CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,888; of 17,781 indexed, latest versions
Container images: 3,237; deployed by those charts
Fix available: 2 of 2; affected packages

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,888 of 17,781 indexed charts deploy, on 3,237 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more	0.55.0	3,237
kubernetes-1.34apk	1.34.11-r2	1.34.11-r3	1

OSV records: CGA-4wg8-vwxq-5g46 GO-2026-6303
Also known as: CGA-548p-j75q-3522, CGA-7fgq-fgg6-f7cr, CGA-8q6m-f35p-p88g, CGA-9xqw-wrfv-3c6w, CGA-fmc9-vwrf-6jq2, CGA-h33c-jrc2-36rr, CGA-jqcq-hwv9-6wwp, CGA-mc7r-3393-487f, CGA-p3hc-qw8w-gf4f, CGA-qf3x-28f7-2hcw, CGA-w35x-xg67-9c7c

Charts affected

2,888 by stars

Chart

Latest

Affected images

Radar Score

zabbixzabbix-community

7.1.0

1 of 5 See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

13,664

netdatanetdata

3.7.173

1 of 1 See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.11.0	c45c71eb23ff	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

3,092

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	golang.org/x/crypto@v0.48.0	0.55.0
1password/connect-sync :1.8.2	6297ca6136c0	golang.org/x/crypto@v0.48.0	0.55.0

Open the chart page →

2,550

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

1,955

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.55.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.55.0

Open the chart page →

2,483

opencostopencost

2.5.31

1 of 2 See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.2	de2784434527	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

265

openfaasopenfaas

15.0.13

5 of 6 See more

openfaas openfaas 15.0.13

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	golang.org/x/crypto@v0.15.0	0.55.0
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	golang.org/x/crypto@v0.41.0	0.55.0
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	golang.org/x/crypto@v0.30.0	0.55.0
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

3,543

prometheus-elasticsearch-exporterprometheus-community

7.4.0

1 of 1 See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/elasticsearch-exporter :v1.11.0	a056739b095d	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

flux2fluxcd-community

2.19.0

7 of 7 See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/image-automation-controller :v1.2.2	6b0b16ab2115	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/image-reflector-controller :v1.2.2	27e6bad1dac5	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/kustomize-controller :v1.9.2	3aecec8bafdb	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/notification-controller :v1.9.2	9ce503e7bcb8	golang.org/x/crypto@v0.53.0	0.55.0
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

2,951

gatekeepergatekeeper

3.23.1

1 of 3 See more

gatekeeper gatekeeper 3.23.1

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.23.1	dfc6fc78753f	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

495

vault-secrets-operatorhashicorp

1.5.1

2 of 2 See more

vault-secrets-operator hashicorp 1.5.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
hashicorp/vault-secrets-operator :1.5.1	458c842add32	golang.org/x/crypto@v0.54.0	0.55.0
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	golang.org/x/crypto@v0.26.0	0.55.0

Open the chart page →

1,040

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

1,367

snapshot-controllerpiraeus-charts

5.2.0

1 of 1 See more

snapshot-controller piraeus-charts 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/snapshot-controller :v8.6.0	81e79f205083	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

228

rocketchatrocketchat-server

7.0.2

4 of 12 See more

rocketchat rocketchat-server 7.0.2

4 of the 12 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.55.0
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0
natsio/nats-box :0.19.2	8031d190c7ee	golang.org/x/crypto@v0.31.0	0.55.0
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

12,279

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

2,103

k10kasten

9.0.5

2 of 23 See more

k10 kasten 9.0.5

2 of the 23 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
gcr.io/kasten-images/configmap-reload :9.0.5	1de689e621c5	golang.org/x/crypto@v0.54.0	0.55.0
gcr.io/kasten-images/prometheus :9.0.5	da2bf307c353	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

1,880

ceph-csi-cephfsceph-csi

3.17.1

5 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

4,061

ceph-csi-rbdceph-csi

3.17.1

5 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.17.1	0b62db8afc9b	golang.org/x/crypto@v0.50.0	0.55.0
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	golang.org/x/crypto@v0.45.0	0.55.0
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	golang.org/x/crypto@v0.48.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	golang.org/x/crypto@v0.46.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	golang.org/x/crypto@v0.47.0	0.55.0

Open the chart page →

4,061

chaos-meshchaos-mesh

2.8.4

4 of 4 See more

chaos-mesh chaos-mesh 2.8.4

4 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0
ghcr.io/chaos-mesh/chaos-daemon :v2.8.4	0d28dbd95b03	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.8.4	8a8ec8d4c9ea	golang.org/x/crypto@v0.49.0	0.55.0
ghcr.io/chaos-mesh/chaos-mesh :v2.8.4	9e48285bb44c	golang.org/x/crypto@v0.49.0	0.55.0

