StackRadar

CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,905
of 17,790 indexed, latest versions
Container images
3,263
deployed by those charts
Fix available
2 of 2
affected packages

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,905 of 17,790 indexed charts deploy, on 3,263 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more0.55.03,263
kubernetes-1.34apk1.34.11-r21.34.11-r31
OSV records
CGA-4wg8-vwxq-5g46GO-2026-6303
Also known as
CGA-548p-j75q-3522, CGA-7fgq-fgg6-f7cr, CGA-8q6m-f35p-p88g, CGA-9xqw-wrfv-3c6w, CGA-fmc9-vwrf-6jq2, CGA-h33c-jrc2-36rr, CGA-jqcq-hwv9-6wwp, CGA-mc7r-3393-487f, CGA-p3hc-qw8w-gf4f, CGA-qf3x-28f7-2hcw, CGA-w35x-xg67-9c7c

Charts affected

2,905 by stars
ChartLatestAffected imagesRadar Score
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.55.0
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.55.0

Open the chart page →

16,854
ghostghostVerified publisher0.1.02 of 4See more

ghost ghost 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
golang.org/x/crypto@v0.53.0
0.55.0
litestream/litestream:0.3c5a1e1b01916
golang.org/x/crypto@v0.12.0
0.55.0

Open the chart page →

9,071
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.55.0

Open the chart page →

3,478
github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporterVerified publisher0.2.151 of 1See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b
0.55.0

Open the chart page →

896
gitlab-goproxygitlab-goproxy0.2.21 of 1See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
golang.org/x/crypto@v0.6.0
0.55.0

Open the chart page →

1,332
gitlab-mr-conformgitlab-mr-conform0.5.21 of 1See more

gitlab-mr-conform gitlab-mr-conform 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/chrxmvtik/gitlab-mr-conform:0.5.2b2eb79fc99cb
golang.org/x/crypto@v0.48.0
0.55.0

Open the chart page →

428
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
golang.org/x/crypto@v0.10.0
0.55.0

Open the chart page →

2,616
prometheus-container-resource-exportergkarthiks0.3.11 of 1See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gkarthics/container-resource-exporter:latest6799af333e8a
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.55.0

Open the chart page →

2,218
glassflow-etlglassflowVerified publisher0.5.217 of 16See more

glassflow-etl glassflow 0.5.21

7 of the 16 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
library/nats:2.12.3-alpine88fe8e0e09d6
golang.org/x/crypto@v0.46.0
0.55.0
natsio/nats-box:0.19.28031d190c7ee
golang.org/x/crypto@v0.31.0
0.55.0
natsio/prometheus-nats-exporter:0.17.326c826662ac8
golang.org/x/crypto@v0.38.0
0.55.0
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
golang.org/x/crypto@v0.26.0
0.55.0
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
golang.org/x/crypto@v0.49.0
0.55.0
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
golang.org/x/crypto@v0.41.0
0.55.0
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
golang.org/x/crypto@v0.45.0
0.55.0

Open the chart page →

12,115
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
golang.org/x/crypto@v0.41.0
0.55.0

Open the chart page →

770
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
golang.org/x/crypto@v0.39.0
0.55.0

Open the chart page →

2,634
glidergliderVerified publisher0.1.51 of 1See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
nadoo/glider:0.1638aadefbd607
golang.org/x/crypto@v0.26.0
0.55.0

Open the chart page →

894
gnp-stackgnp-stack0.0.54 of 14See more

gnp-stack gnp-stack 0.0.5

4 of the 14 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
golang.org/x/crypto@v0.42.0
0.55.0
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
golang.org/x/crypto@v0.48.0
0.55.0
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/crypto@v0.36.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
golang.org/x/crypto@v0.40.0
0.55.0

Open the chart page →

7,683
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
goccx/go-file-server:latestf4b3ebea0303
golang.org/x/crypto@v0.25.0
0.55.0

Open the chart page →

2,222
gofitgofit0.0.11 of 1See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/bamaas/gofit:0.0.132b6a174b419
golang.org/x/crypto@v0.22.0
0.55.0

Open the chart page →

650
gorsegorse-io0.4.23 of 4See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.55.0
zhenghaoz/gorse-server:0.4.1239c565685b01
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.55.0
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.55.0

