CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,866; of 17,803 indexed, latest versions
Container images: 3,217; deployed by those charts
Fix available: 1 of 1; affected package

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,866 of 17,803 indexed charts deploy, on 3,217 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more	0.55.0	3,217

OSV records: GO-2026-6303

Charts affected

2,866 by stars

Chart

Latest

Affected images

Radar Score

cw-container-insightcwci

0.7.0

1 of 1 See more

cw-container-insight cwci 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :latest-arm64	9dea6643715a	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

280

cloudflaredcyberjake

0.3.20

1 of 1 See more

cloudflared cyberjake 0.3.20

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.6.1	6d91c121b803	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

625

irods-csi-drivercyverse

0.12.0

1 of 4 See more

irods-csi-driver cyverse 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.55.0

Open the chart page →

5,295

domain-exporterd0main-exp0rter

0.1.0

1 of 1 See more

domain-exporter d0main-exp0rter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	golang.org/x/crypto@v0.0.0-20211215165025-cf75a172585e	0.55.0

Open the chart page →

1,832

jupyterhubd4n

3.3.7

2 of 7 See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
aristidetm/basic-notebook :3.6.5	469dbc951224	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	golang.org/x/crypto@v0.21.0	0.55.0

Open the chart page →

16,732

miniod4n

5.2.1

2 of 2 See more

minio d4n 5.2.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-04-29T09-56-05Z	c574fac67f60	golang.org/x/crypto@v0.22.0	0.55.0
quay.io/minio/minio :RELEASE.2024-06-04T19-20-08Z	c6b68f158628	golang.org/x/crypto@v0.23.0	0.55.0

Open the chart page →

2,659

damap-chartdamap

0.3.0

1 of 5 See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8	f29984bd1e22	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

14,458

cloudflareddamoun

3.3.0

1 of 1 See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2024.5.0	5d5f70a59d5e	golang.org/x/crypto@v0.23.0	0.55.0

Open the chart page →

1,313

gickupdamoun

1.11.0

1 of 1 See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
buddyspencer/gickup :0.10.30	9e7dbf923c12	golang.org/x/crypto@v0.22.0	0.55.0

Open the chart page →

1,028

home-assistantdamoun

1.1.0

1 of 1 See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0

Open the chart page →

6,190

nvidia-gpu-exporterdanchev

1.0.3

1 of 1 See more

nvidia-gpu-exporter danchev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/utkuozdemir/nvidia_gpu_exporter :1.5.0	d75967a4dd72	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

1,238

grafana-agentdandydev-charts

0.19.2

1 of 1 See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/agent :v0.20.0	825c09373d27	golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63	0.55.0

Open the chart page →

3,247

dapr-agentsdapr-agents-dev

0.1.5

15 of 31 See more

dapr-agents dapr-agents-dev 0.1.5

15 of the 31 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/crypto@v0.45.0	0.55.0
grafana/loki :3.6.5	847c287ada0e	golang.org/x/crypto@v0.45.0	0.55.0
grafana/loki-canary :3.6.5	fbb984bab741	golang.org/x/crypto@v0.45.0	0.55.0
grafana/tempo :2.9.0	65a578975943	golang.org/x/crypto@v0.41.0	0.55.0
otel/opentelemetry-collector-contrib :0.145.0	a7343f018690	golang.org/x/crypto@v0.47.0	0.55.0
prom/memcached-exporter :v0.15.4	b6763ecb3c47	golang.org/x/crypto@v0.42.0	0.55.0
ghcr.io/dapr/injector :1.17.0-rc.3	7a2fd888ed5f	golang.org/x/crypto@v0.47.0	0.55.0
ghcr.io/dapr/operator :1.17.0-rc.3	d5cc61cbe735	golang.org/x/crypto@v0.47.0	0.55.0
ghcr.io/dapr/placement :1.17.0-rc.3	a237b43cd5c6	golang.org/x/crypto@v0.47.0	0.55.0
ghcr.io/dapr/scheduler :1.17.0-rc.3	6c62e01e736b	golang.org/x/crypto@v0.47.0	0.55.0
ghcr.io/dapr/sentry :1.17.0-rc.3	bf79b03591e0	golang.org/x/crypto@v0.47.0	0.55.0
ghcr.io/kagent-dev/kagent/tools :0.0.13	c8882543f693	golang.org/x/crypto@v0.45.0	0.55.0
public.ecr.aws/diagrid-dev/diagrid-dashboard :latest	f1348a65664a	golang.org/x/crypto@v0.52.0	0.55.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

