StackRadar

CVE-2026-56852

Unscored

Advisory

Published 14 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,385
of 17,821 indexed, latest versions
Container images
4,120
deployed by those charts
Fix available
1 of 1
affected package

Infinite loop on invalid input in golang.org/x/text

Carried by container images the latest versions of 3,385 of 17,821 indexed charts deploy, on 4,120 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+44 more0.39.04,120
OSV records
GO-2026-5970

Charts affected

3,385 by stars
ChartLatestAffected imagesRadar Score
natswenerme2.14.61 of 3See more

nats wenerme 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.7ffce8bd10338
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

2,310
prometheus-blackbox-exporterwenerme11.18.01 of 1See more

prometheus-blackbox-exporter wenerme 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.28.0e753ff9f3fc4
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

600
yugabytewenerme2026.1.11 of 1See more

yugabyte wenerme 2026.1.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
yugabytedb/yugabyte:2026.1.1.0-b91de2e00278645
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

355
wharf-ainowharf-helmVerified publisher0.1.55 of 7See more

wharf-aino wharf-helm 0.1.5

5 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
golang.org/x/text@v0.3.7
0.39.0
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
golang.org/x/text@v0.3.7
0.39.0
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
golang.org/x/text@v0.3.7
0.39.0
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
golang.org/x/text@v0.3.7
0.39.0
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

13,489
wharf-cmdwharf-helmVerified publisher0.3.31 of 1See more

wharf-cmd wharf-helm 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

3,437
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

56,318
external-monitoringwiremindVerified publisher0.3.01 of 1See more

external-monitoring wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.24.03af31f8bd1ad
golang.org/x/text@v0.9.0
0.39.0

Open the chart page →

1,301
kubemodwiremindVerified publisher0.1.51 of 2See more

kubemod wiremind 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
kubemod/kubemod:v0.13.0cadca39288ad
golang.org/x/text@v0.3.3
0.39.0

Open the chart page →

3,031
db-backup-retentionwjentner-chartsVerified publisher1.1.01 of 1See more

db-backup-retention wjentner-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/wjentner/k8s-db-backup-retention:v1.1.08027bb46d1f4
golang.org/x/text@v0.16.0
0.39.0

Open the chart page →

1,044
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

8,524
workflows-informerworkflows-informerVerified publisher0.4.41 of 1See more

workflows-informer workflows-informer 0.4.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-informer:0.4.4bfbadc49635d
golang.org/x/text@v0.13.0
0.39.0

Open the chart page →

1,181
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
golang.org/x/text@v0.11.0
0.39.0

Open the chart page →

9,302
redis-db-assignment-operatorwyrihaximusnetVerified publisher1.0.61 of 1See more

redis-db-assignment-operator wyrihaximusnet 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

2,236
x402-k8s-operatorx402-k8s-operator0.1.01 of 2See more

x402-k8s-operator x402-k8s-operator 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/razvanmacovei/x402-k8s-operator:0.1.0bf3407fad182
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

272
prometheusalertxxl-job-adminVerified publisher1.4.01 of 1See more

prometheusalert xxl-job-admin 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.28192368b0578
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

1,116
heistyouniqx-ossVerified publisher1.1.2091 of 1See more

heist youniqx-oss 1.1.209

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/youniqx/heist:v1.1.209c43b3a9d98ae
golang.org/x/text@v0.17.0
0.39.0

Open the chart page →

806
yugawareyugabyteVerified publisher2026.1.11 of 3See more

yugaware yugabyte 2026.1.1

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
prom/prometheus:v3.12.069f524141883
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

2,620
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

2,874
tailscale-relayzeet0.1.51 of 1See more

tailscale-relay zeet 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
zeetdev/tailscale-relay:v1.24.21967aa2840b6
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

2,166
memoszekker6Verified publisher0.55.01 of 1See more

memos zekker6 0.55.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
neosmemo/memos:0.30.071a5b4738d1b
golang.org/x/text@v0.36.0
0.39.0

Open the chart page →

707
cloudflare-zero-trust-operatorzelic-io0.7.11 of 1See more

cloudflare-zero-trust-operator zelic-io 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/bojanzelic/cloudflare-zero-trust-operator:0.7.1f4b2dbc19a78
golang.org/x/text@v0.21.0
0.39.0

