CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,882; of 17,787 indexed, latest versions
Container images: 3,229; deployed by those charts
Fix available: 2 of 2; affected packages

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,882 of 17,787 indexed charts deploy, on 3,229 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more	0.55.0	3,229
kubernetes-1.34apk	1.34.11-r2	1.34.11-r3	1

OSV records: CGA-4wg8-vwxq-5g46 GO-2026-6303
Also known as: CGA-548p-j75q-3522, CGA-7fgq-fgg6-f7cr, CGA-8q6m-f35p-p88g, CGA-9xqw-wrfv-3c6w, CGA-fmc9-vwrf-6jq2, CGA-h33c-jrc2-36rr, CGA-jqcq-hwv9-6wwp, CGA-mc7r-3393-487f, CGA-p3hc-qw8w-gf4f, CGA-qf3x-28f7-2hcw, CGA-w35x-xg67-9c7c

Charts affected

2,882 by stars

Chart

Latest

Affected images

Radar Score

zabbixzabbix-community

7.1.0

1 of 5 See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

13,664

netdatanetdata

3.7.173

1 of 1 See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.11.0	c45c71eb23ff	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

3,092

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	golang.org/x/crypto@v0.48.0	0.55.0
1password/connect-sync :1.8.2	6297ca6136c0	golang.org/x/crypto@v0.48.0	0.55.0

Open the chart page →

2,550

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

1,955

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.55.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.55.0

Open the chart page →

2,483

opencostopencost

2.5.31

1 of 2 See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.2	de2784434527	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

265

openfaasopenfaas

15.0.13

5 of 6 See more

openfaas openfaas 15.0.13

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	golang.org/x/crypto@v0.15.0	0.55.0
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	golang.org/x/crypto@v0.41.0	0.55.0
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	golang.org/x/crypto@v0.30.0	0.55.0
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

3,543

prometheus-elasticsearch-exporterprometheus-community

7.4.0

1 of 1 See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/elasticsearch-exporter :v1.11.0	a056739b095d	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

flux2fluxcd-community

2.19.0

7 of 7 See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/image-automation-controller :v1.2.2	6b0b16ab2115	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/image-reflector-controller :v1.2.2	27e6bad1dac5	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/kustomize-controller :v1.9.2	3aecec8bafdb	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/notification-controller :v1.9.2	9ce503e7bcb8	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

2,951

vault-secrets-operatorhashicorp

1.5.1

2 of 2 See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
hashicorp/vault-secrets-operator :1.5.1	458c842add32	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/crypto@v0.26.0	0.55.0

Open the chart page →

1,040

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

1,367

gatekeepergatekeeper

3.23.1

1 of 3 See more

gatekeeper gatekeeper 3.23.1

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.23.1	dfc6fc78753f	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

495

snapshot-controllerpiraeus-charts

5.2.0

1 of 1 See more

snapshot-controller piraeus-charts 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

228

rocketchatrocketchat-server

7.0.2

4 of 12 See more

rocketchat rocketchat-server 7.0.2

4 of the 12 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.55.0
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.55.0
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

12,279

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

2,103

k10kasten

9.0.5

2 of 23 See more

k10 kasten 9.0.5

2 of the 23 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gcr.io/kasten-images/configmap-reload :9.0.5	1de689e621c5	golang.org/x/crypto@v0.54.0	0.55.0
gcr.io/kasten-images/prometheus :9.0.5	da2bf307c353	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

1,880

ceph-csi-cephfsceph-csi

3.17.1

5 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

4,061

ceph-csi-rbdceph-csi

3.17.1

5 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

4,061

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	golang.org/x/crypto@v0.49.0	0.55.0

Open the chart page →

6,342

csi-driver-nfscsi-driver-nfs

4.13.4

3 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.4

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/crypto@v0.52.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/crypto@v0.47.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

3,324

mariadb-operatormariadb-operator

26.6.0

1 of 1 See more

mariadb-operator mariadb-operator 26.6.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/mariadb-operator/mariadb-operator :26.6.0	a5e17b48f08e	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

377

portainerportainer

245.0.0

1 of 1 See more

portainer portainer 245.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.45.0	511f3f06c96f	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

277

atlantisatlantis

6.15.1

1 See more

atlantis atlantis 6.15.1

1 container image this version deploys carries CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