22,370

dask-gatewaydask

2026.3.0

1 of 2 See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/traefik :3.3.5	104204dadedf	golang.org/x/crypto@v0.36.0	0.55.0

Open the chart page →

2,002

cloudwatch-agent-prometheusdasmeta

0.2.2

1 of 1 See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.55.0

Open the chart page →

2,985

mongodb-bi-connectordasmeta

1.0.3

1 of 1 See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
dasmeta/mongodb-bi-connector :1.0.3	fa657960dfec	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.55.0

Open the chart page →

5,849

nfs-provisionerdasmeta

1.0.3

1 of 1 See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.55.0

Open the chart page →

2,806

spqr-routerdasmeta

0.1.1

1 of 1 See more

spqr-router dasmeta 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
pgsharding/spqr-router :nightly-2.8.3-1839-f66048d8	4734940216d3	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

687

adot-exporter-for-eks-on-ec2dasmeta-adot

0.15.5

1 of 1 See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
amazon/aws-otel-collector :v0.27.0	d8ab0eef5074	golang.org/x/crypto@v0.1.0	0.55.0

Open the chart page →

1,933

monitoring-stackdata354-helm

1.4.2

2 of 4 See more

monitoring-stack data354-helm 1.4.2

2 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	f772d434e8fa	golang.org/x/crypto@v0.52.0	0.55.0
quay.io/prometheus/prometheus :latest	5ce7540c3c00	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

3,227

observability-pipelines-workerdatadog

2.21.2

1 of 1 See more

observability-pipelines-worker datadog 2.21.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gcr.io/datadoghq/observability-pipelines-worker :2.21.1	de6ff0f1a854	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

848

datadog-operatordatadog-test

0.1.2

1 of 1 See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
datadog/operator :0.3.1	17f08a860090	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.55.0

Open the chart page →

3,979

agent-helmdatasaker

0.1.8

4 of 6 See more

agent-helm datasaker 0.1.8

4 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
datasaker/dsk-container-agent :latest	08b52999f67b	golang.org/x/crypto@v0.14.0	0.55.0
datasaker/dsk-kube-state-agent :latest	d6d2eb48589d	golang.org/x/crypto@v0.14.0	0.55.0
datasaker/dsk-node-agent :latest	1b95913b6729	golang.org/x/crypto@v0.14.0	0.55.0
datasaker/dsk-process-agent :latest	2f38720a637d	golang.org/x/crypto@v0.13.0	0.55.0

Open the chart page →

7,606

ambassador-operatordatawire

0.3.0

1 of 1 See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
datawire/ambassador-operator :v1.3.0	f95ae710d75c	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152	0.55.0

Open the chart page →

7,495

eg-edge-stackdatawire

0.0.1

2 of 7 See more

eg-edge-stack datawire 0.0.1

2 of the 7 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ambassador/aes-authsvc :v4.0.0-preview.1	2a4598b03a6a	golang.org/x/crypto@v0.10.0	0.55.0
ambassador/aes-wafsvc :v4.0.0-preview.1	5fc571509b8c	golang.org/x/crypto@v0.10.0	0.55.0

Open the chart page →

15,882

dbgatedbgate

0.1.1

1 of 1 See more

dbgate dbgate 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
nathanfirmo/dbgate :latest	6b0487e6e987	golang.org/x/crypto@v0.32.0	0.55.0

Open the chart page →

630

defactopsdefactops

1.0.9

1 of 2 See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
defactops/defactops-ui :1.0.16	825cdf9ba706	golang.org/x/crypto@v0.23.0	0.55.0

Open the chart page →

4,547

symfony-appdefault-gh

0.6.5

1 of 3 See more

symfony-app default-gh 0.6.5

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
alpine/git :2.36.3	66b210a97bc0	golang.org/x/crypto@v0.0.0-20221005025214-4161e89ecf1b	0.55.0

Open the chart page →

5,123

csi-driver-smbdeimosfr-charts

1.20.3

2 of 5 See more

csi-driver-smb deimosfr-charts 1.20.3

2 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/crypto@v0.52.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

2,985

garage-webuideimosfr-charts

1.1.0

1 of 1 See more

garage-webui deimosfr-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
khairul169/garage-webui :1.1.0	17c793551873	golang.org/x/crypto@v0.35.0	0.55.0

