StackRadar

CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.003
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,882
of 17,803 indexed, latest versions
Container images
3,233
deployed by those charts
Fix available
1 of 1
affected package

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,882 of 17,803 indexed charts deploy, on 3,233 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more0.55.03,233
OSV records
GO-2026-6303

Charts affected

2,882 by stars
ChartLatestAffected imagesRadar Score
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
golang.org/x/crypto@v0.41.0
0.55.0

Open the chart page →

773
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
golang.org/x/crypto@v0.39.0
0.55.0

Open the chart page →

2,682
glidergliderVerified publisher0.1.51 of 1See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
nadoo/glider:0.1638aadefbd607
golang.org/x/crypto@v0.26.0
0.55.0

Open the chart page →

894
gnp-stackgnp-stack0.0.54 of 14See more

gnp-stack gnp-stack 0.0.5

4 of the 14 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
golang.org/x/crypto@v0.42.0
0.55.0
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
golang.org/x/crypto@v0.48.0
0.55.0
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/crypto@v0.36.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
golang.org/x/crypto@v0.40.0
0.55.0

Open the chart page →

7,720
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
goccx/go-file-server:latestf4b3ebea0303
golang.org/x/crypto@v0.25.0
0.55.0

Open the chart page →

2,222
gofitgofit0.0.11 of 1See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/bamaas/gofit:0.0.132b6a174b419
golang.org/x/crypto@v0.22.0
0.55.0

Open the chart page →

651
gorsegorse-io0.4.23 of 4See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.55.0
zhenghaoz/gorse-server:0.4.1239c565685b01
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.55.0
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.55.0

Open the chart page →

4,437
gosmee-clientgosmee-clientVerified publisher0.1.31 of 1See more

gosmee-client gosmee-client 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/chmouel/gosmee:v0.32.060b8db1f68cc
golang.org/x/crypto@v0.53.0
0.55.0

Open the chart page →

277
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.55.0
library/mongo:latest5211c51171f5
golang.org/x/crypto@v0.54.0
0.55.0

Open the chart page →

22,704
Governify-Falcongovernify0.1.03 of 10See more

Governify-Falcon governify 0.1.0

3 of the 10 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.55.0
library/mongo:latest5211c51171f5
golang.org/x/crypto@v0.54.0
0.55.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
0.55.0

Open the chart page →

24,493
harborgpg-dev1.18.34 of 8See more

harbor gpg-dev 1.18.3

4 of the 8 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
golang.org/x/crypto@v0.45.0
0.55.0
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
golang.org/x/crypto@v0.45.0
0.55.0
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
golang.org/x/crypto@v0.45.0
0.55.0
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
golang.org/x/crypto@v0.46.0
0.55.0

Open the chart page →

3,460
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
golang.org/x/crypto@v0.17.0
0.55.0
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
golang.org/x/crypto@v0.17.0
0.55.0

Open the chart page →

19,370
kube-prometheus-stackgpg-dev84.0.03 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
golang.org/x/crypto@v0.49.0
0.55.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/crypto@v0.49.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/crypto@v0.46.0
0.55.0

Open the chart page →

4,330
kubernetes-dashboardgpg-dev7.5.03 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

3 of the 5 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.7.060595892c2cf
golang.org/x/crypto@v0.23.0
0.55.0
kubernetesui/dashboard-auth:1.1.307135c09e9ff
golang.org/x/crypto@v0.21.0
0.55.0
kubernetesui/dashboard-web:1.4.04445b31a2c25
golang.org/x/crypto@v0.23.0
0.55.0

Open the chart page →

6,092
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
golang.org/x/crypto@v0.18.0
0.55.0

Open the chart page →

1,085
opentelemetry-demogpg-dev0.33.87 of 27See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
golang.org/x/crypto@v0.27.0
0.55.0
jaegertracing/all-in-one:1.53.060e65bfffe1f
golang.org/x/crypto@v0.17.0
0.55.0
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
golang.org/x/crypto@v0.29.0
0.55.0
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
golang.org/x/crypto@v0.25.0
0.55.0
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
golang.org/x/crypto@v0.23.0
0.55.0
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
golang.org/x/crypto@v0.17.0
0.55.0
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
golang.org/x/crypto@v0.28.0
0.55.0

