CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,905; of 17,790 indexed, latest versions
Container images: 3,263; deployed by those charts
Fix available: 2 of 2; affected packages

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,905 of 17,790 indexed charts deploy, on 3,263 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more	0.55.0	3,263
kubernetes-1.34apk	1.34.11-r2	1.34.11-r3	1

OSV records: CGA-4wg8-vwxq-5g46 GO-2026-6303
Also known as: CGA-548p-j75q-3522, CGA-7fgq-fgg6-f7cr, CGA-8q6m-f35p-p88g, CGA-9xqw-wrfv-3c6w, CGA-fmc9-vwrf-6jq2, CGA-h33c-jrc2-36rr, CGA-jqcq-hwv9-6wwp, CGA-mc7r-3393-487f, CGA-p3hc-qw8w-gf4f, CGA-qf3x-28f7-2hcw, CGA-w35x-xg67-9c7c

Charts affected

2,905 by stars

Chart

Latest

Affected images

Radar Score

istiogetindata

1.11.1

2 of 2 See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0

Open the chart page →

16,854

ghostghost

0.1.0

2 of 4 See more

ghost ghost 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :latest	51c9cefcb456	golang.org/x/crypto@v0.53.0	0.55.0
litestream/litestream :0.3	c5a1e1b01916	golang.org/x/crypto@v0.12.0	0.55.0

Open the chart page →

9,071

gitanagitana

1.4.0

1 of 1 See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.55.0

Open the chart page →

3,478

github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporter

0.2.15

1 of 1 See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/kalgurn/grl-exporter :v3.2.0	bd109b2bda38	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.55.0

Open the chart page →

896

gitlab-goproxygitlab-goproxy

0.2.2

1 of 1 See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/crypto@v0.6.0	0.55.0

Open the chart page →

1,332

gitlab-mr-conformgitlab-mr-conform

0.5.2

1 of 1 See more

gitlab-mr-conform gitlab-mr-conform 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/chrxmvtik/gitlab-mr-conform :0.5.2	b2eb79fc99cb	golang.org/x/crypto@v0.48.0	0.55.0

Open the chart page →

428

apid-helpergkarthiks

0.1.4

1 of 1 See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/crypto@v0.10.0	0.55.0

Open the chart page →

2,616

prometheus-container-resource-exportergkarthiks

0.3.1

1 of 1 See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gkarthics/container-resource-exporter :latest	6799af333e8a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.55.0

Open the chart page →

2,218

glassflow-etlglassflow

0.5.21

7 of 16 See more

glassflow-etl glassflow 0.5.21

7 of the 16 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/nats :2.12.3-alpine	88fe8e0e09d6	golang.org/x/crypto@v0.46.0	0.55.0
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.55.0
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	golang.org/x/crypto@v0.38.0	0.55.0
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/crypto@v0.26.0	0.55.0
ghcr.io/glassflow/glassflow-etl-be :v3.2.0	20f066d0f631	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/crypto@v0.41.0	0.55.0
ghcr.io/glassflow/glassflow-etl-migration :v3.2.0	7db1a1bf3dae	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

12,115

glassflow-operatorglassflow-operator

0.8.5

1 of 3 See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/crypto@v0.41.0	0.55.0

Open the chart page →

770

glauthglauth

0.3.17

1 of 2 See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/glauth :2.5	2e6e09fa77dd	golang.org/x/crypto@v0.39.0	0.55.0

Open the chart page →

2,634

gliderglider

0.1.5

1 of 1 See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
nadoo/glider :0.16	38aadefbd607	golang.org/x/crypto@v0.26.0	0.55.0

Open the chart page →

894

gnp-stackgnp-stack

0.0.5

4 of 14 See more

gnp-stack gnp-stack 0.0.5

4 of the 14 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/grafana :12.2.1	35c41e0fd029	golang.org/x/crypto@v0.42.0	0.55.0
ghcr.io/openconfig/gnmic :0.45.0	d422a9ebd4a2	golang.org/x/crypto@v0.48.0	0.55.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/crypto@v0.36.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/crypto@v0.40.0	0.55.0

Open the chart page →

7,683

go-file-servergo-file-server

1.0.0

1 of 2 See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/crypto@v0.25.0	0.55.0

Open the chart page →

2,222

gofitgofit

0.0.1

1 of 1 See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/bamaas/gofit :0.0.1	32b6a174b419	golang.org/x/crypto@v0.22.0	0.55.0

