CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,905; of 17,787 indexed, latest versions
Container images: 3,259; deployed by those charts
Fix available: 2 of 2; affected packages

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,905 of 17,787 indexed charts deploy, on 3,259 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more	0.55.0	3,259
kubernetes-1.34apk	1.34.11-r2	1.34.11-r3	1

OSV records: CGA-4wg8-vwxq-5g46 GO-2026-6303
Also known as: CGA-548p-j75q-3522, CGA-7fgq-fgg6-f7cr, CGA-8q6m-f35p-p88g, CGA-9xqw-wrfv-3c6w, CGA-fmc9-vwrf-6jq2, CGA-h33c-jrc2-36rr, CGA-jqcq-hwv9-6wwp, CGA-mc7r-3393-487f, CGA-p3hc-qw8w-gf4f, CGA-qf3x-28f7-2hcw, CGA-w35x-xg67-9c7c

Charts affected

2,905 by stars

Chart

Latest

Affected images

Radar Score

zabbixzabbix-community

7.1.0

1 of 5 See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

13,875

netdatanetdata

3.7.173

1 of 1 See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.11.0	c45c71eb23ff	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

3,104

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	golang.org/x/crypto@v0.48.0	0.55.0
1password/connect-sync :1.8.2	6297ca6136c0	golang.org/x/crypto@v0.48.0	0.55.0

Open the chart page →

2,562

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

1,901

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.55.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.55.0

Open the chart page →

2,483

opencostopencost

2.5.31

1 of 2 See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.2	de2784434527	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

266

openfaasopenfaas

15.0.13

5 of 6 See more

openfaas openfaas 15.0.13

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	golang.org/x/crypto@v0.15.0	0.55.0
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	golang.org/x/crypto@v0.41.0	0.55.0
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	golang.org/x/crypto@v0.30.0	0.55.0
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

3,544

prometheus-elasticsearch-exporterprometheus-community

7.4.0

1 of 1 See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/elasticsearch-exporter :v1.11.0	a056739b095d	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

flux2fluxcd-community

2.19.0

7 of 7 See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/image-automation-controller :v1.2.2	6b0b16ab2115	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/image-reflector-controller :v1.2.2	27e6bad1dac5	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/kustomize-controller :v1.9.2	3aecec8bafdb	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/notification-controller :v1.9.2	9ce503e7bcb8	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

2,957

vault-secrets-operatorhashicorp

1.5.1

2 of 2 See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
hashicorp/vault-secrets-operator :1.5.1	458c842add32	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/crypto@v0.26.0	0.55.0

Open the chart page →

1,040

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

1,367

gatekeepergatekeeper

3.23.1

1 of 3 See more

gatekeeper gatekeeper 3.23.1

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.23.1	dfc6fc78753f	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

496

snapshot-controllerpiraeus-charts

5.2.0

1 of 1 See more

snapshot-controller piraeus-charts 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

228

rocketchatrocketchat-server

7.0.2

4 of 12 See more

rocketchat rocketchat-server 7.0.2

4 of the 12 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.55.0
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.55.0
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

12,283

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

2,102

k10kasten

9.0.5

2 of 23 See more

k10 kasten 9.0.5

2 of the 23 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gcr.io/kasten-images/configmap-reload :9.0.5	1de689e621c5	golang.org/x/crypto@v0.54.0	0.55.0
gcr.io/kasten-images/prometheus :9.0.5	da2bf307c353	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

2,300

ceph-csi-cephfsceph-csi

3.17.1

5 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

4,061

ceph-csi-rbdceph-csi

3.17.1

5 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

4,061

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	golang.org/x/crypto@v0.49.0	0.55.0

Open the chart page →

6,362

csi-driver-nfscsi-driver-nfs

4.13.4

3 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.4

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/crypto@v0.52.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/crypto@v0.47.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

3,331

mariadb-operatormariadb-operator

26.6.0

1 of 1 See more

mariadb-operator mariadb-operator 26.6.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/mariadb-operator/mariadb-operator :26.6.0	a5e17b48f08e	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

377

portainerportainer

245.0.0

1 of 1 See more

portainer portainer 245.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.45.0	511f3f06c96f	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