Open the chart page →

591
velero-notificationszokeber-velero-notificationsVerified publisher0.1.101 of 2See more

velero-notifications zokeber-velero-notifications 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/zokeber/velero-notifications:0.0.176d84f6c4ce20
golang.org/x/text@v0.35.0
0.39.0

Open the chart page →

729
aaqaaqVerified publisher0.3.01 of 1See more

aaq aaq 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/kubevirt/aaq-operator:v1.7.0d28a2daa5b15
golang.org/x/text@v0.31.0
0.39.0

Open the chart page →

1,017
abstract-nodeabstract-nodeVerified publisher0.1.491 of 2See more

abstract-node abstract-node 0.1.49

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/abstract-foundation/zksync-external-node-sidecar:v1.0.03e705d0eb1ce
golang.org/x/text@v0.7.0
0.39.0

Open the chart page →

4,527
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

2,451
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
golang.org/x/text@v0.3.8
0.39.0

Open the chart page →

1,843
popeyeadnoctemVerified publisher0.3.01 of 1See more

popeye adnoctem 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
golang.org/x/text@v0.21.0
0.39.0

Open the chart page →

1,342
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

30,728
adresserviceadresservice1.1.01 of 5See more

adresservice adresservice 1.1.0

1 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

7,459
bootaerokube1.0.12 of 4See more

boot aerokube 1.0.1

2 of the 4 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/aerokube/boot:1.0.13c269612053f
golang.org/x/text@v0.14.0
0.39.0
quay.io/aerokube/keygen:1.0.1578934444f04
golang.org/x/text@v0.8.0
0.39.0

Open the chart page →

7,964
browser-opsaerokube2.6.71 of 1See more

browser-ops aerokube 2.6.7

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/aerokube/browser-ops:2.6.7807c1bb67086
golang.org/x/text@v0.14.0
0.39.0

Open the chart page →

553
moonaerokube1.1.372 of 3See more

moon aerokube 1.1.37

2 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
aerokube/moon:1.9.17da76ca51220d
golang.org/x/text@v0.15.0
0.39.0
aerokube/moon-api:1.9.176b6323e75785
golang.org/x/text@v0.15.0
0.39.0

Open the chart page →

2,473
aerospike-kubernetes-operatoraerospike4.5.01 of 1See more

aerospike-kubernetes-operator aerospike 4.5.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
aerospike/aerospike-kubernetes-operator:4.5.070a9eeb991b8
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

638
aerospike-backup-serviceaerospike-helmVerified publisher2.0.131 of 1See more

aerospike-backup-service aerospike-helm 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
aerospike/aerospike-backup-service:3.5.1be40d709c583
golang.org/x/text@v0.34.0
0.39.0

Open the chart page →

637
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
conduction/agendaservice-php:latest9cfeeb6c7c20
golang.org/x/text@v0.3.2
0.39.0

Open the chart page →

7,220
agentgateway-route-reconcileragentgateway-route-reconciler0.3.11 of 1See more

agentgateway-route-reconciler agentgateway-route-reconciler 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
ghcr.io/ricardozd/agentgateway-route-reconciler:0.3.1846f6e407c96
golang.org/x/text@v0.33.0
0.39.0

Open the chart page →

259
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
golang.org/x/text@v0.8.0
0.39.0

Open the chart page →

1,734
mt-channel-brokerahhhhVerified publisher0.1.03 of 3See more

mt-channel-broker ahhhh 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filterdigest-pinnedd675f211a40f
golang.org/x/text@v0.19.0
0.39.0
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingressdigest-pinnedec4b544499ba
golang.org/x/text@v0.19.0
0.39.0
gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_brokerdigest-pinned395f4ff1bd34
golang.org/x/text@v0.19.0
0.39.0

Open the chart page →

2,631
net-istioahhhhVerified publisher0.1.12 of 2See more

net-istio ahhhh 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllerdigest-pinnede70bc675f977
golang.org/x/text@v0.19.0
0.39.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhookdigest-pinned7d76a6d42d13
golang.org/x/text@v0.19.0
0.39.0

Open the chart page →

1,128
net-kourierahhhhVerified publisher0.18.11 of 1See more

net-kourier ahhhh 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourierdigest-pinned15a601147ef4
golang.org/x/text@v0.24.0
0.39.0