Open the chart page →

567

cortex-gatewaydeliveryhero

0.1.9

1 of 1 See more

cortex-gateway deliveryhero 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.55.0

Open the chart page →

2,241

k8s-cloudwatch-adapterdeliveryhero

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.55.0

Open the chart page →

2,475

prometheus-dellhw-exporterdellhw-exporter

1.3.0

1 of 1 See more

prometheus-dellhw-exporter dellhw-exporter 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/galexrt/dellhw_exporter :v2.0.0	b3a5806d73b5	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

1,876

kubeteach-coredergeberl

0.2.3

1 of 1 See more

kubeteach-core dergeberl 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0

Open the chart page →

1,505

kubeteach-exerciseset1dergeberl

0.2.3

1 of 2 See more

kubeteach-exerciseset1 dergeberl 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0

Open the chart page →

1,505

clamav-apidevhat

1.0.1

1 of 1 See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	golang.org/x/crypto@v0.23.0	0.55.0

Open the chart page →

2,099

kyvernodevopstales

2.5.1

2 of 2 See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0

Open the chart page →

4,736

octolxddevplayer0

0.1.1

1 of 1 See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0

Open the chart page →

2,525

ai-agentdevtron

0.0.1

1 of 1 See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.55.0

Open the chart page →

9,703

argocddevtron

1.8.1

2 of 3 See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.55.0

Open the chart page →

10,484

argocd-certificate-refreshdevtron

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0

Open the chart page →

13,033

argo-workflowdevtron

0.1.6

1 of 1 See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.55.0

Open the chart page →

1,587

caddy-reverse-proxydevtron

0.10.1

1 of 1 See more

caddy-reverse-proxy devtron 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/caddy :latest	13ba145cba2f	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

846

devtron-enterprisedevtron

48.0.0

18 of 28 See more

devtron-enterprise devtron 48.0.0

18 of the 28 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.55.0
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	golang.org/x/crypto@v0.46.0	0.55.0
quay.io/devtron/cost-sync :172ef62b-1159-39429	edf210d763ca	golang.org/x/crypto@v0.38.0	0.55.0
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	golang.org/x/crypto@v0.46.0	0.55.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.55.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.55.0
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	golang.org/x/crypto@v0.46.0	0.55.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.55.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.55.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	golang.org/x/crypto@v0.46.0	0.55.0
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	golang.org/x/crypto@v0.46.0	0.55.0
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	golang.org/x/crypto@v0.46.0	0.55.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.55.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.55.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.55.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.55.0

Open the chart page →

68,765

devtron-in-clustercddevtron

0.10.2

2 of 2 See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.55.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.55.0

Open the chart page →

5,055

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.55.0

Open the chart page →

11,981

jcmhproxy-ingressdevtron

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.55.0

Open the chart page →

1,379

kube-prometheus-stackdevtron

19.3.0

2 of 6 See more

kube-prometheus-stack devtron 19.3.0

2 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0

Open the chart page →

8,659

migrantdevtron

0.0.3

1 of 1 See more

migrant devtron 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
migrate/migrate :latest	76cc2074cb66	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