Open the chart page →

49,771
prometheusgpg-dev29.2.16 of 6See more

prometheus gpg-dev 29.2.1

6 of the 6 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.1693faa0b8724
golang.org/x/crypto@v0.49.0
0.55.0
quay.io/prometheus/alertmanager:v0.32.058e117eabcce
golang.org/x/crypto@v0.49.0
0.55.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/crypto@v0.49.0
0.55.0
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
golang.org/x/crypto@v0.49.0
0.55.0
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
golang.org/x/crypto@v0.43.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/crypto@v0.46.0
0.55.0

Open the chart page →

3,309
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
golang.org/x/crypto@v0.47.0
0.55.0

Open the chart page →

602
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
golang.org/x/crypto@v0.48.0
0.55.0

Open the chart page →

1,308
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
golang.org/x/crypto@v0.45.0
0.55.0

Open the chart page →

1,573
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
prom/graphite-exporter:latestc1a266f63a84
golang.org/x/crypto@v0.53.0
0.55.0

Open the chart page →

6,149
cloudcost-exportergrafana1.1.131 of 1See more

cloudcost-exporter grafana 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/cloudcost-exporter:v1.12.0eeb2cfecb23e
golang.org/x/crypto@v0.52.0
0.55.0

Open the chart page →

162
grafana-cloud-onboardinggrafana0.4.73 of 5See more

grafana-cloud-onboarding grafana 0.4.7

3 of the 5 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
golang.org/x/crypto@v0.47.0
0.55.0
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
golang.org/x/crypto@v0.49.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
golang.org/x/crypto@v0.46.0
0.55.0

Open the chart page →

4,736
grafana-samplinggrafana1.1.72 of 2See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
golang.org/x/crypto@v0.41.0
0.55.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
golang.org/x/crypto@v0.36.0
0.55.0

Open the chart page →

3,403
mimir-openshift-experimentalgrafana2.1.03 of 4See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e
0.55.0
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392
0.55.0
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392
0.55.0

Open the chart page →

17,808
pyroscope-monitoringgrafana0.1.14 of 6See more

pyroscope-monitoring grafana 0.1.1

4 of the 6 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
golang.org/x/crypto@v0.41.0
0.55.0
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
golang.org/x/crypto@v0.39.0
0.55.0
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
golang.org/x/crypto@v0.36.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
golang.org/x/crypto@v0.40.0
0.55.0

Open the chart page →

8,488
synthetic-monitoring-agentgrafana-communityVerified publisher1.19.01 of 1See more

synthetic-monitoring-agent grafana-community 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grafana/synthetic-monitoring-agent:v0.65.0fe3e095283f0
golang.org/x/crypto@v0.54.0
0.55.0

Open the chart page →

223
prometheusgrafana-uxadax26.0.16 of 6See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
golang.org/x/crypto@v0.28.0
0.55.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
golang.org/x/crypto@v0.28.0
0.55.0
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
golang.org/x/crypto@v0.18.0
0.55.0
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/crypto@v0.21.0
0.55.0
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
golang.org/x/crypto@v0.26.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/crypto@v0.28.0
0.55.0

Open the chart page →

5,323
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.55.0

Open the chart page →

7,520
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
golang.org/x/crypto@v0.27.0
0.55.0

Open the chart page →

78,760
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
library/mongo:85211c51171f5
golang.org/x/crypto@v0.54.0
0.55.0

Open the chart page →

5,389
armada-executorgresearch0.22.81 of 1See more

armada-executor gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gresearch/armada-executor:latest393aff4aa8f2
golang.org/x/crypto@v0.51.0
0.55.0

Open the chart page →

868
armada-lookout-ingestergresearch0.22.81 of 1See more

armada-lookout-ingester gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gresearch/armada-lookout-ingester:latest3df14cda1855
golang.org/x/crypto@v0.51.0
0.55.0