277

atlantisatlantis

6.15.1

1 of 1 See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

1,892

codercoder-v2

2.37.1

1 of 1 See more

coder coder-v2 2.37.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/coder/coder :v2.37.1	0c6994bb4c5a	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

187

grafana-agentgrafana

0.44.2

1 of 2 See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/crypto@v0.31.0	0.55.0

Open the chart page →

3,514

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0

Open the chart page →

2,453

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/crypto@v0.9.0	0.55.0
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/crypto@v0.7.0	0.55.0

Open the chart page →

32,353

flaggerflagger

1.45.0

1 of 1 See more

flagger flagger 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger :1.45.0	15b372d35012	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

223

mesherymeshery

1.0.70

1 of 1 See more

meshery meshery 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	44b64ee128fb	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

1,356

prometheus-mysql-exporterprometheus-community

2.15.0

1 of 1 See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :v0.20.0	abed8dac117b	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

victoria-metrics-operatorvictoriametrics

0.67.3

1 of 1 See more

victoria-metrics-operator victoriametrics 0.67.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.74.1	7310c4a80b94	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

109

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.55.0

Open the chart page →

10,648

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	golang.org/x/crypto@v0.35.0	0.55.0

Open the chart page →

2,221

signozsignoz

0.141.1

2 of 5 See more

signoz signoz 0.141.1

2 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
signoz/signoz :v0.141.1	c10fa03e103c	golang.org/x/crypto@v0.52.0	0.55.0
signoz/signoz-otel-collector :v0.144.9	72aa1e4c1ec5	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

7,582

tempografana-community

3.0.0

1 of 1 See more

tempo grafana-community 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/tempo :3.0.3	0296560ac66f	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

148

keelkeel

1.2.2

1 of 1 See more

keel keel 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/keel-hq/keel :0.22.3	315e188a07c2	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

809

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/crypto@v0.32.0	0.55.0

Open the chart page →

716

prometheus-mongodb-exporterprometheus-community

3.22.0

1 of 1 See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
percona/mongodb_exporter :0.53.0	0214e482b2cd	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

231

node-local-dnsdeliveryhero

2.9.2

1 of 1 See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/crypto@v0.43.0	0.55.0

Open the chart page →

1,691

fission-allfission-charts

1.27.0

1 of 3 See more

fission-all fission-charts 1.27.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fission/fission-bundle :v1.27.0	d353720b037a	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

296

rancherrancher-latest

2.15.1

2 of 2 See more

rancher rancher-latest 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/crypto@v0.48.0	0.55.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

1,456

sealed-secretsbitnami

2.5.19

1 of 1 See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	golang.org/x/crypto@v0.41.0	0.55.0

Open the chart page →

643

difydouban

0.10.0

2 of 6 See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	golang.org/x/crypto@v0.40.0	0.55.0
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

19,497

kubesharkkubeshark-helm-charts

53.4.0

2 of 3 See more

kubeshark kubeshark-helm-charts 53.4.0

2 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
kubeshark/hub :v53.4	6d3f22525a0e	golang.org/x/crypto@v0.54.0	0.55.0
kubeshark/worker :v53.4	b226490dfa11	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

826

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

2,138

mongodbcloudpirates-mongodb

0.18.13

1 of 1 See more

mongodb cloudpirates-mongodb 0.18.13

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/mongo :8.3.9	81a1c8842a09	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

960

kube-image-keeperenix

2.3.1

1 of 1 See more

kube-image-keeper enix 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/enix/kube-image-keeper :2.3.1	d3ccf28495c3	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

opensearch-operatoropensearch-operator

3.0.2

1 of 1 See more

opensearch-operator opensearch-operator 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-operator :3.0.0-alpha	f78bbdd1a386	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

603

pxc-operatorpercona

1.20.1

1 of 1 See more

pxc-operator percona 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
percona/percona-xtradb-cluster-operator :1.20.0	ac4d0995c71e	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

411

pulsarapache

4.7.0

5 of 10 See more

pulsar apache 4.7.0

5 of the 10 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/crypto@v0.46.0	0.55.0
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/crypto@v0.47.0	0.55.0
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