112

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.55.0

Open the chart page →

2,442

Container images carrying it

3,217 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	golang.org/x/crypto@v0.21.0	0.55.0	1
okteto/civo-webhook :0.5.3	57cd51176538	golang.org/x/crypto@v0.13.0	0.55.0	1
oliver006/redis_exporter :v1.82.0-alpine	da9e89ee4e75	golang.org/x/crypto@v0.48.0	0.55.0	1
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.55.0	1
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.55.0	1
ondrejsika/counter :latest	d95eaeee2172	golang.org/x/crypto@v0.43.0	0.55.0	1
openbas/caldera-server :5.1.0	a277796d9724	golang.org/x/crypto@v0.12.0	0.55.0	1
opencloudeu/opencloud :7.2.4	6d992ccc5f1c	golang.org/x/crypto@v0.52.0	0.55.0	1
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0	1
opencsghq/csghub-portal :v2.5.0-ee	1cb36b49151e	golang.org/x/crypto@v0.26.0	0.55.0	1
opencsghq/csghub-server :v2.5.0-ee	587046575c2c	golang.org/x/crypto@v0.54.0	0.55.0	1
opencsghq/csghub-xnet :v2.5.0-ee	86ea22f495c7	golang.org/x/crypto@v0.37.0	0.55.0	1
opencsghq/gitlab-gitaly :v17.5.0	bdd2c58b9744	golang.org/x/crypto@v0.28.0	0.55.0	1
opencsghq/gitlab-shell :v19.2.5	80a65ac370da	golang.org/x/crypto@v0.54.0	0.55.0	1
opencsghq/kube-state-metrics :v2.19.1	5ea147562ec8	golang.org/x/crypto@v0.52.0	0.55.0	1
opencsghq/prometheus :v3.13.0	0aac0d04749e	golang.org/x/crypto@v0.52.0	0.55.0	1
opencsghq/prometheus-config-reloader :v0.92.1	44e6ec00729b	golang.org/x/crypto@v0.53.0	0.55.0	1
openebs/provisioner-nfs :0.11.0	4f41dd782761	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.55.0	1
openenergyprojects/modbus_exporter :20230617_a144551	58990f24fb25	golang.org/x/crypto@v0.7.0	0.55.0	1
openfga/openfga :v1.9.2	5e94966c11df	golang.org/x/crypto@v0.36.0	0.55.0	1
openkruise/kruise-manager :v1.8.3	0482722b4e56	golang.org/x/crypto@v0.31.0	0.55.0	1
openkruise/kruise-manager :v1.9.1	f81ae78a36a4	golang.org/x/crypto@v0.36.0	0.55.0	1
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.55.0	1
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/crypto@v0.19.0	0.55.0	1
opennms/sentinel :36.0.2	88869082a14f	golang.org/x/crypto@v0.27.0	0.55.0	1
openpolicyagent/gatekeeper :v3.17.1	b7b4d7cfdd52	golang.org/x/crypto@v0.25.0	0.55.0	1
openpolicyagent/gatekeeper :v3.23.1	dfc6fc78753f	golang.org/x/crypto@v0.53.0	0.55.0	1
openpolicyagent/opa :1.19.0	852359995443	golang.org/x/crypto@v0.53.0	0.55.0	1
opensearchproject/opensearch-operator :3.0.0-alpha	f78bbdd1a386	golang.org/x/crypto@v0.45.0	0.55.0	1
opentext/verticadb-operator :26.2.2-0	4ad44e44476c	golang.org/x/crypto@v0.54.0	0.55.0	1
openvino/model_server :2025.2.1	1e7cd1d70cc1	golang.org/x/crypto@v0.36.0	0.55.0	1
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	golang.org/x/crypto@v0.0.0-20191029031824-8986dd9e96cf	0.55.0	1
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/crypto@v0.14.0	0.55.0	1
orbitalreg/orbitalreg-api :0.1.0	45f2620337af	golang.org/x/crypto@v0.26.0	0.55.0	1
oryd/hydra :v2.3.0	b94007e19a1f	golang.org/x/crypto@v0.31.0	0.55.0	1
oryd/hydra :v26.2.0	ff67c7fb5f95	golang.org/x/crypto@v0.46.0	0.55.0	1
oryd/keto :v26.2.0	bfdb8b9e283a	golang.org/x/crypto@v0.46.0	0.55.0	1
oryd/kratos :v26.2.0	2a13bb8d362c	golang.org/x/crypto@v0.46.0	0.55.0	1
oryd/kratos :v1.1.0	8f15006a080d	golang.org/x/crypto@v0.18.0	0.55.0	1
oryd/oathkeeper :v26.2.0	467329abde34	golang.org/x/crypto@v0.46.0	0.55.0	1
otel/opentelemetry-collector :0.153.0	6ed874ea083d	golang.org/x/crypto@v0.52.0	0.55.0	1
otel/opentelemetry-collector :0.100.0	9e36620d6c2c	golang.org/x/crypto@v0.22.0	0.55.0	1
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.55.0	1
otel/opentelemetry-collector-contrib :0.114.0	37fa87091cfa	golang.org/x/crypto@v0.29.0	0.55.0	1
otel/opentelemetry-collector-contrib :0.143.0	3bc07732530c	golang.org/x/crypto@v0.46.0	0.55.0	1
otel/opentelemetry-collector-contrib :0.113.0	5ac3e0ba2b0b	golang.org/x/crypto@v0.28.0	0.55.0	1
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/crypto@v0.12.0	0.55.0	1
otel/opentelemetry-collector-contrib :0.108.0	923eb1cfae32	golang.org/x/crypto@v0.26.0	0.55.0	1
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/crypto@v0.15.0	0.55.0	1
otel/opentelemetry-collector-contrib :0.145.0	a7343f018690	golang.org/x/crypto@v0.47.0	0.55.0	1