Open the chart page →

6,342

csi-driver-nfscsi-driver-nfs

4.13.4

3 of 6 See more

csi-driver-nfs csi-driver-nfs 4.13.4

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v6.3.0	a4b0b1a37605	golang.org/x/crypto@v0.52.0	0.55.0
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	golang.org/x/crypto@v0.47.0	0.55.0
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

3,324

mariadb-operatormariadb-operator

26.6.0

1 of 1 See more

mariadb-operator mariadb-operator 26.6.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/mariadb-operator/mariadb-operator :26.6.0	a5e17b48f08e	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

377

portainerportainer

245.0.0

1 of 1 See more

portainer portainer 245.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.45.0	511f3f06c96f	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

277

atlantisatlantis

6.15.0

1 of 1 See more

atlantis atlantis 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/runatlantis/atlantis :v0.47.1	511231955463	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

1,891

codercoder-v2

2.37.1

1 of 1 See more

coder coder-v2 2.37.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/coder/coder :v2.37.1	0c6994bb4c5a	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

187

grafana-agentgrafana

0.44.2

1 of 2 See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/agent :v0.44.2	3364714a2f64	golang.org/x/crypto@v0.31.0	0.55.0

Open the chart page →

3,475

vclusterloft

0.0.0-ci.3

1 of 2 See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0

Open the chart page →

2,453

milvusmilvus

4.0.31

4 of 5 See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.55.0
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/crypto@v0.9.0	0.55.0
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/crypto@v0.7.0	0.55.0

Open the chart page →

32,259

flaggerflagger

1.45.0

1 of 1 See more

flagger flagger 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flagger :1.45.0	15b372d35012	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

222

mesherymeshery

1.0.69

1 of 1 See more

meshery meshery 1.0.69

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
meshery/meshery :stable-latest	9b68e81d392e	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

1,407

prometheus-mysql-exporterprometheus-community

2.15.0

1 of 1 See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheus/mysqld-exporter :v0.20.0	abed8dac117b	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

victoria-metrics-operatorvictoriametrics

0.67.3

1 of 1 See more

victoria-metrics-operator victoriametrics 0.67.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
victoriametrics/operator :v0.74.1	7310c4a80b94	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

109

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.55.0

Open the chart page →

10,622

semaphoresemaphoreui

16.2.2

1 of 1 See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
semaphoreui/semaphore :v2.18.3	e9260bfa8255	golang.org/x/crypto@v0.35.0	0.55.0

Open the chart page →

2,221

signozsignoz

0.141.1

2 of 5 See more

signoz signoz 0.141.1

2 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
signoz/signoz :v0.141.1	c10fa03e103c	golang.org/x/crypto@v0.52.0	0.55.0
signoz/signoz-otel-collector :v0.144.9	72aa1e4c1ec5	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

7,568

keelkeel

1.2.2

1 of 1 See more

keel keel 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/keel-hq/keel :0.22.3	315e188a07c2	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

809

prometheus-kafka-exporterprometheus-community

4.0.0

1 of 1 See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/crypto@v0.32.0	0.55.0

Open the chart page →

716

prometheus-mongodb-exporterprometheus-community

3.22.0

1 of 1 See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
percona/mongodb_exporter :0.53.0	0214e482b2cd	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

231

node-local-dnsdeliveryhero

2.9.2

1 of 1 See more

node-local-dns deliveryhero 2.9.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	golang.org/x/crypto@v0.43.0	0.55.0

Open the chart page →

1,685

fission-allfission-charts

1.27.0

1 of 3 See more

fission-all fission-charts 1.27.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/fission/fission-bundle :v1.27.0	d353720b037a	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

296

tempografana-community

3.0.0

1 of 1 See more

tempo grafana-community 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/tempo :3.0.3	0296560ac66f	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

148

rancherrancher-latest

2.15.1

2 of 2 See more

rancher rancher-latest 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/crypto@v0.48.0	0.55.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

1,456

sealed-secretsbitnami

2.5.19

1 of 1 See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
bitnami/sealed-secrets-controller :0.31.0-debian-12-r0	74eaff41382b	golang.org/x/crypto@v0.41.0	0.55.0

Open the chart page →

643

difydouban

0.10.0

2 of 6 See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	golang.org/x/crypto@v0.40.0	0.55.0
langgenius/dify-sandbox :0.2.12	4e65e8a351a2	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

19,391

kubesharkkubeshark-helm-charts

53.4.0

2 of 3 See more

kubeshark kubeshark-helm-charts 53.4.0

2 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
kubeshark/hub :v53.4	6d3f22525a0e	golang.org/x/crypto@v0.54.0	0.55.0
kubeshark/worker :v53.4	b226490dfa11	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