Open the chart page →

515
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
golang.org/x/text@v0.21.0
0.39.0

Open the chart page →

5,021
airbyteairbyte-v2Verified publisher2.3.02 of 10See more

airbyte airbyte-v2 2.3.0

2 of the 10 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
airbyte/minio:RELEASE.2023-11-20T22-40-07Zfdae972eaf0e
golang.org/x/text@v0.13.0
0.39.0
temporalio/auto-setup:1.27.2b44cbfeb43db
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

12,189
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
golang.org/x/text@v0.3.7
0.39.0

Open the chart page →

4,559
akeyless-csi-providerakeyless-services-helmVerified publisher1.0.41 of 1See more

akeyless-csi-provider akeyless-services-helm 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
akeyless/akeyless-csi-provider:lateste48bddc5dd72
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

314
akeyless-secrets-injectionakeyless-services-helmVerified publisher2.3.01 of 1See more

akeyless-secrets-injection akeyless-services-helm 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
akeyless/k8s-webhook-server:0.39.0996cd9afb3b4
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

394
akriakri0.12.551 of 3See more

akri akri 0.12.55

1 of the 3 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
golang.org/x/text@v0.3.6
0.39.0

Open the chart page →

1,546
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/text@v0.21.0
0.39.0

Open the chart page →

13,802
akto-hybrid-redactakto1.44.71 of 5See more

akto-hybrid-redact akto 1.44.7

1 of the 5 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
keelhq/keel:latest73714afb4443
golang.org/x/text@v0.21.0
0.39.0

Open the chart page →

4,863
akto-k8s-agentakto0.1.21 of 1See more

akto-k8s-agent akto 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
aktosecurity/mirror-api-logging:k8s_agentc1313b1ff2ed
golang.org/x/text@v0.37.0
0.39.0

Open the chart page →

269
akto-k8s-ebpfakto0.1.31 of 1See more

akto-k8s-ebpf akto 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56852.

Container imageDigestPackageFixed in
aktosecurity/mirror-api-logging:k8s_ebpffcf8be10bead
golang.org/x/text@v0.23.0
0.39.0

Open the chart page →

838

Container images carrying it

4,120 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-resizer:v1.3.06e0546563b18
golang.org/x/text@v0.3.6
0.39.0
1
registry.k8s.io/sig-storage/csi-resizer:v1.12.0ab774734705a
golang.org/x/text@v0.17.0
0.39.0
1
registry.k8s.io/sig-storage/csi-snapshotter:v6.1.0291334908ddf
golang.org/x/text@v0.3.7
0.39.0
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.0.25f051159c95f
golang.org/x/text@v0.17.0
0.39.0
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.15f4bb469fec5
golang.org/x/text@v0.21.0
0.39.0
1
registry.k8s.io/sig-storage/csi-snapshotter:v4.2.1818f35653f2e
golang.org/x/text@v0.3.6
0.39.0
1
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
golang.org/x/text@v0.3.7
0.39.0
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
golang.org/x/text@v0.3.4
0.39.0
1
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
golang.org/x/text@v0.5.0
0.39.0
1
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
golang.org/x/text@v0.11.0
0.39.0
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
golang.org/x/text@v0.23.0
0.39.0
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
golang.org/x/text@v0.38.0
0.39.0
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
golang.org/x/text@v0.23.0
0.39.0
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
golang.org/x/text@v0.3.2
0.39.0
1
registry.k8s.io/sig-storage/objectstorage-sidecar:v0.2.2c7166a73a303
golang.org/x/text@v0.25.0
0.39.0
1
registry.k8s.io/sig-storage/snapshot-controller:v8.2.1472fa35a89da
golang.org/x/text@v0.21.0
0.39.0
1
registry.k8s.io/sig-storage/snapshot-controller:v4.2.195587f8777d7
golang.org/x/text@v0.3.6
0.39.0
1
registry.k8s.io/sig-storage/snapshot-controller:v6.2.198bab4eaf23c
golang.org/x/text@v0.5.0
0.39.0
1
registry.k8s.io/sig-storage/snapshot-controller:v6.3.1ce6ca3c0e30b
golang.org/x/text@v0.13.0
0.39.0
1
registry.k8s.io/sig-storage/volume-data-source-validator:v1.0.0d35884236461
golang.org/x/text@v0.3.7
0.39.0
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.