CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,873; of 17,792 indexed, latest versions
Container images: 3,219; deployed by those charts
Fix available: 2 of 2; affected packages

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,873 of 17,792 indexed charts deploy, on 3,219 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more	0.55.0	3,219
kubernetes-1.34apk	1.34.11-r2	1.34.11-r3	1

OSV records: CGA-4wg8-vwxq-5g46 GO-2026-6303
Also known as: CGA-548p-j75q-3522, CGA-7fgq-fgg6-f7cr, CGA-8q6m-f35p-p88g, CGA-9xqw-wrfv-3c6w, CGA-fmc9-vwrf-6jq2, CGA-h33c-jrc2-36rr, CGA-jqcq-hwv9-6wwp, CGA-mc7r-3393-487f, CGA-p3hc-qw8w-gf4f, CGA-qf3x-28f7-2hcw, CGA-w35x-xg67-9c7c

Charts affected

2,873 by stars

Chart

Latest

Affected images

Radar Score

zabbixzabbix-community

7.1.0

1 of 5 See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

13,880

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	golang.org/x/crypto@v0.48.0	0.55.0
1password/connect-sync :1.8.2	6297ca6136c0	golang.org/x/crypto@v0.48.0	0.55.0

Open the chart page →

2,584

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

1,984

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.55.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.55.0

Open the chart page →

2,497

opencostopencost

2.5.31

1 of 2 See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.2	de2784434527	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

273

openfaasopenfaas

15.0.13

5 of 6 See more

openfaas openfaas 15.0.13

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	golang.org/x/crypto@v0.15.0	0.55.0
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	golang.org/x/crypto@v0.41.0	0.55.0
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	golang.org/x/crypto@v0.30.0	0.55.0
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

3,558

prometheus-elasticsearch-exporterprometheus-community

7.4.0

1 of 1 See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/elasticsearch-exporter :v1.11.0	a056739b095d	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

flux2fluxcd-community

2.19.0

7 of 7 See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/image-automation-controller :v1.2.2	6b0b16ab2115	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/image-reflector-controller :v1.2.2	27e6bad1dac5	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/kustomize-controller :v1.9.2	3aecec8bafdb	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/notification-controller :v1.9.2	9ce503e7bcb8	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

3,006

vault-secrets-operatorhashicorp

1.5.1

2 of 2 See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
hashicorp/vault-secrets-operator :1.5.1	458c842add32	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/crypto@v0.26.0	0.55.0

Open the chart page →

1,054

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

1,374

gatekeepergatekeeper

3.23.1

1 of 3 See more

gatekeeper gatekeeper 3.23.1

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.23.1	dfc6fc78753f	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

503

snapshot-controllerpiraeus-charts

5.2.0

1 of 1 See more

snapshot-controller piraeus-charts 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

235

rocketchatrocketchat-server

7.0.2

4 of 12 See more

rocketchat rocketchat-server 7.0.2

4 of the 12 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.55.0
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.55.0
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

12,286

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

2,109

k10kasten

9.0.5

2 of 23 See more

k10 kasten 9.0.5

2 of the 23 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gcr.io/kasten-images/configmap-reload :9.0.5	1de689e621c5	golang.org/x/crypto@v0.54.0	0.55.0
gcr.io/kasten-images/prometheus :9.0.5	da2bf307c353	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

2,307

ceph-csi-cephfsceph-csi

3.17.1

5 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

4,103

ceph-csi-rbdceph-csi

3.17.1

5 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

4,103

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	golang.org/x/crypto@v0.49.0	0.55.0

Open the chart page →

6,415

csi-driver-nfscsi-driver-nfs

4.13.4

3 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.4

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/crypto@v0.52.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/crypto@v0.47.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

3,391

mariadb-operatormariadb-operator

26.6.0

1 of 1 See more

mariadb-operator mariadb-operator 26.6.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/mariadb-operator/mariadb-operator :26.6.0	a5e17b48f08e	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

377

portainerportainer

245.1.0

1 See more

portainer portainer 245.1.0

1 container image this version deploys carries CVE-2026-56854.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.45.0	511f3f06c96f	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

—

atlantisatlantis

6.15.1

1 of 1 See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

1,899

codercoder-v2

2.37.1

1 of 1 See more

coder coder-v2 2.37.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/coder/coder :v2.37.1	0c6994bb4c5a	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

194

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0

Open the chart page →

2,461

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/crypto@v0.9.0	0.55.0
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/crypto@v0.7.0	0.55.0

Open the chart page →

32,420

flaggerflagger

1.45.0

1 of 1 See more

flagger flagger 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger :1.45.0	15b372d35012	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

230

grafana-agentgrafana

0.44.2

1 of 2 See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/crypto@v0.31.0	0.55.0

