CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,905; of 17,790 indexed, latest versions
Container images: 3,263; deployed by those charts
Fix available: 2 of 2; affected packages

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,905 of 17,790 indexed charts deploy, on 3,263 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more	0.55.0	3,263
kubernetes-1.34apk	1.34.11-r2	1.34.11-r3	1

OSV records: CGA-4wg8-vwxq-5g46 GO-2026-6303
Also known as: CGA-548p-j75q-3522, CGA-7fgq-fgg6-f7cr, CGA-8q6m-f35p-p88g, CGA-9xqw-wrfv-3c6w, CGA-fmc9-vwrf-6jq2, CGA-h33c-jrc2-36rr, CGA-jqcq-hwv9-6wwp, CGA-mc7r-3393-487f, CGA-p3hc-qw8w-gf4f, CGA-qf3x-28f7-2hcw, CGA-w35x-xg67-9c7c

Charts affected

2,905 by stars

Chart

Latest

Affected images

Radar Score

istiogetindata

1.11.1

2 of 2 See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0

Open the chart page →

16,854

ghostghost

0.1.0

2 of 4 See more

ghost ghost 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :latest	51c9cefcb456	golang.org/x/crypto@v0.53.0	0.55.0
litestream/litestream :0.3	c5a1e1b01916	golang.org/x/crypto@v0.12.0	0.55.0

Open the chart page →

9,071

gitanagitana

1.4.0

1 of 1 See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.55.0

Open the chart page →

3,478

github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporter

0.2.15

1 of 1 See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/kalgurn/grl-exporter :v3.2.0	bd109b2bda38	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.55.0

Open the chart page →

896

gitlab-goproxygitlab-goproxy

0.2.2

1 of 1 See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/crypto@v0.6.0	0.55.0

Open the chart page →

1,332

gitlab-mr-conformgitlab-mr-conform

0.5.2

1 of 1 See more

gitlab-mr-conform gitlab-mr-conform 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/chrxmvtik/gitlab-mr-conform :0.5.2	b2eb79fc99cb	golang.org/x/crypto@v0.48.0	0.55.0

Open the chart page →

428

apid-helpergkarthiks

0.1.4

1 of 1 See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/crypto@v0.10.0	0.55.0

Open the chart page →

2,616

prometheus-container-resource-exportergkarthiks

0.3.1

1 of 1 See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gkarthics/container-resource-exporter :latest	6799af333e8a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.55.0

Open the chart page →

2,218

glassflow-etlglassflow

0.5.21

7 of 16 See more

glassflow-etl glassflow 0.5.21

7 of the 16 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/nats :2.12.3-alpine	88fe8e0e09d6	golang.org/x/crypto@v0.46.0	0.55.0
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.55.0
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	golang.org/x/crypto@v0.38.0	0.55.0
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/crypto@v0.26.0	0.55.0
ghcr.io/glassflow/glassflow-etl-be :v3.2.0	20f066d0f631	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/crypto@v0.41.0	0.55.0
ghcr.io/glassflow/glassflow-etl-migration :v3.2.0	7db1a1bf3dae	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

12,115

glassflow-operatorglassflow-operator

0.8.5

1 of 3 See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/crypto@v0.41.0	0.55.0

Open the chart page →

770

glauthglauth

0.3.17

1 of 2 See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/nnstd/glauth :2.5	2e6e09fa77dd	golang.org/x/crypto@v0.39.0	0.55.0

Open the chart page →

2,634

gliderglider

0.1.5

1 of 1 See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
nadoo/glider :0.16	38aadefbd607	golang.org/x/crypto@v0.26.0	0.55.0

Open the chart page →

894

gnp-stackgnp-stack

0.0.5

4 of 14 See more

gnp-stack gnp-stack 0.0.5

4 of the 14 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/grafana :12.2.1	35c41e0fd029	golang.org/x/crypto@v0.42.0	0.55.0
ghcr.io/openconfig/gnmic :0.45.0	d422a9ebd4a2	golang.org/x/crypto@v0.48.0	0.55.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/crypto@v0.36.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/crypto@v0.40.0	0.55.0

Open the chart page →

7,683

go-file-servergo-file-server

1.0.0

1 of 2 See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
goccx/go-file-server :latest	f4b3ebea0303	golang.org/x/crypto@v0.25.0	0.55.0

Open the chart page →

2,222

gofitgofit

0.0.1

1 of 1 See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/bamaas/gofit :0.0.1	32b6a174b419	golang.org/x/crypto@v0.22.0	0.55.0

Open the chart page →

650

gorsegorse-io

0.4.2

3 of 4 See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.55.0
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.55.0
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.55.0

Open the chart page →

4,401

gosmee-clientgosmee-client

0.1.3

1 of 1 See more

gosmee-client gosmee-client 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/chmouel/gosmee :v0.32.0	60b8db1f68cc	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

261

Governify-Bluejaygovernify

0.1.0

2 of 12 See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0
library/mongo :latest	5211c51171f5	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

22,587

Governify-Falcongovernify

0.1.0

3 of 10 See more

Governify-Falcon governify 0.1.0

3 of the 10 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0
library/mongo :latest	5211c51171f5	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/prometheus/prometheus :latest	5ce7540c3c00	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

24,379

harborgpg-dev

1.18.3

4 of 8 See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.14.3	a30e5a8be3d9	golang.org/x/crypto@v0.45.0	0.55.0
goharbor/harbor-jobservice :v2.14.3	e2b0298e894d	golang.org/x/crypto@v0.45.0	0.55.0
goharbor/harbor-registryctl :v2.14.3	ddf6bb429eb6	golang.org/x/crypto@v0.45.0	0.55.0
goharbor/trivy-adapter-photon :v2.14.3	5c6f7162804c	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

3,406

jaegergpg-dev

3.3.3

2 of 5 See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/crypto@v0.17.0	0.55.0
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/crypto@v0.17.0	0.55.0

Open the chart page →

19,311

kube-prometheus-stackgpg-dev

84.0.0

3 of 6 See more

kube-prometheus-stack gpg-dev 84.0.0

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/grafana :13.0.1	0f86bada30d6	golang.org/x/crypto@v0.49.0	0.55.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/crypto@v0.49.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

4,303

kubernetes-dashboardgpg-dev

7.5.0

3 of 5 See more

kubernetes-dashboard gpg-dev 7.5.0

3 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard-api :1.7.0	60595892c2cf	golang.org/x/crypto@v0.23.0	0.55.0
kubernetesui/dashboard-auth :1.1.3	07135c09e9ff	golang.org/x/crypto@v0.21.0	0.55.0
kubernetesui/dashboard-web :1.4.0	4445b31a2c25	golang.org/x/crypto@v0.23.0	0.55.0

Open the chart page →

6,078

metrics-servergpg-dev

3.12.1

1 of 1 See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	golang.org/x/crypto@v0.18.0	0.55.0

Open the chart page →

1,078

opentelemetry-demogpg-dev

0.33.8

7 of 27 See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/grafana :11.3.1	fa801ab6e1ae	golang.org/x/crypto@v0.27.0	0.55.0
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	golang.org/x/crypto@v0.17.0	0.55.0
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/crypto@v0.29.0	0.55.0
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	golang.org/x/crypto@v0.25.0	0.55.0
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	golang.org/x/crypto@v0.23.0	0.55.0
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	golang.org/x/crypto@v0.17.0	0.55.0
quay.io/prometheus/prometheus :v3.0.0	3b9b2a15d376	golang.org/x/crypto@v0.28.0	0.55.0

Open the chart page →

49,362

prometheusgpg-dev

29.2.1

6 of 6 See more

prometheus gpg-dev 29.2.1

6 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.90.1	693faa0b8724	golang.org/x/crypto@v0.49.0	0.55.0
quay.io/prometheus/alertmanager :v0.32.0	58e117eabcce	golang.org/x/crypto@v0.49.0	0.55.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/crypto@v0.49.0	0.55.0
quay.io/prometheus/prometheus :v3.11.2	cd37346c9745	golang.org/x/crypto@v0.49.0	0.55.0
quay.io/prometheus/pushgateway :v1.11.2	49ed9fdf3780	golang.org/x/crypto@v0.43.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

3,281

thanosgpg-dev

0.5.3

1 of 1 See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
thanosio/thanos :v0.41.0	cf3e9b292e43	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

592

traefikgpg-dev

39.0.8

1 of 1 See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/traefik :v3.6.13	34d5089d0b41	golang.org/x/crypto@v0.48.0	0.55.0

Open the chart page →

1,280

velerogpg-dev

12.0.0

1 of 1 See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.0	e4d1e79be2ee	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

1,562

spark-standalonegradiant-bigdata

0.1.0

1 of 2 See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
prom/graphite-exporter :latest	c1a266f63a84	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