Open the chart page →

650

gorsegorse-io

0.4.2

3 of 4 See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.55.0
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.55.0
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.55.0

Open the chart page →

4,401

gosmee-clientgosmee-client

0.1.3

1 of 1 See more

gosmee-client gosmee-client 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/chmouel/gosmee :v0.32.0	60b8db1f68cc	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

261

Governify-Bluejaygovernify

0.1.0

2 of 12 See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0
library/mongo :latest	5211c51171f5	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

22,587

Governify-Falcongovernify

0.1.0

3 of 10 See more

Governify-Falcon governify 0.1.0

3 of the 10 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0
library/mongo :latest	5211c51171f5	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/prometheus/prometheus :latest	5ce7540c3c00	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

24,379

harborgpg-dev

1.18.3

4 of 8 See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.14.3	a30e5a8be3d9	golang.org/x/crypto@v0.45.0	0.55.0
goharbor/harbor-jobservice :v2.14.3	e2b0298e894d	golang.org/x/crypto@v0.45.0	0.55.0
goharbor/harbor-registryctl :v2.14.3	ddf6bb429eb6	golang.org/x/crypto@v0.45.0	0.55.0
goharbor/trivy-adapter-photon :v2.14.3	5c6f7162804c	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

3,406

jaegergpg-dev

3.3.3

2 of 5 See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.55.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.55.0

Open the chart page →

19,311

kube-prometheus-stackgpg-dev

84.0.0

3 of 6 See more

kube-prometheus-stack gpg-dev 84.0.0

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/grafana :13.0.1	0f86bada30d6	golang.org/x/crypto@v0.49.0	0.55.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/crypto@v0.49.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

4,303

kubernetes-dashboardgpg-dev

7.5.0

3 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

3 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.7.0	60595892c2cf	golang.org/x/crypto@v0.23.0	0.55.0
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	golang.org/x/crypto@v0.21.0	0.55.0
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	golang.org/x/crypto@v0.23.0	0.55.0

Open the chart page →

6,078

metrics-servergpg-dev

3.12.1

1 of 1 See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/crypto@v0.18.0	0.55.0

Open the chart page →

1,078

opentelemetry-demogpg-dev

0.33.8

7 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	golang.org/x/crypto@v0.27.0	0.55.0
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	golang.org/x/crypto@v0.17.0	0.55.0
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/crypto@v0.29.0	0.55.0
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/crypto@v0.25.0	0.55.0
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/crypto@v0.23.0	0.55.0
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/crypto@v0.17.0	0.55.0
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/crypto@v0.28.0	0.55.0

Open the chart page →

49,362

prometheusgpg-dev

29.2.1

6 of 6 See more

prometheus gpg-dev 29.2.1

6 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.90.1	693faa0b8724	golang.org/x/crypto@v0.49.0	0.55.0
quay.io/prometheus/alertmanager :v0.32.0	58e117eabcce	golang.org/x/crypto@v0.49.0	0.55.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/crypto@v0.49.0	0.55.0
quay.io/prometheus/prometheus :v3.11.2	cd37346c9745	golang.org/x/crypto@v0.49.0	0.55.0
quay.io/prometheus/pushgateway :v1.11.2	49ed9fdf3780	golang.org/x/crypto@v0.43.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

3,281

thanosgpg-dev

0.5.3

1 of 1 See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
thanosio/thanos :v0.41.0	cf3e9b292e43	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

592

traefikgpg-dev

39.0.8

1 of 1 See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/traefik :v3.6.13	34d5089d0b41	golang.org/x/crypto@v0.48.0	0.55.0

Open the chart page →

1,280

velerogpg-dev

12.0.0

1 of 1 See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.0	e4d1e79be2ee	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

1,562

spark-standalonegradiant-bigdata

0.1.0

1 of 2 See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
prom/graphite-exporter :latest	c1a266f63a84	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

6,148

cloudcost-exportergrafana

1.1.13

1 of 1 See more

cloudcost-exporter grafana 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/cloudcost-exporter :v1.12.0	eeb2cfecb23e	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

160

grafana-cloud-onboardinggrafana

0.4.7

3 of 5 See more

grafana-cloud-onboarding grafana 0.4.7

3 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/alloy-operator :1.8.1	ae85d68749c7	golang.org/x/crypto@v0.47.0	0.55.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/crypto@v0.49.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