Open the chart page →

4,401
gosmee-clientgosmee-clientVerified publisher0.1.31 of 1See more

gosmee-client gosmee-client 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/chmouel/gosmee:v0.32.060b8db1f68cc
golang.org/x/crypto@v0.53.0
0.55.0

Open the chart page →

261
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.55.0
library/mongo:latest5211c51171f5
golang.org/x/crypto@v0.54.0
0.55.0

Open the chart page →

22,587
Governify-Falcongovernify0.1.03 of 10See more

Governify-Falcon governify 0.1.0

3 of the 10 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.55.0
library/mongo:latest5211c51171f5
golang.org/x/crypto@v0.54.0
0.55.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
0.55.0

Open the chart page →

24,379
harborgpg-dev1.18.34 of 8See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
golang.org/x/crypto@v0.45.0
0.55.0
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
golang.org/x/crypto@v0.45.0
0.55.0
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
golang.org/x/crypto@v0.45.0
0.55.0
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
golang.org/x/crypto@v0.46.0
0.55.0

Open the chart page →

3,406
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
golang.org/x/crypto@v0.17.0
0.55.0
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
golang.org/x/crypto@v0.17.0
0.55.0

Open the chart page →

19,311
kube-prometheus-stackgpg-dev84.0.03 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
golang.org/x/crypto@v0.49.0
0.55.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/crypto@v0.49.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/crypto@v0.46.0
0.55.0

Open the chart page →

4,303
kubernetes-dashboardgpg-dev7.5.03 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

3 of the 5 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.7.060595892c2cf
golang.org/x/crypto@v0.23.0
0.55.0
kubernetesui/dashboard-auth:1.1.307135c09e9ff
golang.org/x/crypto@v0.21.0
0.55.0
kubernetesui/dashboard-web:1.4.04445b31a2c25
golang.org/x/crypto@v0.23.0
0.55.0

Open the chart page →

6,078
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
golang.org/x/crypto@v0.18.0
0.55.0

Open the chart page →

1,078
opentelemetry-demogpg-dev0.33.87 of 27See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
golang.org/x/crypto@v0.27.0
0.55.0
jaegertracing/all-in-one:1.53.060e65bfffe1f
golang.org/x/crypto@v0.17.0
0.55.0
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
golang.org/x/crypto@v0.29.0
0.55.0
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
golang.org/x/crypto@v0.25.0
0.55.0
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
golang.org/x/crypto@v0.23.0
0.55.0
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
golang.org/x/crypto@v0.17.0
0.55.0
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
golang.org/x/crypto@v0.28.0
0.55.0

Open the chart page →

49,362
prometheusgpg-dev29.2.16 of 6See more

prometheus gpg-dev 29.2.1

6 of the 6 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.1693faa0b8724
golang.org/x/crypto@v0.49.0
0.55.0
quay.io/prometheus/alertmanager:v0.32.058e117eabcce
golang.org/x/crypto@v0.49.0
0.55.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/crypto@v0.49.0
0.55.0
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
golang.org/x/crypto@v0.49.0
0.55.0
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
golang.org/x/crypto@v0.43.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/crypto@v0.46.0
0.55.0

Open the chart page →

3,281
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
golang.org/x/crypto@v0.47.0
0.55.0

Open the chart page →

592
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
golang.org/x/crypto@v0.48.0
0.55.0

Open the chart page →

1,280
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
golang.org/x/crypto@v0.45.0
0.55.0

Open the chart page →

1,562
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
prom/graphite-exporter:latestc1a266f63a84
golang.org/x/crypto@v0.53.0
0.55.0

Open the chart page →

6,148
cloudcost-exportergrafana1.1.131 of 1See more

cloudcost-exporter grafana 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/cloudcost-exporter:v1.12.0eeb2cfecb23e
golang.org/x/crypto@v0.52.0
0.55.0

Open the chart page →

160
grafana-cloud-onboardinggrafana0.4.73 of 5See more

grafana-cloud-onboarding grafana 0.4.7

3 of the 5 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
golang.org/x/crypto@v0.47.0
0.55.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/crypto@v0.49.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/crypto@v0.46.0
0.55.0