6,148

cloudcost-exportergrafana

1.1.13

1 of 1 See more

cloudcost-exporter grafana 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/cloudcost-exporter :v1.12.0	eeb2cfecb23e	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

160

grafana-cloud-onboardinggrafana

0.4.7

3 of 5 See more

grafana-cloud-onboarding grafana 0.4.7

3 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/grafana/alloy-operator :1.8.1	ae85d68749c7	golang.org/x/crypto@v0.47.0	0.55.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/crypto@v0.49.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

4,681

grafana-samplinggrafana

1.1.7

2 of 2 See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.11.3	8c7256f412fe	golang.org/x/crypto@v0.41.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/crypto@v0.36.0	0.55.0

Open the chart page →

3,370

mimir-openshift-experimentalgrafana

2.1.0

3 of 4 See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.55.0
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.55.0
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.55.0

Open the chart page →

17,780

pyroscope-monitoringgrafana

0.1.1

4 of 6 See more

pyroscope-monitoring grafana 0.1.1

4 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/otel-lgtm :0.11.10	09d8c3ce4f3a	golang.org/x/crypto@v0.41.0	0.55.0
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	golang.org/x/crypto@v0.39.0	0.55.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/crypto@v0.36.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	golang.org/x/crypto@v0.40.0	0.55.0

Open the chart page →

8,269

synthetic-monitoring-agentgrafana-community

1.19.0

1 of 1 See more

synthetic-monitoring-agent grafana-community 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/synthetic-monitoring-agent :v0.65.0	fe3e095283f0	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

213

prometheusgrafana-uxadax

26.0.1

6 of 6 See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/crypto@v0.28.0	0.55.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/crypto@v0.28.0	0.55.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.55.0
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	golang.org/x/crypto@v0.21.0	0.55.0
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/crypto@v0.26.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.55.0

Open the chart page →

5,312

grafregistratiecomponentgrafregistratiecomponent

1.0.0

1 of 3 See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/grafregistratiecomponent-php :latest	35225eaa87ab	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.55.0

Open the chart page →

7,519

grapple-installergrapple-installer

0.3.22

1 of 1 See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grpl/grapple-cli :0.2.127	c00aafee6629	golang.org/x/crypto@v0.27.0	0.55.0

Open the chart page →

7,956

grayloggraylog

1.0.2

1 of 4 See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/mongo :8	5211c51171f5	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

5,347

armada-executorgresearch

0.22.8

1 of 1 See more

armada-executor gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gresearch/armada-executor :latest	393aff4aa8f2	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

714

armada-lookout-ingestergresearch

0.22.8

1 of 1 See more

armada-lookout-ingester gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gresearch/armada-lookout-ingester :latest	3df14cda1855	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

714

armada-lookout-migrationgresearch

0.22.8

1 of 1 See more

armada-lookout-migration gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gresearch/armada-lookout :latest	f5e3226f1d33	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

714

armada-scheduler-migrationgresearch

0.22.8

1 of 1 See more

armada-scheduler-migration gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gresearch/armada-scheduler :latest	6141a6213fcb	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

714

fasttrackmlgresearch

0.1.0

1 of 1 See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gresearch/fasttrackml :latest	16d1228220fc	golang.org/x/crypto@v0.22.0	0.55.0

Open the chart page →

1,398

siembolgresearch

0.1.6

1 of 4 See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0

Open the chart page →

14,327

act-runnergringolito

0.2.0

1 of 1 See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gitea/act_runner :0.2.11-dind-rootless	6120b1165f3a	golang.org/x/crypto@v0.25.0	0.55.0

Open the chart page →

2,598

loki-proxygroundcover

0.1.1

1 of 1 See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.55.0

Open the chart page →

2,182

routergroundcover

1.12.362

1 of 7 See more

router groundcover 1.12.362

1 of the 7 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

6,070

temporalgroundcover

1.12.362

2 of 2 See more

temporal groundcover 1.12.362

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools :1.29.7-20260730-1	af8cea3b8538	golang.org/x/crypto@v0.52.0	0.55.0
public.ecr.aws/groundcovercom/temporalio/server :1.29.6-mini-20260702-1	70f191d0a80e	golang.org/x/crypto@v0.50.0	0.55.0

Open the chart page →

2,027

Container images carrying it

3,263 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
datadog/agent :6	aad9994de6a7	golang.org/x/crypto@v0.31.0	0.55.0	1
datadog/extendeddaemonset :v0.8.0	513a4377aed5	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.55.0	1
datadog/operator :0.3.1	17f08a860090	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.55.0	1
datamate/seafile-professional :11.0.20	2dd66b722464	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.55.0	1
datappeal/hive-metastore :latest	e38c085a3567	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.55.0	1
datappeal/trino-exporter :latest	325b91c2b09e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	1
datappeal/trino-loadbalancer :sha-950abbae	6b5b9fdb2e6d	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.55.0	1
datasaker/dsk-container-agent :latest	08b52999f67b	golang.org/x/crypto@v0.14.0	0.55.0	1
datasaker/dsk-kube-state-agent :latest	d6d2eb48589d	golang.org/x/crypto@v0.14.0	0.55.0	1
datasaker/dsk-node-agent :latest	1b95913b6729	golang.org/x/crypto@v0.14.0	0.55.0	1
datasaker/dsk-process-agent :latest	2f38720a637d	golang.org/x/crypto@v0.13.0	0.55.0	1
datawire/aes :2.0.3-ea	07f8fe4f4f8e	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
datawire/aes :1.13.6	2beb65062c8b	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
datawire/aes :3.11.1	95ec30b3c732	golang.org/x/crypto@v0.21.0	0.55.0	1
datawire/ambassador-operator :v1.3.0	f95ae710d75c	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.55.0	1
datawire/emissary :2.0.2-ea	9716efbdd24b	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
ddosify/alaz :v0.12.0	ea602056d9ce	golang.org/x/crypto@v0.18.0	0.55.0	1
ddvk/rmfakecloud :latest	2f5c45cbf0c5	golang.org/x/crypto@v0.36.0	0.55.0	1
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.55.0	1
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/crypto@v0.1.0	0.55.0	1
defactops/defactops-ui :1.0.16	825cdf9ba706	golang.org/x/crypto@v0.23.0	0.55.0	1
deimosfr/dnsmasq-k8s :1.4.1	284c4040fc6d	golang.org/x/crypto@v0.45.0	0.55.0	1
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.55.0	1
deluan/navidrome :0.49.3	11a24da08977	golang.org/x/crypto@v0.3.0	0.55.0	1
deluan/navidrome :0.50.0	2cf4442b0099	golang.org/x/crypto@v0.15.0	0.55.0	1
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0	1
deluan/navidrome :0.63.1	7c43af9f6516	golang.org/x/crypto@v0.53.0	0.55.0	1
deluan/navidrome :0.61.2	9fa40b3d8dec	golang.org/x/crypto@v0.49.0	0.55.0	1
devopsfaith/krakend :2.6.3	4c678c224f67	golang.org/x/crypto@v0.22.0	0.55.0	1
devopsfaith/krakend :2.7.0	9219cda867e2	golang.org/x/crypto@v0.24.0	0.55.0	1
devopstales/trivy-operator :2.5	75136aa7a26e	golang.org/x/crypto@v0.3.0	0.55.0	1
devsecurely/cview-issuer :0.0.42	eecd4314e933	golang.org/x/crypto@v0.49.0	0.55.0	1
devspacecloud/manager :0.3.3	49c397413f7b	golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d	0.55.0	1
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/crypto@v0.18.0	0.55.0	1
deyaeddin/cert-manager-webhook-hetzner :latest	797b0d06210a	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.55.0	1
dgraph/dgraph :v24.1.4	b57fa31f9b7f	golang.org/x/crypto@v0.33.0	0.55.0	1
dirathea/pipelinewise-operator :v0.5.0	8d4c9f773ae1	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0	1
distribution/distribution :3.1.1	bca24727f400	golang.org/x/crypto@v0.49.0	0.55.0	1
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/crypto@v0.24.0	0.55.0	1
dollarshaveclub/furan2 :master	14a257836529	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.55.0	1
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.55.0	1
donetick/donetick :v0.1.79	a1cc21dd5a37	golang.org/x/crypto@v0.47.0	0.55.0	1
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/crypto@v0.10.0	0.55.0	1
dongjiang1989/node-metrics :latest	3f1f266190bb	golang.org/x/crypto@v0.54.0	0.55.0	1
dongjiang1989/pingmesh-agent :latest	355fa4be8e97	golang.org/x/crypto@v0.28.0	0.55.0	1
dongjiang1989/pingmesh-agent :v1.2.2	c82de0272da0	golang.org/x/crypto@v0.28.0	0.55.0	1
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/crypto@v0.26.0	0.55.0	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/crypto@v0.17.0	0.55.0	1
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/crypto@v0.17.0	0.55.0	1
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/crypto@v0.24.0	0.55.0	1