CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,888; of 17,781 indexed, latest versions
Container images: 3,237; deployed by those charts
Fix available: 2 of 2; affected packages

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,888 of 17,781 indexed charts deploy, on 3,237 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more	0.55.0	3,237
kubernetes-1.34apk	1.34.11-r2	1.34.11-r3	1

OSV records: CGA-4wg8-vwxq-5g46 GO-2026-6303
Also known as: CGA-548p-j75q-3522, CGA-7fgq-fgg6-f7cr, CGA-8q6m-f35p-p88g, CGA-9xqw-wrfv-3c6w, CGA-fmc9-vwrf-6jq2, CGA-h33c-jrc2-36rr, CGA-jqcq-hwv9-6wwp, CGA-mc7r-3393-487f, CGA-p3hc-qw8w-gf4f, CGA-qf3x-28f7-2hcw, CGA-w35x-xg67-9c7c

Charts affected

2,888 by stars

Chart

Latest

Affected images

Radar Score

zabbixzabbix-community

7.1.0

1 of 5 See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

13,664

netdatanetdata

3.7.173

1 of 1 See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.11.0	c45c71eb23ff	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

3,092

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	golang.org/x/crypto@v0.48.0	0.55.0
1password/connect-sync :1.8.2	6297ca6136c0	golang.org/x/crypto@v0.48.0	0.55.0

Open the chart page →

2,550

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

1,955

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.55.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.55.0

Open the chart page →

2,483

opencostopencost

2.5.31

1 of 2 See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.2	de2784434527	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

265

openfaasopenfaas

15.0.13

5 of 6 See more

openfaas openfaas 15.0.13

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	golang.org/x/crypto@v0.15.0	0.55.0
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	golang.org/x/crypto@v0.41.0	0.55.0
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	golang.org/x/crypto@v0.30.0	0.55.0
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

3,543

prometheus-elasticsearch-exporterprometheus-community

7.4.0

1 of 1 See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/elasticsearch-exporter :v1.11.0	a056739b095d	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

flux2fluxcd-community

2.19.0

7 of 7 See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/image-automation-controller :v1.2.2	6b0b16ab2115	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/image-reflector-controller :v1.2.2	27e6bad1dac5	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/kustomize-controller :v1.9.2	3aecec8bafdb	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/notification-controller :v1.9.2	9ce503e7bcb8	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

2,951

gatekeepergatekeeper

3.23.1

1 of 3 See more

gatekeeper gatekeeper 3.23.1

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.23.1	dfc6fc78753f	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

495

vault-secrets-operatorhashicorp

1.5.1

2 of 2 See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
hashicorp/vault-secrets-operator :1.5.1	458c842add32	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/crypto@v0.26.0	0.55.0

Open the chart page →

1,040

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

1,367

snapshot-controllerpiraeus-charts

5.2.0

1 of 1 See more

snapshot-controller piraeus-charts 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

228

rocketchatrocketchat-server

7.0.2

4 of 12 See more

rocketchat rocketchat-server 7.0.2

4 of the 12 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.55.0
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.55.0
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

12,279

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

2,103

k10kasten

9.0.5

2 of 23 See more

k10 kasten 9.0.5

2 of the 23 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gcr.io/kasten-images/configmap-reload :9.0.5	1de689e621c5	golang.org/x/crypto@v0.54.0	0.55.0
gcr.io/kasten-images/prometheus :9.0.5	da2bf307c353	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

1,880

ceph-csi-cephfsceph-csi

3.17.1

5 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

4,061

ceph-csi-rbdceph-csi

3.17.1

5 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

4,061

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	golang.org/x/crypto@v0.49.0	0.55.0

Open the chart page →

6,342

csi-driver-nfscsi-driver-nfs

4.13.4

3 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.4

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/crypto@v0.52.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/crypto@v0.47.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

3,324

mariadb-operatormariadb-operator

26.6.0

1 of 1 See more

mariadb-operator mariadb-operator 26.6.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/mariadb-operator/mariadb-operator :26.6.0	a5e17b48f08e	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

377

portainerportainer

245.0.0

1 of 1 See more

portainer portainer 245.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.45.0	511f3f06c96f	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

277

atlantisatlantis

6.15.0

1 of 1 See more

atlantis atlantis 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

1,891

codercoder-v2

2.37.1

1 of 1 See more

coder coder-v2 2.37.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/coder/coder :v2.37.1	0c6994bb4c5a	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

187

grafana-agentgrafana

0.44.2

1 of 2 See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/crypto@v0.31.0	0.55.0