Open the chart page →

3,526

mesherymeshery

1.0.70

1 of 1 See more

meshery meshery 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	44b64ee128fb	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

1,438

prometheus-mysql-exporterprometheus-community

2.15.0

1 of 1 See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :v0.20.0	abed8dac117b	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

victoria-metrics-operatorvictoriametrics

0.67.3

1 of 1 See more

victoria-metrics-operator victoriametrics 0.67.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.74.1	7310c4a80b94	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

115

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.55.0

Open the chart page →

10,695

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	golang.org/x/crypto@v0.35.0	0.55.0

Open the chart page →

2,228

tempografana-community

3.0.0

1 of 1 See more

tempo grafana-community 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/tempo :3.0.3	0296560ac66f	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

155

keelkeel

1.2.2

1 of 1 See more

keel keel 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/keel-hq/keel :0.22.3	315e188a07c2	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

818

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/crypto@v0.32.0	0.55.0

Open the chart page →

716

prometheus-mongodb-exporterprometheus-community

3.22.0

1 of 1 See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
percona/mongodb_exporter :0.53.0	0214e482b2cd	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

238

node-local-dnsdeliveryhero

2.9.2

1 of 1 See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/crypto@v0.43.0	0.55.0

Open the chart page →

1,708

fission-allfission-charts

1.27.0

1 of 3 See more

fission-all fission-charts 1.27.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fission/fission-bundle :v1.27.0	d353720b037a	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

302

rancherrancher-latest

2.15.1

2 of 2 See more

rancher rancher-latest 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/crypto@v0.48.0	0.55.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

1,487

sealed-secretsbitnami

2.5.19

1 of 1 See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	golang.org/x/crypto@v0.41.0	0.55.0

Open the chart page →

643

difydouban

0.10.0

2 of 6 See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	golang.org/x/crypto@v0.40.0	0.55.0
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

19,544

kubesharkkubeshark-helm-charts

53.4.0

2 of 3 See more

kubeshark kubeshark-helm-charts 53.4.0

2 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
kubeshark/hub :v53.4	6d3f22525a0e	golang.org/x/crypto@v0.54.0	0.55.0
kubeshark/worker :v53.4	b226490dfa11	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

839

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

2,139

mongodbcloudpirates-mongodb

0.18.13

1 of 1 See more

mongodb cloudpirates-mongodb 0.18.13

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/mongo :8.3.9	81a1c8842a09	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

965

kube-image-keeperenix

2.3.1

1 of 1 See more

kube-image-keeper enix 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/enix/kube-image-keeper :2.3.1	d3ccf28495c3	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

opensearch-operatoropensearch-operator

3.0.2

1 of 1 See more

opensearch-operator opensearch-operator 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-operator :3.0.0-alpha	f78bbdd1a386	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

610

pxc-operatorpercona

1.20.1

1 of 1 See more

pxc-operator percona 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
percona/percona-xtradb-cluster-operator :1.20.0	ac4d0995c71e	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

417

pulsarapache

4.7.0

5 of 10 See more

pulsar apache 4.7.0

5 of the 10 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/crypto@v0.46.0	0.55.0
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/crypto@v0.47.0	0.55.0
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

9,891

miniocloudpirates-minio

0.13.4

1 of 1 See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	golang.org/x/crypto@v0.43.0	0.55.0

Open the chart page →

968

difydify-helm

0.38.0

3 of 11 See more

dify dify-helm 0.38.0

3 of the 11 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
langgenius/dify-api :1.16.1	dcefa5f7c47c	golang.org/x/crypto@v0.53.0	0.55.0
langgenius/dify-plugin-daemon :0.6.3-local	3c694329357b	golang.org/x/crypto@v0.52.0	0.55.0
langgenius/dify-sandbox :0.2.15	750e1111426e	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