Open the chart page →

4,681
grafana-samplinggrafana1.1.72 of 2See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
golang.org/x/crypto@v0.41.0
0.55.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/crypto@v0.36.0
0.55.0

Open the chart page →

3,370
mimir-openshift-experimentalgrafana2.1.03 of 4See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e
0.55.0
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392
0.55.0
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392
0.55.0

Open the chart page →

17,780
pyroscope-monitoringgrafana0.1.14 of 6See more

pyroscope-monitoring grafana 0.1.1

4 of the 6 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
golang.org/x/crypto@v0.41.0
0.55.0
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
golang.org/x/crypto@v0.39.0
0.55.0
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/crypto@v0.36.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
golang.org/x/crypto@v0.40.0
0.55.0

Open the chart page →

8,269
synthetic-monitoring-agentgrafana-communityVerified publisher1.19.01 of 1See more

synthetic-monitoring-agent grafana-community 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/synthetic-monitoring-agent:v0.65.0fe3e095283f0
golang.org/x/crypto@v0.54.0
0.55.0

Open the chart page →

213
prometheusgrafana-uxadax26.0.16 of 6See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
golang.org/x/crypto@v0.28.0
0.55.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
golang.org/x/crypto@v0.28.0
0.55.0
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
golang.org/x/crypto@v0.18.0
0.55.0
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/crypto@v0.21.0
0.55.0
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
golang.org/x/crypto@v0.26.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/crypto@v0.28.0
0.55.0

Open the chart page →

5,312
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.55.0

Open the chart page →

7,519
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
golang.org/x/crypto@v0.27.0
0.55.0

Open the chart page →

7,956
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
library/mongo:85211c51171f5
golang.org/x/crypto@v0.54.0
0.55.0

Open the chart page →

5,347
armada-executorgresearch0.22.81 of 1See more

armada-executor gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gresearch/armada-executor:latest393aff4aa8f2
golang.org/x/crypto@v0.51.0
0.55.0

Open the chart page →

714
armada-lookout-ingestergresearch0.22.81 of 1See more

armada-lookout-ingester gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gresearch/armada-lookout-ingester:latest3df14cda1855
golang.org/x/crypto@v0.51.0
0.55.0

Open the chart page →

714
armada-lookout-migrationgresearch0.22.81 of 1See more

armada-lookout-migration gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gresearch/armada-lookout:latestf5e3226f1d33
golang.org/x/crypto@v0.51.0
0.55.0

Open the chart page →

714
armada-scheduler-migrationgresearch0.22.81 of 1See more

armada-scheduler-migration gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gresearch/armada-scheduler:latest6141a6213fcb
golang.org/x/crypto@v0.51.0
0.55.0

Open the chart page →

714
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
golang.org/x/crypto@v0.22.0
0.55.0

Open the chart page →

1,398
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.55.0

Open the chart page →

14,327
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
golang.org/x/crypto@v0.25.0
0.55.0

Open the chart page →

2,598
loki-proxygroundcover0.1.11 of 1See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.55.0

Open the chart page →

2,182
routergroundcover1.12.3621 of 7See more

router groundcover 1.12.362

1 of the 7 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
golang.org/x/crypto@v0.54.0
0.55.0

Open the chart page →

6,070
temporalgroundcover1.12.3622 of 2See more

temporal groundcover 1.12.362

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
golang.org/x/crypto@v0.52.0
0.55.0
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
golang.org/x/crypto@v0.50.0
0.55.0