Open the chart page →

3,475

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0

Open the chart page →

2,453

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/crypto@v0.9.0	0.55.0
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/crypto@v0.7.0	0.55.0

Open the chart page →

32,259

flaggerflagger

1.45.0

1 of 1 See more

flagger flagger 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger :1.45.0	15b372d35012	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

222

mesherymeshery

1.0.69

1 of 1 See more

meshery meshery 1.0.69

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	9b68e81d392e	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

1,407

prometheus-mysql-exporterprometheus-community

2.15.0

1 of 1 See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :v0.20.0	abed8dac117b	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

victoria-metrics-operatorvictoriametrics

0.67.3

1 of 1 See more

victoria-metrics-operator victoriametrics 0.67.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.74.1	7310c4a80b94	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

109

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.55.0

Open the chart page →

10,622

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	golang.org/x/crypto@v0.35.0	0.55.0

Open the chart page →

2,221

signozsignoz

0.141.1

2 of 5 See more

signoz signoz 0.141.1

2 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
signoz/signoz :v0.141.1	c10fa03e103c	golang.org/x/crypto@v0.52.0	0.55.0
signoz/signoz-otel-collector :v0.144.9	72aa1e4c1ec5	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

7,568

keelkeel

1.2.2

1 of 1 See more

keel keel 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/keel-hq/keel :0.22.3	315e188a07c2	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

809

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/crypto@v0.32.0	0.55.0

Open the chart page →

716

prometheus-mongodb-exporterprometheus-community

3.22.0

1 of 1 See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
percona/mongodb_exporter :0.53.0	0214e482b2cd	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

231

node-local-dnsdeliveryhero

2.9.2

1 of 1 See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/crypto@v0.43.0	0.55.0

Open the chart page →

1,685

fission-allfission-charts

1.27.0

1 of 3 See more

fission-all fission-charts 1.27.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fission/fission-bundle :v1.27.0	d353720b037a	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

296

tempografana-community

3.0.0

1 of 1 See more

tempo grafana-community 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/tempo :3.0.3	0296560ac66f	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

148

rancherrancher-latest

2.15.1

2 of 2 See more

rancher rancher-latest 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/crypto@v0.48.0	0.55.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

1,456

sealed-secretsbitnami

2.5.19

1 of 1 See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	golang.org/x/crypto@v0.41.0	0.55.0

Open the chart page →

643

difydouban

0.10.0

2 of 6 See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	golang.org/x/crypto@v0.40.0	0.55.0
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

19,391

kubesharkkubeshark-helm-charts

53.4.0

2 of 3 See more

kubeshark kubeshark-helm-charts 53.4.0

2 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
kubeshark/hub :v53.4	6d3f22525a0e	golang.org/x/crypto@v0.54.0	0.55.0
kubeshark/worker :v53.4	b226490dfa11	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

825

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

2,119

mongodbcloudpirates-mongodb

0.18.13

1 of 1 See more

mongodb cloudpirates-mongodb 0.18.13

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/mongo :8.3.9	81a1c8842a09	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

922

kube-image-keeperenix

2.3.1

1 of 1 See more

kube-image-keeper enix 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/enix/kube-image-keeper :2.3.1	d3ccf28495c3	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

opensearch-operatoropensearch-operator

3.0.2

1 of 1 See more

opensearch-operator opensearch-operator 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-operator :3.0.0-alpha	f78bbdd1a386	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

603

pxc-operatorpercona

1.20.1

1 of 1 See more

pxc-operator percona 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
percona/percona-xtradb-cluster-operator :1.20.0	ac4d0995c71e	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

392

pulsarapache

4.7.0

5 of 10 See more

pulsar apache 4.7.0

5 of the 10 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/crypto@v0.46.0	0.55.0
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/crypto@v0.47.0	0.55.0
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