22,214

Container images carrying it

3,219 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/appscode/cattleset :v0.0.1	45554a03e448	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/cert-manager-webhook-ace :v0.0.2	dc6b5fdcec06	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/cloudflare-dns-proxy :v0.0.5	dfbef0285e14	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/cluster-connector :v0.0.14	0efd9d9ef6ca	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/cluster-presets :v0.0.12	8fbdd2479645	golang.org/x/crypto@v0.52.0	0.55.0	1
ghcr.io/appscode/csi-driver-cacerts :v0.5.0	b6bf1888f9d5	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/docker-machine-operator :v0.0.4	81f6007abb4e	golang.org/x/crypto@v0.21.0	0.55.0	1
ghcr.io/appscode/external-dns-operator :v0.4.0	5605f97e636d	golang.org/x/crypto@v0.52.0	0.55.0	1
ghcr.io/appscode/falco-ui-server :v0.0.6	6ec488d89b56	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/fileserver :v0.0.2	b1857871e06c	golang.org/x/crypto@v0.24.0	0.55.0	1
ghcr.io/appscode/gcp-credential-manager :v0.1.0	b58345fe8209	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/gh-ci-webhook :v0.0.20	36ce246d884e	golang.org/x/crypto@v0.31.0	0.55.0	1
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	golang.org/x/crypto@v0.45.0	0.55.0	1
ghcr.io/appscode/grafana :v2025.2.3	67d18880448c	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	1
ghcr.io/appscode/inbox-agent :v0.0.6	6b99ee9feece	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/kube-rbac-proxy :v0.18.2	7de54b6dedc8	golang.org/x/crypto@v0.29.0	0.55.0	1
ghcr.io/appscode/kube-rbac-proxy :v0.15.0	d8cc6ffb9819	golang.org/x/crypto@v0.14.0	0.55.0	1
ghcr.io/appscode/kube-ui-server :v0.7.0	79e67164b4f0	golang.org/x/crypto@v0.52.0	0.55.0	1
ghcr.io/appscode/license-proxyserver :v0.0.8	d6c2532ea386	golang.org/x/crypto@v0.17.0	0.55.0	1
ghcr.io/appscode/offline-license-server :v0.0.76	e4b66308d8f6	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/outboxsyncer :v0.5.0	150baab6115d	golang.org/x/crypto@v0.54.0	0.55.0	1
ghcr.io/appscode/panopticon :v0.0.23	a645b40d2d3b	golang.org/x/crypto@v0.52.0	0.55.0	1
ghcr.io/appscode/pgoutbox :v0.0.4	a96e06ec5e9f	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/scanner :v0.0.21	16907aae5de1	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/smtprelay :v0.0.4	79c9c76a78e6	golang.org/x/crypto@v0.32.0	0.55.0	1
ghcr.io/appscode/storage-metrics-server :v0.1.0	9cb4acb742a9	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/trickster :v2.0.0	cdbbed831f28	golang.org/x/crypto@v0.46.0	0.55.0	1
ghcr.io/appscode/virtual-secrets-server :v0.4.0	efa03f4c9551	golang.org/x/crypto@v0.52.0	0.55.0	1
ghcr.io/aquasecurity/trivy-operator :0.16.0	a608b798fda5	golang.org/x/crypto@v0.12.0	0.55.0	1
ghcr.io/argelbargel/vault-raft-snapshot-agent :v0.12.5	345174727a2b	golang.org/x/crypto@v0.36.0	0.55.0	1
ghcr.io/arpa-network/node-client :latest	657a2c9f6e6d	golang.org/x/crypto@v0.22.0	0.55.0	1
ghcr.io/aserto-dev/topaz :0.32.59	4c708ecf7dc4	golang.org/x/crypto@v0.37.0	0.55.0	1
ghcr.io/ashvinbambhaniya/nexus-tasks-backend :2.0.0	f80349eb018b	golang.org/x/crypto@v0.49.0	0.55.0	1
ghcr.io/astriaorg/astria-indexer :0.1.0	5cf1e5709820	golang.org/x/crypto@v0.24.0	0.55.0	1
ghcr.io/astriaorg/astria-indexer-api :0.1.0	3490d9900af1	golang.org/x/crypto@v0.24.0	0.55.0	1
ghcr.io/astriaorg/flame :0.1.0	c8af1c5aae40	golang.org/x/crypto@v0.24.0	0.55.0	1
ghcr.io/astriaorg/ria-faucet :0.0.1	a06c8ebef427	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.55.0	1
ghcr.io/astriaorg/seq-faucet :0.9.0	bf3cb9b505b6	golang.org/x/crypto@v0.26.0	0.55.0	1
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.55.0	1
ghcr.io/autobrr/qui :v1.14.1	10b7945d4f09	golang.org/x/crypto@v0.47.0	0.55.0	1
ghcr.io/automata-network/multi-prover-avs/operator :v0.6.0	752f1aa02438	golang.org/x/crypto@v0.24.0	0.55.0	1
ghcr.io/avistotelecom/kubebrowser :0.10.0	a354b8dc7e6a	golang.org/x/crypto@v0.45.0	0.55.0	1
ghcr.io/axonops/axonops-developer-operator :v0.1.0	b3d6600c8ba5	golang.org/x/crypto@v0.31.0	0.55.0	1
ghcr.io/bamaas/gofit :0.0.1	32b6a174b419	golang.org/x/crypto@v0.22.0	0.55.0	1
ghcr.io/bank-vaults/bank-vaults :v1.33.1	98b6ea2ed319	golang.org/x/crypto@v0.52.0	0.55.0	1
ghcr.io/bank-vaults/vault-secrets-webhook :v1.23.1	98baf045a1c9	golang.org/x/crypto@v0.52.0	0.55.0	1
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	golang.org/x/crypto@v0.7.0	0.55.0	1
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.55.0	1
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.55.0	1
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.55.0	1