825

stackgres-operatorstackgres-charts

1.19.1

1 of 2 See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

2,119

mongodbcloudpirates-mongodb

0.18.13

1 of 1 See more

mongodb cloudpirates-mongodb 0.18.13

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/mongo :8.3.9	81a1c8842a09	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

922

kube-image-keeperenix

2.3.1

1 of 1 See more

kube-image-keeper enix 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/enix/kube-image-keeper :2.3.1	d3ccf28495c3	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

opensearch-operatoropensearch-operator

3.0.2

1 of 1 See more

opensearch-operator opensearch-operator 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-operator :3.0.0-alpha	f78bbdd1a386	golang.org/x/crypto@v0.45.0	0.55.0

Open the chart page →

603

pxc-operatorpercona

1.20.1

1 of 1 See more

pxc-operator percona 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
percona/percona-xtradb-cluster-operator :1.20.0	ac4d0995c71e	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

392

pulsarapache

4.7.0

5 of 10 See more

pulsar apache 4.7.0

5 of the 10 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/crypto@v0.46.0	0.55.0
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/crypto@v0.47.0	0.55.0
rancher/kubectl :v1.25.0	85a0d1148784	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	golang.org/x/crypto@v0.42.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

9,864

Container images carrying it

3,237 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
louislam/uptime-kuma :2.5.4	917318f9d7be	golang.org/x/crypto@v0.51.0	0.55.0	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	golang.org/x/crypto@v0.38.0	0.55.0	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	golang.org/x/crypto@v0.51.0	0.55.0	2
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	golang.org/x/crypto@v0.38.0	0.55.0	2
meshery/meshery :stable-latest	9b68e81d392e	golang.org/x/crypto@v0.53.0	0.55.0	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	2
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.55.0	2
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.55.0	2
moby/buildkit :v0.32.2-rootless	504731e577c2	golang.org/x/crypto@v0.54.0	0.55.0	2
natsio/nats-account-server :1.0.0	a3381560aab6	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0	2
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.55.0	2
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.55.0	2
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	golang.org/x/crypto@v0.38.0	0.55.0	2
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	golang.org/x/crypto@v0.8.0	0.55.0	2
netapp/trident-protect-utils :v2.0.0	cd0c18d8f9ec	golang.org/x/crypto@v0.39.0	0.55.0	2
obolnetwork/charon :v1.10.0	278c7e2897b6	golang.org/x/crypto@v0.49.0	0.55.0	2
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	golang.org/x/crypto@v0.36.0	0.55.0	2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	golang.org/x/crypto@v0.36.0	0.55.0	2
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0	2
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/crypto@v0.14.0	0.55.0	2
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	2
oryd/hydra-maester :v0.0.42	0a7a2bfd0e7d	golang.org/x/crypto@v0.51.0	0.55.0	2
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/crypto@v0.5.0	0.55.0	2
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/crypto@v0.26.0	0.55.0	2
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/crypto@v0.1.0	0.55.0	2
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.55.0	2
otel/opentelemetry-collector-contrib :0.156.0	125bdbeb7590	golang.org/x/crypto@v0.53.0	0.55.0	2
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	golang.org/x/crypto@v0.20.0	0.55.0	2
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/crypto@v0.27.0	0.55.0	2
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	2
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.55.0	2
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.55.0	2
prom/graphite-exporter :latest	c1a266f63a84	golang.org/x/crypto@v0.53.0	0.55.0	2
prom/memcached-exporter :v0.17.0	995c80e3ffbe	golang.org/x/crypto@v0.54.0	0.55.0	2
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.55.0	2
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.55.0	2
prom/prometheus :v2.52.0	5c435642ca4d	golang.org/x/crypto@v0.22.0	0.55.0	2
prom/prometheus :v2.37.9	8176adea328e	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.55.0	2
prom/prometheus :v2.48.1	a67e5e402ff5	golang.org/x/crypto@v0.14.0	0.55.0	2
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	2
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0	2
rancher/kine :v0.11.4	12889bbcd1e8	golang.org/x/crypto@v0.17.0	0.55.0	2
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	golang.org/x/crypto@v0.25.0	0.55.0	2
rclone/rclone :1.68	74c51b8817e5	golang.org/x/crypto@v0.25.0	0.55.0	2
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.55.0	2
rookout/controller :latest	4451a6f6b8ec	golang.org/x/crypto@v0.11.0	0.55.0	2
rookout/data-on-prem :latest	51c0fce64467	golang.org/x/crypto@v0.11.0	0.55.0	2
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	golang.org/x/crypto@v0.16.0	0.55.0	2
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	golang.org/x/crypto@v0.16.0	0.55.0	2
samcm/ethereum-metrics-exporter :0.29.2 :latest	91a2d9a015c1	golang.org/x/crypto@v0.41.0	0.55.0	2