StackRadar

CVE-2026-56852

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,390
of 17,832 indexed, latest versions
Container images
4,107
deployed by those charts
Fix available
1 of 1
affected package

Infinite loop on invalid input in golang.org/x/text

Carried by container images the latest versions of 3,390 of 17,832 indexed charts deploy, on 4,107 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+45 more0.39.04,107
OSV records
GO-2026-5970

Charts affected

3,390 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

4,107 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/nicholaswilde/wiki:version-900b76a6c4f261d8f5e
golang.org/x/text@v0.3.3
0.39.0
1
ghcr.io/nicholaswilde/writefreely:version-0.13.1c3c8481b7e56
golang.org/x/text@v0.3.0
0.39.0
1
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent:0.1.0e0c7cf2415f0
golang.org/x/text@v0.3.6
0.39.0
1
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
golang.org/x/text@v0.30.0
0.39.0
1
ghcr.io/nlamirault/bbox_exporter:1.0.0f5dd1f7794c6
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/nlamirault/freebox-exporter:1.0.02d522b664e12
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
golang.org/x/text@v0.26.0
0.39.0
1
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
golang.org/x/text@v0.27.0
0.39.0
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
golang.org/x/text@v0.7.0
0.39.0
1
ghcr.io/nousefreak/clusterfan:v0.1.04ea05e2a7b57
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/nowakeai/kube-insight:v0.1.475849fe6548a
golang.org/x/text@v0.38.0
0.39.0
1
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
golang.org/x/text@v0.21.0
0.39.0
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
golang.org/x/text@v0.29.0
0.39.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
golang.org/x/text@v0.32.0
0.39.0
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
golang.org/x/text@v0.23.0
0.39.0
1
ghcr.io/okteto/backend:0.0.0-2026-08-2406f2f6f4ed76
golang.org/x/text@v0.31.0
0.39.0
1
ghcr.io/okteto/buildkit:0.0.0-2026-08-03:0.0.0-2026-08-17:0.0.0-2026-08-2414527ca5d2a9
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/okteto/ingress-nginx-chroot:0.0.0-2026-08-17:0.0.0-2026-08-24265eedb3954b
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/okteto/okteto:3.22.04585017f52f6
golang.org/x/text@v0.28.0
0.39.0
1
ghcr.io/okteto/reloader:0.0.0-2026-08-03:0.0.0-2026-08-17:0.0.0-2026-08-2404a3fce657c4
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/oliverbaehler/cloudflare-tunnel-ingress-controller:0.2.30aec31e36d95
golang.org/x/text@v0.23.0
0.39.0
1
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
golang.org/x/text@v0.21.0
0.39.0
1
ghcr.io/omkar-shelke25/admission-webhook-no-latest:sha-33165455976a1d3236a
golang.org/x/text@v0.23.0
0.39.0
1
ghcr.io/onedr0p/exportarr:v1.6.160cf3d44aa0b
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/openappsec/smartsync:latest580d68c50cc7
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/openappsec/smartsync-shared-files:latest30c1daa0b33e
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
golang.org/x/text@v0.12.0
0.39.0
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/openclarity/kubeclarity-sbom-db:v2.23.3cef2b88bfc76
golang.org/x/text@v0.13.0
0.39.0
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
golang.org/x/text@v0.34.0
0.39.0
1
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
golang.org/x/text@v0.21.0
0.39.0
1
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/openfaasltd/gcp-pubsub-connector:0.0.18df071f5b719
golang.org/x/text@v0.22.0
0.39.0
1
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
golang.org/x/text@v0.23.0
0.39.0
1
ghcr.io/openfaasltd/jetstream-queue-worker:0.3.37d96366e208b1
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/openfaasltd/kafka-connector:0.7.160e58eac0e2f7
golang.org/x/text@v0.32.0
0.39.0
1
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
golang.org/x/text@v0.21.0
0.39.0
1
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
golang.org/x/text@v0.36.0
0.39.0
1
ghcr.io/open-feature/flagd:v0.16.032234e63c1d0
golang.org/x/text@v0.35.0
0.39.0
1
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
golang.org/x/text@v0.16.0
0.39.0
1
ghcr.io/open-feature/open-feature-operator:v0.9.3b37a442c0497
golang.org/x/text@v0.35.0
0.39.0
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
golang.org/x/text@v0.32.0
0.39.0
1
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
golang.org/x/text@v0.38.0
0.39.0
1
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
golang.org/x/text@v0.28.0
0.39.0
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
golang.org/x/text@v0.38.0
0.39.0
1
ghcr.io/openstack-exporter/openstack-exporter:1.7.0e5146a7dd515
golang.org/x/text@v0.9.0
0.39.0
1
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
golang.org/x/text@v0.15.0
0.39.0
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.