Open the chart page →

868
armada-lookout-migrationgresearch0.22.81 of 1See more

armada-lookout-migration gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gresearch/armada-lookout:latestf5e3226f1d33
golang.org/x/crypto@v0.51.0
0.55.0

Open the chart page →

868
armada-scheduler-migrationgresearch0.22.81 of 1See more

armada-scheduler-migration gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gresearch/armada-scheduler:latest6141a6213fcb
golang.org/x/crypto@v0.51.0
0.55.0

Open the chart page →

868
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
golang.org/x/crypto@v0.22.0
0.55.0

Open the chart page →

1,398
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.55.0

Open the chart page →

14,302
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
golang.org/x/crypto@v0.25.0
0.55.0

Open the chart page →

2,608
loki-proxygroundcover0.1.11 of 1See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.55.0

Open the chart page →

2,182
routergroundcover1.12.3751 of 7See more

router groundcover 1.12.375

1 of the 7 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
golang.org/x/crypto@v0.54.0
0.55.0

Open the chart page →

6,154
temporalgroundcover1.12.3752 of 2See more

temporal groundcover 1.12.375

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
golang.org/x/crypto@v0.52.0
0.55.0
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
golang.org/x/crypto@v0.50.0
0.55.0

Open the chart page →

2,164
tailscale-subnet-routergtaylor1.2.11 of 1See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/tailscale/tailscale:v1.34.1ce1862e6b3a5
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.55.0

Open the chart page →

1,834
minifluxhajowielandVerified publisher1.0.01 of 1See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
golang.org/x/crypto@v0.37.0
0.55.0

Open the chart page →

1,257
docker-authhalkeye0.1.11 of 1See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.55.0

Open the chart page →

2,381
matrix-media-repohalkeye1.0.51 of 1See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.55.0

Open the chart page →

4,462
thunderdome-planning-pokerhalkeye0.1.11 of 1See more

thunderdome-planning-poker halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
stevenweathers/thunderdome-planning-poker:latestc7eb7b10f186
golang.org/x/crypto@v0.49.0
0.55.0

Open the chart page →

432
hcp-terraform-operatorhashicorpVerified publisher2.12.11 of 2See more

hcp-terraform-operator hashicorp 2.12.1

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
golang.org/x/crypto@v0.45.0
0.55.0

Open the chart page →

692
cert-manager-webhook-arvanhbahadorzadeh0.1.11 of 1See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
hbahadorzadeh/cert-manager-webhook-arvan:latestbf9756b3bc47
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.55.0

Open the chart page →

3,030
kubernetes-event-exporterhbahadorzadeh0.1.01 of 1See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
golang.org/x/crypto@v0.0.0-20191029031824-8986dd9e96cf
0.55.0