4,681

grafana-samplinggrafana

1.1.7

2 of 2 See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.11.3	8c7256f412fe	golang.org/x/crypto@v0.41.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/crypto@v0.36.0	0.55.0

Open the chart page →

3,370

mimir-openshift-experimentalgrafana

2.1.0

3 of 4 See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.55.0
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.55.0
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.55.0

Open the chart page →

17,780

pyroscope-monitoringgrafana

0.1.1

4 of 6 See more

pyroscope-monitoring grafana 0.1.1

4 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/otel-lgtm :0.11.10	09d8c3ce4f3a	golang.org/x/crypto@v0.41.0	0.55.0
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	golang.org/x/crypto@v0.39.0	0.55.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/crypto@v0.36.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/crypto@v0.40.0	0.55.0

Open the chart page →

8,269

synthetic-monitoring-agentgrafana-community

1.19.0

1 of 1 See more

synthetic-monitoring-agent grafana-community 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/synthetic-monitoring-agent :v0.65.0	fe3e095283f0	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

213

prometheusgrafana-uxadax

26.0.1

6 of 6 See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/crypto@v0.28.0	0.55.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.55.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.55.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/crypto@v0.26.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.55.0

Open the chart page →

5,312

grafregistratiecomponentgrafregistratiecomponent

1.0.0

1 of 3 See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.55.0

Open the chart page →

7,519

grapple-installergrapple-installer

0.3.22

1 of 1 See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	golang.org/x/crypto@v0.27.0	0.55.0

Open the chart page →

7,956

grayloggraylog

1.0.2

1 of 4 See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/mongo :8	5211c51171f5	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

5,347

armada-executorgresearch

0.22.8

1 of 1 See more

armada-executor gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gresearch/armada-executor :latest	393aff4aa8f2	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

714

armada-lookout-ingestergresearch

0.22.8

1 of 1 See more

armada-lookout-ingester gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gresearch/armada-lookout-ingester :latest	3df14cda1855	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

714

armada-lookout-migrationgresearch

0.22.8

1 of 1 See more

armada-lookout-migration gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gresearch/armada-lookout :latest	f5e3226f1d33	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

714

armada-scheduler-migrationgresearch

0.22.8

1 of 1 See more

armada-scheduler-migration gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gresearch/armada-scheduler :latest	6141a6213fcb	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

714

fasttrackmlgresearch

0.1.0

1 of 1 See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gresearch/fasttrackml :latest	16d1228220fc	golang.org/x/crypto@v0.22.0	0.55.0

Open the chart page →

1,398

siembolgresearch

0.1.6

1 of 4 See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0

Open the chart page →

14,327

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	golang.org/x/crypto@v0.25.0	0.55.0

Open the chart page →

2,598

loki-proxygroundcover

0.1.1

1 of 1 See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.55.0

Open the chart page →

2,182

routergroundcover

1.12.362

1 of 7 See more

router groundcover 1.12.362

1 of the 7 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

6,070

temporalgroundcover

1.12.362

2 of 2 See more

temporal groundcover 1.12.362

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools :1.29.7-20260730-1	af8cea3b8538	golang.org/x/crypto@v0.52.0	0.55.0
public.ecr.aws/groundcovercom/temporalio/server :1.29.6-mini-20260702-1	70f191d0a80e	golang.org/x/crypto@v0.50.0	0.55.0

