

lndkronkltd

0.3.9

3 of 4 See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
thesisrobot/lnd :v0.14.1-beta	d94c8dbf6dac	golang.org/x/text@v0.3.6	0.39.0
thesisrobot/loop :v0.11.1-beta	89ae07e787ca	golang.org/x/text@v0.3.1-0.20180807135948-17ff2d5776d2	0.39.0
thesisrobot/pool :v0.3.3-alpha	2d1c388a4bda	golang.org/x/text@v0.3.1-0.20180807135948-17ff2d5776d2	0.39.0

Open the chart page →

8,476

casdoorkrzwiatrzyk

1.0.0

1 of 1 See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
casbin/casdoor :v1.224.0	66f836ef778b	golang.org/x/text@v0.3.7	0.39.0

Open the chart page →

3,650

nocodbkrzwiatrzyk

0.0.1

1 of 1 See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.100.2	b0b91ec2a2dd	golang.org/x/text@v0.3.7	0.39.0

Open the chart page →

2,321

pipecdkrzwiatrzyk

0.39.0

1 of 3 See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container image	Digest	Package	Fixed in
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	golang.org/x/text@v0.3.2	0.39.0

Open the chart page →

3,821

Container images carrying it

4,102 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/loafoe/go-hello-world :v2.13.0	d3fb171f20e1	golang.org/x/text@v0.28.0	0.39.0	1
ghcr.io/loafoe/mt-mcp-grafana :v0.1.1	2332d9b47475	golang.org/x/text@v0.38.0	0.39.0	1
ghcr.io/loafoe/mt-mcp-proxy :v0.1.0	221835f9340f	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/loafoe/picoclaw :v0.0.19	42e1b6862913	golang.org/x/text@v0.36.0	0.39.0	1
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	golang.org/x/text@v0.12.0	0.39.0	1
ghcr.io/lockdep/stackradar-scanner :0.4.0	73cbeb990cf4	golang.org/x/text@v0.33.0	0.39.0	1
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	golang.org/x/text@v0.6.0	0.39.0	1
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	golang.org/x/text@v0.16.0	0.39.0	1
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	golang.org/x/text@v0.14.0	0.39.0	1
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	golang.org/x/text@v0.29.0	0.39.0	1
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	golang.org/x/text@v0.31.0	0.39.0	1
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	golang.org/x/text@v0.12.0	0.39.0	1
ghcr.io/loft-sh/vcluster :0.16.4	84f70425f4dd	golang.org/x/text@v0.13.0	0.39.0	1
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	golang.org/x/text@v0.13.0	0.39.0	1
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	golang.org/x/text@v0.26.0	0.39.0	1
ghcr.io/loft-sh/vcluster-platform :4.12.1	9bc88940affc	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	golang.org/x/text@v0.30.0	0.39.0	1
ghcr.io/loxilb-io/kube-loxilb :latest	6f65e53e252d	golang.org/x/text@v0.23.0	0.39.0	1
ghcr.io/loxilb-io/loxilb :latest	c7ede1bab641	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	golang.org/x/text@v0.3.5	0.39.0	1
ghcr.io/lukaszraczylo/jobs-manager-operator :0.1.15	e6239e2838d7	golang.org/x/text@v0.33.0	0.39.0	1
ghcr.io/lukaszraczylo/kubemirror :0.9.22	65f266df3289	golang.org/x/text@v0.38.0	0.39.0	1
ghcr.io/lukaszraczylo/kubernetes-images-sync-operator :0.5.57	a424948c8143	golang.org/x/text@v0.32.0	0.39.0	1
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	golang.org/x/text@v0.16.0	0.39.0	1
ghcr.io/m0nsterrr/cert-manager-webhook-infomaniak :v0.1.5	990dbf506d41	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	golang.org/x/text@v0.14.0	0.39.0	1
ghcr.io/manishchaudhary101/kube-argus :latest	8e3869d31c70	golang.org/x/text@v0.38.0	0.39.0	1
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	golang.org/x/text@v0.17.0	0.39.0	1
ghcr.io/mariadb-operator/mariadb-operator :26.10.0	3be6c0fb8094	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/masucchi/branchdb :0.1.4	7ea1820c1da1	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/masucchi/branchdb-operator :0.1.4	c16578615a43	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/text@v0.3.8-0.20211004125949-5bd84dd9b33b	0.39.0	1
ghcr.io/mcman2017/qt-vault :v0.1.2	852edf54c850	golang.org/x/text@v0.23.0	0.39.0	1
ghcr.io/media-streaming-mesh/msm-admission-webhook :latest	3e811d67189c	golang.org/x/text@v0.21.0	0.39.0	1
ghcr.io/media-streaming-mesh/msm-cni :latest	fe0b89b818a6	golang.org/x/text@v0.21.0	0.39.0	1
ghcr.io/media-streaming-mesh/msm-cp :latest	8cb08fc7010b	golang.org/x/text@v0.16.0	0.39.0	1
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	golang.org/x/text@v0.16.0	0.39.0	1
ghcr.io/media-streaming-mesh/msm-nc :latest	296fe4970e38	golang.org/x/text@v0.14.0	0.39.0	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/text@v0.3.2	0.39.0	1
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller :v0.2.2	3c708e508197	golang.org/x/text@v0.25.0	0.39.0	1
ghcr.io/metio/jaas :2026.6.15	e28772028e56	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/metio/stageset-controller :2026.6.14	234b66bb3319	golang.org/x/text@v0.37.0	0.39.0	1
ghcr.io/metrico/gigapipe :v4.1.6	caeb2652ce5e	golang.org/x/text@v0.36.0	0.39.0	1
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/text@v0.5.0	0.39.0	1
ghcr.io/middleware-labs/mw-auto-injector :0.1.1	8512248e17e8	golang.org/x/text@v0.16.0	0.39.0	1
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/text@v0.12.0	0.39.0	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	golang.org/x/text@v0.21.0	0.39.0	1
ghcr.io/middleware-labs/mw-kube-agent :1.21.0	ff23f452813a	golang.org/x/text@v0.36.0	0.39.0	1
ghcr.io/middleware-labs/mw-kube-agent-config-updater :1.21.0	d4edc3f244f4	golang.org/x/text@v0.36.0	0.39.0	1
ghcr.io/middleware-labs/mw-lang-aggregator :0.1.0	ae6e13970ec2	golang.org/x/text@v0.16.0	0.39.0	1