—

codercoder-v2

2.37.1

1 of 1 See more

coder coder-v2 2.37.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/coder/coder :v2.37.1	0c6994bb4c5a	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

187

grafana-agentgrafana

0.44.2

1 of 2 See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/crypto@v0.31.0	0.55.0

Open the chart page →

3,475

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0

Open the chart page →

2,453

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/crypto@v0.9.0	0.55.0
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/crypto@v0.7.0	0.55.0

Open the chart page →

32,259

flaggerflagger

1.45.0

1 of 1 See more

flagger flagger 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger :1.45.0	15b372d35012	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

222

prometheus-mysql-exporterprometheus-community

2.15.0

1 of 1 See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :v0.20.0	abed8dac117b	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

victoria-metrics-operatorvictoriametrics

0.67.3

1 of 1 See more

victoria-metrics-operator victoriametrics 0.67.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.74.1	7310c4a80b94	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

109

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.55.0

Open the chart page →

10,622

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	golang.org/x/crypto@v0.35.0	0.55.0

Open the chart page →

2,221

signozsignoz

0.141.1

2 of 5 See more

signoz signoz 0.141.1

2 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
signoz/signoz :v0.141.1	c10fa03e103c	golang.org/x/crypto@v0.52.0	0.55.0
signoz/signoz-otel-collector :v0.144.9	72aa1e4c1ec5	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

7,568

tempografana-community

3.0.0

1 of 1 See more

tempo grafana-community 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/tempo :3.0.3	0296560ac66f	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

148

keelkeel

1.2.2

1 of 1 See more

keel keel 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/keel-hq/keel :0.22.3	315e188a07c2	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

809

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/crypto@v0.32.0	0.55.0

Open the chart page →

716

prometheus-mongodb-exporterprometheus-community

3.22.0

1 of 1 See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
percona/mongodb_exporter :0.53.0	0214e482b2cd	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

231

node-local-dnsdeliveryhero

2.9.2

1 of 1 See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/crypto@v0.43.0	0.55.0

Open the chart page →

1,685

fission-allfission-charts

1.27.0

1 of 3 See more

fission-all fission-charts 1.27.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fission/fission-bundle :v1.27.0	d353720b037a	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

296

rancherrancher-latest

2.15.1

2 of 2 See more

rancher rancher-latest 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/crypto@v0.48.0	0.55.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

1,456

sealed-secretsbitnami

2.5.19

1 of 1 See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	golang.org/x/crypto@v0.41.0	0.55.0

Open the chart page →

643

difydouban

0.10.0

2 of 6 See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	golang.org/x/crypto@v0.40.0	0.55.0
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

19,391

kubesharkkubeshark-helm-charts

53.4.0

2 of 3 See more

kubeshark kubeshark-helm-charts 53.4.0

2 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
kubeshark/hub :v53.4	6d3f22525a0e	golang.org/x/crypto@v0.54.0	0.55.0
kubeshark/worker :v53.4	b226490dfa11	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

825

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

2,119

mongodbcloudpirates-mongodb

0.18.13

1 of 1 See more

mongodb cloudpirates-mongodb 0.18.13

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/mongo :8.3.9	81a1c8842a09	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

922

kube-image-keeperenix

2.3.1

1 of 1 See more

kube-image-keeper enix 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/enix/kube-image-keeper :2.3.1	d3ccf28495c3	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

opensearch-operatoropensearch-operator

3.0.2

1 of 1 See more

opensearch-operator opensearch-operator 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-operator :3.0.0-alpha	f78bbdd1a386	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

603

pxc-operatorpercona

1.20.1

1 of 1 See more

pxc-operator percona 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
percona/percona-xtradb-cluster-operator :1.20.0	ac4d0995c71e	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

392

pulsarapache

4.7.0

5 of 10 See more

pulsar apache 4.7.0

5 of the 10 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/crypto@v0.46.0	0.55.0
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/crypto@v0.47.0	0.55.0
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

9,864

miniocloudpirates-minio

0.13.4

1 of 1 See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	golang.org/x/crypto@v0.43.0	0.55.0