Open the chart page →

2,637
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.55.0

Open the chart page →

6,762

Container images carrying it

3,233 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
toucansoftware/spa-reloader:latestc187b1fba501
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.55.0
1
traefik/mesh:v1.4.8cf071f3e165c
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.55.0
1
traggo/server:0.2.3f1ced637510e
golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f
0.55.0
1
treeverse/everest-lakefs-csi-driver:1.3.0bda61b3fe5d8
golang.org/x/crypto@v0.53.0
0.55.0
1
treeverse/lakefs:0.69.0478f37a6cffc
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.55.0
1
treeverse/lakefs:1.86.0fb7a0d90f77e
golang.org/x/crypto@v0.53.0
0.55.0
1
truebyteinnovationllp/redis-exporter:v1.86.01c6a945af653
golang.org/x/crypto@v0.52.0
0.55.0
1
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
golang.org/x/crypto@v0.0.0-20211108221036-ceb1ce70b4fa
0.55.0
1
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.55.0
1
tusproject/tusd:v1.13.0f8088058b80f
golang.org/x/crypto@v0.12.0
0.55.0
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88
0.55.0
1
twinproduction/gatus:v5.34.03fff895e77d3
golang.org/x/crypto@v0.45.0
0.55.0
1
twinproduction/gatus:v3.8.049dc0d9b2e2c
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.55.0
1
tykio/portal:v1.18.092509e00e618
golang.org/x/crypto@v0.52.0
0.55.0
1
tykio/tyk-operator:v1.4.2e13d37f298b7
golang.org/x/crypto@v0.52.0
0.55.0
1
ubercadence/server:0.23.22ac5491d13bb
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.55.0
1
udhos/forward:1.1.312e120d39fdb
golang.org/x/crypto@v0.9.0
0.55.0
1
udhos/gateboard:1.12.53acc0e7599bf
golang.org/x/crypto@v0.43.0
0.55.0
1
udhos/lambdaping:1.0.46bd2cf2ac732
golang.org/x/crypto@v0.31.0
0.55.0
1
udhos/mongoping:1.3.103b08b63f524
golang.org/x/crypto@v0.38.0
0.55.0
1
udhos/snsping:1.2.96ae70677b6a3
golang.org/x/crypto@v0.31.0
0.55.0
1
uptrace/uptrace:2.0.234a02c3b2d12
golang.org/x/crypto@v0.40.0
0.55.0
1
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.55.0
1
v2fly/v2fly-core:latestd06727b221fe
golang.org/x/crypto@v0.43.0
0.55.0
1
vearch/vearch:3.3.40768af33f9d9
golang.org/x/crypto@v0.9.0
0.55.0
1
veecode/devportala72cf5cb47b8
golang.org/x/crypto@v0.46.0
0.55.0
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
golang.org/x/crypto@v0.25.0
0.55.0
1
velero/velero:v1.9.0277fbfaf8dcf
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.55.0
1
velero/velero:v1.8.18d784580931c
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.55.0
1
velero/velero:v1.18.0e4d1e79be2ee
golang.org/x/crypto@v0.45.0
0.55.0
1
venturenox/sagawise:latestc11d32f18718
golang.org/x/crypto@v0.27.0
0.55.0
1
versity/versitygw:v1.0.145192635d0353
golang.org/x/crypto@v0.38.0
0.55.0
1
versity/versitygw:v1.6.0d6ec798f66ca
golang.org/x/crypto@v0.53.0
0.55.0
1
versity/versitygw:v1.1.0f730e0dbc1ef
golang.org/x/crypto@v0.47.0
0.55.0
1
vikunja/api:0.17.18cba0520bf8c
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.55.0
1
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
golang.org/x/crypto@v0.21.0
0.55.0
1
vmware/kube-fluentd-operator:latestf028c138a5f4
golang.org/x/crypto@v0.17.0
0.55.0
1
voidxmh/xmh-auther:v193e42a569ca8
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.55.0
1
voidxmh/xmh-cacher:v11b7397412320
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.55.0
1
voidxmh/xmh-ui:v12ff3f2146547
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.55.0
1
volantmq/volantmq:v0.4.0-rc.69bfe7857ebc3
golang.org/x/crypto@v0.0.0-20190927123631-a832865fa7ad
0.55.0
1
volcanosh/vc-controller-manager:v1.12.13815883c32f6
golang.org/x/crypto@v0.37.0
0.55.0
1
volcanosh/vc-controller-manager:v1.15.26a6bc2560d51
golang.org/x/crypto@v0.53.0
0.55.0
1
volcanosh/vc-webhook-manager:v1.15.22fff65aad011
golang.org/x/crypto@v0.53.0
0.55.0
1
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
golang.org/x/crypto@v0.37.0
0.55.0
1
voltha/bbsim:1.16.7d90403d58016
golang.org/x/crypto@v0.0.0-20200204104054-c9f3fb736b72
0.55.0
1
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.55.0
1
voltha/bbsim-sadis-server:0.4.0762b272d439e
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.55.0
1
vultr/cert-manager-webhook-vultr:v0.1.0541c3e0aec58
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.55.0
1
vultr/vultr-cloud-controller-manager:v0.3.01806f17d620c
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.55.0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.