StackRadar

CVE-2026-56852

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,391
of 17,832 indexed, latest versions
Container images
4,114
deployed by those charts
Fix available
1 of 1
affected package

Infinite loop on invalid input in golang.org/x/text

Carried by container images the latest versions of 3,391 of 17,832 indexed charts deploy, on 4,114 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+45 more0.39.04,114
OSV records
GO-2026-5970

Charts affected

3,391 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

4,114 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/openlit/openlit:1.24.02434560e8f0e
golang.org/x/text@v0.32.0
0.39.0
1
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
golang.org/x/text@v0.38.0
0.39.0
1
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
golang.org/x/text@v0.28.0
0.39.0
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
golang.org/x/text@v0.38.0
0.39.0
1
ghcr.io/openstack-exporter/openstack-exporter:1.7.0e5146a7dd515
golang.org/x/text@v0.9.0
0.39.0
1
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
golang.org/x/text@v0.15.0
0.39.0
1
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
golang.org/x/text@v0.15.0
0.39.0
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.9.026f82b148dfe
golang.org/x/text@v0.36.0
0.39.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
golang.org/x/text@v0.34.0
0.39.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
golang.org/x/text@v0.26.0
0.39.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
golang.org/x/text@v0.32.0
0.39.0
1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.150.089490ef63b72
golang.org/x/text@v0.35.0
0.39.0
1
ghcr.io/open-telemetry/opentelemetry-operator/target-allocator:0.124.08936271cf56a
golang.org/x/text@v0.23.0
0.39.0
1
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
golang.org/x/text@v0.28.0
0.39.0
1
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
golang.org/x/text@v0.33.0
0.39.0
1
ghcr.io/ot-container-kit/redis-operator/redis-operator:v0.18.090bfeb2e0d71
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
golang.org/x/text@v0.36.0
0.39.0
1
ghcr.io/oxidecomputer/cluster-api-provider-oxide:0.2.37b05d3bbfbfa
golang.org/x/text@v0.38.0
0.39.0
1
ghcr.io/paganuzzi/ngrokoperator:latest5a10cd095699
golang.org/x/text@v0.3.2
0.39.0
1
ghcr.io/paperclipinc/openclaw-operator:v0.40.038e0da31c520
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/paperclipinc/paperclip-operator:v0.19.10984b890eb38
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
golang.org/x/text@v0.28.0
0.39.0
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
golang.org/x/text@v0.28.0
0.39.0
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
golang.org/x/text@v0.31.0
0.39.0
1
ghcr.io/pbufio/registry:v0.4.177a36c035b4b
golang.org/x/text@v0.30.0
0.39.0
1
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
golang.org/x/text@v0.28.0
0.39.0
1
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
golang.org/x/text@v0.28.0
0.39.0
1
ghcr.io/performancecopilot/archive-analysis:latestba9f5a44ad68
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
golang.org/x/text@v0.16.0
0.39.0
1
ghcr.io/petersr/spiffile-operator:0.1.4411070249287
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
golang.org/x/text@v0.3.2
0.39.0
1
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
golang.org/x/text@v0.36.0
0.39.0
1
ghcr.io/postfinance/kubelet-csr-approver:v1.2.156469ef517d2b
golang.org/x/text@v0.33.0
0.39.0
1
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
golang.org/x/text@v0.21.0
0.39.0
1
ghcr.io/projectcapsule/capsule-addon-fluxcd:0.2.2e0baf564b706
golang.org/x/text@v0.21.0
0.39.0
1
ghcr.io/projectcontour/contour:v1.30.0b12824d7eb58
golang.org/x/text@v0.16.0
0.39.0
1
ghcr.io/projectcontour/contour:v1.33.0cd6e13fa882d
golang.org/x/text@v0.28.0
0.39.0
1
ghcr.io/projection-operator/projection:0.3.2d06374430a17
golang.org/x/text@v0.36.0
0.39.0
1
ghcr.io/prymitive/karma:v0.13190a10c5c6793
golang.org/x/text@v0.36.0
0.39.0
1
ghcr.io/prymitive/karma:v0.85d06892218680
golang.org/x/text@v0.3.6
0.39.0
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
golang.org/x/text@v0.3.7
0.39.0
1
ghcr.io/pulumi-labs/pulumi-exporter:0.1.45415d5a46e7d
golang.org/x/text@v0.37.0
0.39.0
1
ghcr.io/pulumi/pulumi-esc-csi-provider:0.1.13fb058e93502
golang.org/x/text@v0.21.0
0.39.0
1
ghcr.io/punchplatform/operator:8.1-dev2a9536c8cee2
golang.org/x/text@v0.14.0
0.39.0
1
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
golang.org/x/text@v0.20.0
0.39.0
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.