Open the chart page →

2,027

Container images carrying it

3,263 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/thanos/thanos :v0.39.2	1d022ef4b8ef	golang.org/x/crypto@v0.39.0	0.55.0	2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra :latest	b1198ea741d1	golang.org/x/crypto@v0.45.0	0.55.0	2
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0	2
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/crypto@v0.1.0	0.55.0	2
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/crypto@v0.1.0	0.55.0	2
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	golang.org/x/crypto@v0.21.0	0.55.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.55.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/crypto@v0.14.0	0.55.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.15.0	db384bf43222	golang.org/x/crypto@v0.31.0	0.55.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	golang.org/x/crypto@v0.9.0	0.55.0	2
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	golang.org/x/crypto@v0.38.0	0.55.0	2
registry.k8s.io/nfd/node-feature-discovery :v0.19.0	2fa1c99ad09b	golang.org/x/crypto@v0.53.0	0.55.0	2
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.55.0	2
registry.k8s.io/sig-storage/csi-provisioner :v6.1.1	d992c36d4ddd	golang.org/x/crypto@v0.41.0	0.55.0	2
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	golang.org/x/crypto@v0.41.0	0.55.0	2
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.55.0	2
0xpolygon/bor :1.3.7	396d3de26d8b	golang.org/x/crypto@v0.24.0	0.55.0	1
0xpolygon/heimdall :1.0.1	34ddf259993c	golang.org/x/crypto@v0.1.0	0.55.0	1
1dev/server :11.9.0	cd5b12fe5471	golang.org/x/crypto@v0.37.0	0.55.0	1
1password/connect-api :1.7.2	6aa94cf713f9	golang.org/x/crypto@v0.12.0	0.55.0	1
1password/connect-api :1.8.2	e915c0c84397	golang.org/x/crypto@v0.48.0	0.55.0	1
1password/connect-sync :1.8.2	6297ca6136c0	golang.org/x/crypto@v0.48.0	0.55.0	1
1password/connect-sync :1.7.2	fe527ed9d81f	golang.org/x/crypto@v0.12.0	0.55.0	1
42wim/matterircd :latest	808b4c3228d9	golang.org/x/crypto@v0.52.0	0.55.0	1
aapjeisbaas/wp-frankenphp :v0.2.2	6b261abc7fb0	golang.org/x/crypto@v0.51.0	0.55.0	1
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	golang.org/x/crypto@v0.42.0	0.55.0	1
abohatyrenko/bucket-backup-restore :latest	fa98af15a13e	golang.org/x/crypto@v0.14.0	0.55.0	1
aboogie/login_test_backend :new	9c41a4483ac8	golang.org/x/crypto@v0.26.0	0.55.0	1
absaoss/terraform-controller :v0.0.20	ad538a1285a0	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0	1
adguard/adguardhome :v0.107.51	3a143e6c071c	golang.org/x/crypto@v0.23.0	0.55.0	1
adguard/adguardhome :v0.107.38	43ec119419a9	golang.org/x/crypto@v0.13.0	0.55.0	1
adguard/adguardhome :v0.107.59	5d5e3aef39a8	golang.org/x/crypto@v0.36.0	0.55.0	1
adguard/adguardhome :v0.107.76	7157eb1dc3b2	golang.org/x/crypto@v0.50.0	0.55.0	1
adguard/adguardhome :v0.107.73	7fbf01d73ecb	golang.org/x/crypto@v0.48.0	0.55.0	1
adguard/adguardhome :v0.107.7	b9974aed13d0	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0	1
adguard/adguardhome :v0.107.56	c64a0b37f7b9	golang.org/x/crypto@v0.31.0	0.55.0	1
adguard/adguardhome :v0.107.65	d765078d2140	golang.org/x/crypto@v0.41.0	0.55.0	1
adrianberger/fluxcd-webui :latest	76848c0d2780	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	1
aerokube/moon :1.9.17	da76ca51220d	golang.org/x/crypto@v0.23.0	0.55.0	1
aerokube/selenoid-ui :1.10.11	3f3e299509fd	golang.org/x/crypto@v0.9.0	0.55.0	1
aerospike/aerospike-backup-service :3.5.1	be40d709c583	golang.org/x/crypto@v0.48.0	0.55.0	1
aerospike/aerospike-kubernetes-operator :4.5.0	70a9eeb991b8	golang.org/x/crypto@v0.51.0	0.55.0	1
agentarea/agentarea-mcp-manager :latest	efe23cef3727	golang.org/x/crypto@v0.52.0	0.55.0	1
airbyte/minio :RELEASE.2023-11-20T22-40-07Z	fdae972eaf0e	golang.org/x/crypto@v0.14.0	0.55.0	1
akeyless/akeyless-csi-provider :latest	e48bddc5dd72	golang.org/x/crypto@v0.52.0	0.55.0	1
akeyless/gateway :5.3.1	3d2e7dce5eb9	golang.org/x/crypto@v0.54.0	0.55.0	1
akeyless/k8s-webhook-server :0.39.0	996cd9afb3b4	golang.org/x/crypto@v0.52.0	0.55.0	1
aktosecurity/mirror-api-logging :k8s_agent	c1313b1ff2ed	golang.org/x/crypto@v0.52.0	0.55.0	1