Open the chart page →

2,027

Container images carrying it

3,263 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
golang.org/x/crypto@v0.36.0
0.55.0
2
ghcr.io/kluster-manager/cluster-auth:v0.5.1fba6fb872281
golang.org/x/crypto@v0.46.0
0.55.0
2
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
golang.org/x/crypto@v0.14.0
0.55.0
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
golang.org/x/crypto@v0.36.0
0.55.0
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
golang.org/x/crypto@v0.36.0
0.55.0
2
ghcr.io/opencost/opencost:1.121.2de2784434527
golang.org/x/crypto@v0.53.0
0.55.0
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
golang.org/x/crypto@v0.9.0
0.55.0
2
ghcr.io/sigstore/fulcio:v1.8.8ef72cf56c64b
golang.org/x/crypto@v0.53.0
0.55.0
2
ghcr.io/sigstore/scaffolding/createcerts7f59f7c08d1a
golang.org/x/crypto@v0.43.0
0.55.0
2
ghcr.io/spiffe/oidc-discovery-provider:1.15.3bb95f13c2b4e
golang.org/x/crypto@v0.54.0
0.55.0
2
ghcr.io/spiffe/spire-server:1.15.34082f30d3e0d
golang.org/x/crypto@v0.54.0
0.55.0
2
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
golang.org/x/crypto@v0.36.0
0.55.0
2
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
golang.org/x/crypto@v0.53.0
0.55.0
2
ghcr.io/wg-easy/wg-easy:15:15.4.00e7bc9d34e86
golang.org/x/crypto@v0.37.0
0.55.0
2
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner:1.16.0d47f43484055
golang.org/x/crypto@v0.36.0
0.55.0
2
public.ecr.aws/cloudnatix/llmariner/api-usage-server:1.16.08f9c32b866b0
golang.org/x/crypto@v0.36.0
0.55.0
2
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server:1.8.0364b3ff0fcb7
golang.org/x/crypto@v0.36.0
0.55.0
2
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server:0.10.22d28f9e3eab4
golang.org/x/crypto@v0.36.0
0.55.0
2
public.ecr.aws/cloudnatix/llmariner/file-manager-server:1.11.0301216788e93
golang.org/x/crypto@v0.36.0
0.55.0
2
public.ecr.aws/cloudnatix/llmariner/job-manager-server:1.27.0fe9de719f91e
golang.org/x/crypto@v0.36.0
0.55.0
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
golang.org/x/crypto@v0.36.0
0.55.0
2
public.ecr.aws/cloudnatix/llmariner/model-manager-server:1.27.0c057dcdd9ef3
golang.org/x/crypto@v0.36.0
0.55.0
2
public.ecr.aws/cloudnatix/llmariner/rbac-server:1.19.1df1adeb86679
golang.org/x/crypto@v0.36.0
0.55.0
2
public.ecr.aws/cloudnatix/llmariner/user-manager-server:1.27.1628a14449241
golang.org/x/crypto@v0.36.0
0.55.0
2
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.55.0
2
public.ecr.aws/gravitational/tbot-distroless:18.11.04ba5ace31fea
golang.org/x/crypto@v0.54.0
0.55.0
2
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
golang.org/x/crypto@v0.49.0
0.55.0
2
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
golang.org/x/crypto@v0.49.0
0.55.0
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
golang.org/x/crypto@v0.27.0
0.55.0
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
golang.org/x/crypto@v0.45.0
0.55.0
2
quay.io/argoproj/argo-rollouts:v1.10.0187630ba7228
golang.org/x/crypto@v0.53.0
0.55.0
2
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
golang.org/x/crypto@v0.54.0
0.55.0
2
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
golang.org/x/crypto@v0.42.0
0.55.0
2
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.55.0
2
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.55.0
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
golang.org/x/crypto@v0.26.0
0.55.0
2
quay.io/brancz/kube-rbac-proxy:v0.22.1e8cad21b2f9a
golang.org/x/crypto@v0.53.0
0.55.0
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
golang.org/x/crypto@v0.50.0
0.55.0
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.55.0
2
quay.io/cilium/cilium:v1.20.22939231d0d3e
golang.org/x/crypto@v0.53.0
0.55.0
2
quay.io/cilium/operator-generic:v1.20.264d8798350e8
golang.org/x/crypto@v0.53.0
0.55.0
2
quay.io/coreos/etcd:v3.5.628cb0630cb85
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.55.0
2
quay.io/coreos/etcd:v3.7.13c66a5191d37
golang.org/x/crypto@v0.52.0
0.55.0
2
quay.io/coreos/etcd:v3.6.12702d7b4881c6
golang.org/x/crypto@v0.49.0
0.55.0
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.55.0
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.55.0
2
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.55.0
2
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.55.0
2
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.55.0
2
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.55.0
2

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.