9,864

Container images carrying it

3,237 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/jont828/cluster-api-visualizer :v1.5.0	678ba6833297	golang.org/x/crypto@v0.40.0	0.55.0	2
ghcr.io/juanfont/headscale :0.29.3 :v0.29.3	0e7f1c6e4ce6	golang.org/x/crypto@v0.53.0	0.55.0	2
ghcr.io/juniorjpdj/containers/openssl-kubectl :1.36.1-r3	58afba209ea0	golang.org/x/crypto@v0.46.0	0.55.0	2
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	golang.org/x/crypto@v0.36.0	0.55.0	2
ghcr.io/kluster-manager/cluster-auth :v0.5.1	fba6fb872281	golang.org/x/crypto@v0.46.0	0.55.0	2
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	golang.org/x/crypto@v0.14.0	0.55.0	2
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	golang.org/x/crypto@v0.36.0	0.55.0	2
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	golang.org/x/crypto@v0.36.0	0.55.0	2
ghcr.io/opencost/opencost :1.121.2	de2784434527	golang.org/x/crypto@v0.53.0	0.55.0	2
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	golang.org/x/crypto@v0.9.0	0.55.0	2
ghcr.io/sigstore/fulcio :v1.8.8	ef72cf56c64b	golang.org/x/crypto@v0.53.0	0.55.0	2
ghcr.io/sigstore/scaffolding/createcerts	7f59f7c08d1a	golang.org/x/crypto@v0.43.0	0.55.0	2
ghcr.io/spiffe/oidc-discovery-provider :1.15.3	bb95f13c2b4e	golang.org/x/crypto@v0.54.0	0.55.0	2
ghcr.io/spiffe/spire-server :1.15.3	4082f30d3e0d	golang.org/x/crypto@v0.54.0	0.55.0	2
ghcr.io/stashed/stash-ui-server :v0.23.0	47cffbc65700	golang.org/x/crypto@v0.36.0	0.55.0	2
ghcr.io/voyagermesh/gateway :v1.8.2	4237fd16a3cb	golang.org/x/crypto@v0.53.0	0.55.0	2
ghcr.io/wg-easy/wg-easy :15 :15.4.0	0e7bc9d34e86	golang.org/x/crypto@v0.37.0	0.55.0	2
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner :1.16.0	d47f43484055	golang.org/x/crypto@v0.36.0	0.55.0	2
public.ecr.aws/cloudnatix/llmariner/api-usage-server :1.16.0	8f9c32b866b0	golang.org/x/crypto@v0.36.0	0.55.0	2
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	golang.org/x/crypto@v0.36.0	0.55.0	2
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	golang.org/x/crypto@v0.36.0	0.55.0	2
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	golang.org/x/crypto@v0.36.0	0.55.0	2
public.ecr.aws/cloudnatix/llmariner/job-manager-server :1.27.0	fe9de719f91e	golang.org/x/crypto@v0.36.0	0.55.0	2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	golang.org/x/crypto@v0.36.0	0.55.0	2
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	golang.org/x/crypto@v0.36.0	0.55.0	2
public.ecr.aws/cloudnatix/llmariner/rbac-server :1.19.1	df1adeb86679	golang.org/x/crypto@v0.36.0	0.55.0	2
public.ecr.aws/cloudnatix/llmariner/user-manager-server :1.27.1	628a14449241	golang.org/x/crypto@v0.36.0	0.55.0	2
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0	2
public.ecr.aws/gravitational/tbot-distroless :18.11.0	4ba5ace31fea	golang.org/x/crypto@v0.54.0	0.55.0	2
public.ecr.aws/p3k6k6h3/mdai-event-hub :0.1.11	18cae836e9c7	golang.org/x/crypto@v0.49.0	0.55.0	2
public.ecr.aws/p3k6k6h3/mdai-gateway :0.1.10	0dfb323978f6	golang.org/x/crypto@v0.49.0	0.55.0	2
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	golang.org/x/crypto@v0.27.0	0.55.0	2
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	golang.org/x/crypto@v0.45.0	0.55.0	2
quay.io/argoproj/argo-rollouts :v1.10.0	187630ba7228	golang.org/x/crypto@v0.53.0	0.55.0	2
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	golang.org/x/crypto@v0.54.0	0.55.0	2
quay.io/brancz/kube-rbac-proxy :v0.20.0	147cb28fea35	golang.org/x/crypto@v0.42.0	0.55.0	2
quay.io/brancz/kube-rbac-proxy :v0.14.1	58d91a5faaf8	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0	2
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.55.0	2
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/crypto@v0.26.0	0.55.0	2
quay.io/brancz/kube-rbac-proxy :v0.22.1	e8cad21b2f9a	golang.org/x/crypto@v0.53.0	0.55.0	2
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0	2
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.55.0	2
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0	2
quay.io/coreos/etcd :v3.7.1	3c66a5191d37	golang.org/x/crypto@v0.52.0	0.55.0	2
quay.io/coreos/etcd :v3.6.12	702d7b4881c6	golang.org/x/crypto@v0.49.0	0.55.0	2
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.55.0	2
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0	2
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.55.0	2
quay.io/iver-wharf/wharf-cmd :v0.8.2	e98d13459cdc	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0	2
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.55.0	2