Open the chart page →

961

Container images carrying it

3,229 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
datadog/operator :0.3.1	17f08a860090	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.55.0	1
datamate/seafile-professional :11.0.20	2dd66b722464	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.55.0	1
datappeal/hive-metastore :latest	e38c085a3567	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.55.0	1
datappeal/trino-exporter :latest	325b91c2b09e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	1
datappeal/trino-loadbalancer :sha-950abbae	6b5b9fdb2e6d	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.55.0	1
datasaker/dsk-container-agent :latest	08b52999f67b	golang.org/x/crypto@v0.14.0	0.55.0	1
datasaker/dsk-kube-state-agent :latest	d6d2eb48589d	golang.org/x/crypto@v0.14.0	0.55.0	1
datasaker/dsk-node-agent :latest	1b95913b6729	golang.org/x/crypto@v0.14.0	0.55.0	1
datasaker/dsk-process-agent :latest	2f38720a637d	golang.org/x/crypto@v0.13.0	0.55.0	1
datawire/aes :2.0.3-ea	07f8fe4f4f8e	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
datawire/aes :1.13.6	2beb65062c8b	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
datawire/aes :3.11.1	95ec30b3c732	golang.org/x/crypto@v0.21.0	0.55.0	1
datawire/ambassador-operator :v1.3.0	f95ae710d75c	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.55.0	1
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
ddosify/alaz :v0.12.0	ea602056d9ce	golang.org/x/crypto@v0.18.0	0.55.0	1
ddvk/rmfakecloud :latest	2f5c45cbf0c5	golang.org/x/crypto@v0.36.0	0.55.0	1
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.55.0	1
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/crypto@v0.1.0	0.55.0	1
defactops/defactops-ui :1.0.16	825cdf9ba706	golang.org/x/crypto@v0.23.0	0.55.0	1
deimosfr/dnsmasq-k8s :1.4.1	284c4040fc6d	golang.org/x/crypto@v0.45.0	0.55.0	1
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.55.0	1
deluan/navidrome :0.49.3	11a24da08977	golang.org/x/crypto@v0.3.0	0.55.0	1
deluan/navidrome :0.50.0	2cf4442b0099	golang.org/x/crypto@v0.15.0	0.55.0	1
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0	1
deluan/navidrome :0.63.1	7c43af9f6516	golang.org/x/crypto@v0.53.0	0.55.0	1
deluan/navidrome :0.61.2	9fa40b3d8dec	golang.org/x/crypto@v0.49.0	0.55.0	1
devopsfaith/krakend :2.6.3	4c678c224f67	golang.org/x/crypto@v0.22.0	0.55.0	1
devopsfaith/krakend :2.7.0	9219cda867e2	golang.org/x/crypto@v0.24.0	0.55.0	1
devopstales/trivy-operator :2.5	75136aa7a26e	golang.org/x/crypto@v0.3.0	0.55.0	1
devsecurely/cview-issuer :0.0.42	eecd4314e933	golang.org/x/crypto@v0.49.0	0.55.0	1
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d	0.55.0	1
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/crypto@v0.18.0	0.55.0	1
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.55.0	1
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/crypto@v0.33.0	0.55.0	1
dirathea/pipelinewise-operator :v0.5.0	8d4c9f773ae1	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0	1
distribution/distribution :3.1.1	bca24727f400	golang.org/x/crypto@v0.49.0	0.55.0	1
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/crypto@v0.24.0	0.55.0	1
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.55.0	1
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.55.0	1
donetick/donetick :v0.1.60	849a43d9e363	golang.org/x/crypto@v0.40.0	0.55.0	1
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/crypto@v0.10.0	0.55.0	1
dongjiang1989/node-metrics :latest	3f1f266190bb	golang.org/x/crypto@v0.54.0	0.55.0	1
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/crypto@v0.28.0	0.55.0	1
dongjiang1989/pingmesh-agent :v1.2.2	c82de0272da0	golang.org/x/crypto@v0.28.0	0.55.0	1
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/crypto@v0.26.0	0.55.0	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/crypto@v0.17.0	0.55.0	1
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/crypto@v0.17.0	0.55.0	1
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/crypto@v0.24.0	0.55.0	1
drone/drone :2.28.2	55897c8fb22d	golang.org/x/crypto@v0.40.0	0.55.0	1
drone/drone-runner-docker :1.8.1	137e79c5e23c	golang.org/x/crypto@v0.0.0-20190621222207-cc06ce4a13d4	0.55.0	1