9,869

Container images carrying it

3,259 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/crypto@v0.16.0	0.55.0	1
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/crypto@v0.16.0	0.55.0	1
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/crypto@v0.16.0	0.55.0	1
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.55.0	1
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.55.0	1
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.55.0	1
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.55.0	1
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/crypto@v0.14.0	0.55.0	1
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/crypto@v0.14.0	0.55.0	1
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/crypto@v0.14.0	0.55.0	1
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/crypto@v0.14.0	0.55.0	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.55.0	1
iotaledger/goshimmer :v0.8.6	b02a8f77474f	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.55.0	1
iotaledger/hornet :2.0	01206f1ba89c	golang.org/x/crypto@v0.12.0	0.55.0	1
iotaledger/inx-dashboard :1.0	12c669cb8748	golang.org/x/crypto@v0.12.0	0.55.0	1
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.55.0	1
ipfs/ipfs-cluster :1.0.2	1511f6d57994	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.55.0	1
ipfs/kubo :v0.41.0	0661819c2e09	golang.org/x/crypto@v0.50.0	0.55.0	1
ipfs/kubo :latest	63f5502f7a01	golang.org/x/crypto@v0.54.0	0.55.0	1
ipfs/kubo :v0.17.0	803fac58ba15	golang.org/x/crypto@v0.1.0	0.55.0	1
ipfs/kubo :v0.24.0	e3de33bd746b	golang.org/x/crypto@v0.14.0	0.55.0	1
ipushc/cassandra-web :latest	fa3e0c66c289	golang.org/x/crypto@v0.7.0	0.55.0	1
ispras/svacer :11-2-0	42aa9fa9f189	golang.org/x/crypto@v0.36.0	0.55.0	1
istio/install-cni :1.10.3	2232f365aed6	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
istio/install-cni :1.23.6	ab34c4740f44	golang.org/x/crypto@v0.36.0	0.55.0	1
istio/install-cni :1.29.0	ce27c9ce43c8	golang.org/x/crypto@v0.46.0	0.55.0	1
istio/operator :1.10.3	655eefa11c84	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
istio/operator :1.12.0	6cfce8a071b9	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.55.0	1
istio/operator :1.18.2	70f9d1fe5fff	golang.org/x/crypto@v0.9.0	0.55.0	1
istio/pilot :1.10.0	294ca55bd1cc	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
istio/pilot :1.29.0	325156535773	golang.org/x/crypto@v0.46.0	0.55.0	1
istio/pilot :1.23.6	9c3d6a218181	golang.org/x/crypto@v0.36.0	0.55.0	1
istio/pilot :1.16.0	ac0284d75ec9	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.55.0	1
istio/pilot :1.17.1	ce9d87606701	golang.org/x/crypto@v0.5.0	0.55.0	1
istio/pilot :1.15.2	db08d6963975	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.55.0	1
istio/pilot :1.10.3	e7e110a421c2	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
istio/pilot :1.29.1	f8b0e412ac4a	golang.org/x/crypto@v0.46.0	0.55.0	1
istio/proxyv2 :1.9.6	87a9db561d2e	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
istio/proxyv2 :1.10.0	88c6c693e67a	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
istio/proxyv2 :1.14.1	df69c1a7af7c	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0	1
itzg/mc-router :1.16.1	bb552b59fb53	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.55.0	1
itzmanish/ecr-token-renew :latest	02154d1c05b5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0	1
ixsystems/truecommand :3.2.0	19c218455cd2	golang.org/x/crypto@v0.41.0	0.55.0	1
j0113/haven-compliancy-dashboard :1.3	696cb8ca9f4e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.55.0	1
jaegertracing/all-in-one :1.29	42822be7888b	golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63	0.55.0	1
jaegertracing/all-in-one :1.53.0	60e65bfffe1f	golang.org/x/crypto@v0.17.0	0.55.0	1
jaegertracing/all-in-one :1.42.0	7d32a4eddec7	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.55.0	1
jaegertracing/all-in-one :1.22.0	ca6b73330616	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	1
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.55.0	1
jaegertracing/all-in-one :1.55	f6b5d09073f1	golang.org/x/crypto@v0.19.0	0.55.0	1