Published 28 Aug 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,905
of 17,787 indexed, latest versions
Container images
3,259
deployed by those charts
Fix available
2 of 2
affected packages
Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
Carried by container images the latest versions of 2,905 of 17,787 indexed charts deploy, on 3,259 images.
Affected package
Affected versions
Fixed in
Images
golang.org/x/cryptogolang
v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more
ilumilumOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
astarte-operatorastarteOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
codercoderOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
myipkuossOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
keptnlifecycle-toolkitOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
mercuremercureOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
meshery-operatormesheryOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
opencostopencost-ociOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
redis-enterprise-operatorredis-enterprise-operator-officialOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
swo-k8s-collectorsolarwindsOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
thehivestrangebee-helmOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository