CVE-2026-56854

Unscored

Advisory

Published 28 Aug 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,873; of 17,792 indexed, latest versions
Container images: 3,219; deployed by those charts
Fix available: 2 of 2; affected packages

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

Carried by container images the latest versions of 2,873 of 17,792 indexed charts deploy, on 3,219 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+156 more	0.55.0	3,219
kubernetes-1.34apk	1.34.11-r2	1.34.11-r3	1

OSV records: CGA-4wg8-vwxq-5g46 GO-2026-6303
Also known as: CGA-548p-j75q-3522, CGA-7fgq-fgg6-f7cr, CGA-8q6m-f35p-p88g, CGA-9xqw-wrfv-3c6w, CGA-fmc9-vwrf-6jq2, CGA-h33c-jrc2-36rr, CGA-jqcq-hwv9-6wwp, CGA-mc7r-3393-487f, CGA-p3hc-qw8w-gf4f, CGA-qf3x-28f7-2hcw, CGA-w35x-xg67-9c7c

Charts affected

2,873 by stars

Chart

Latest

Affected images

Radar Score

nem-monitoringopencord

1.3.22

1 of 9 See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.55.0

Open the chart page →

4,619

volthaopencord

2.14.0

1 of 2 See more

voltha opencord 2.14.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0

Open the chart page →

3,824

voltha-adapter-openoltopencord

2.14.0

1 of 1 See more

voltha-adapter-openolt opencord 2.14.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
voltha/voltha-openolt-adapter :4.5.16	d6d79c08350a	golang.org/x/crypto@v0.24.0	0.55.0

Open the chart page →

898

voltha-adapter-openonuopencord

2.14.0

1 of 1 See more

voltha-adapter-openonu opencord 2.14.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
voltha/voltha-openonu-adapter-go :2.12.25	d8f2eb5f2a7e	golang.org/x/crypto@v0.32.0	0.55.0

Open the chart page →

844

voltha-infraopencord

2.14.0

2 of 10 See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0

Open the chart page →

41,101

voltha-stackopencord

2.14.0

3 of 4 See more

voltha-stack opencord 2.14.0

3 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
voltha/voltha-openolt-adapter :4.5.16	d6d79c08350a	golang.org/x/crypto@v0.24.0	0.55.0
voltha/voltha-openonu-adapter-go :2.12.25	d8f2eb5f2a7e	golang.org/x/crypto@v0.32.0	0.55.0
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0

Open the chart page →

5,566

federated-gatewayopenfaas

0.1.0

1 of 1 See more

federated-gateway openfaas 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	golang.org/x/crypto@v0.16.0	0.55.0

Open the chart page →

1,240

gcp-pubsub-connectoropenfaas

0.0.1

1 of 1 See more

gcp-pubsub-connector openfaas 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/gcp-pubsub-connector :0.0.1	8df071f5b719	golang.org/x/crypto@v0.35.0	0.55.0

Open the chart page →

1,162

kafka-connectoropenfaas

0.7.15

1 of 1 See more

kafka-connector openfaas 0.7.15

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/kafka-connector :0.7.16	0e58eac0e2f7	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

1,164

nats-connectoropenfaas

0.3.2

1 of 1 See more

nats-connector openfaas 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0

Open the chart page →

1,471

postgres-connectoropenfaas

0.1.2

1 of 1 See more

postgres-connector openfaas 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	golang.org/x/crypto@v0.32.0	0.55.0

Open the chart page →

1,071

pro-builderopenfaas

0.6.13

2 of 2 See more

pro-builder openfaas 0.6.13

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.32.2-rootless	504731e577c2	golang.org/x/crypto@v0.54.0	0.55.0
ghcr.io/openfaasltd/pro-builder :0.6.0	6c17297f9098	golang.org/x/crypto@v0.50.0	0.55.0

Open the chart page →

2,745

probuilderopenfaas

0.2.0

1 of 2 See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.10.0	c2aeafaed434	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.55.0

Open the chart page →

4,760

queue-workeropenfaas

0.2.34

1 of 1 See more

queue-worker openfaas 0.2.34

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/jetstream-queue-worker :0.5.10	e9245a0bca88	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

572

kruise-state-metricsopenkruise

0.2.0

1 of 1 See more

kruise-state-metrics openkruise 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.55.0

Open the chart page →

1,929

openldapopenldap

0.1.1

1 of 2 See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.55.0

Open the chart page →

5,294

openlitopenlit

1.24.0

1 of 3 See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/openlit/openlit :1.24.0	2434560e8f0e	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

5,068

openlit-controlleropenlit

0.10.0

1 of 1 See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

1,377

sentinelopennms-helm-charts

0.4.0

1 of 2 See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
opennms/sentinel :36.0.2	88869082a14f	golang.org/x/crypto@v0.27.0	0.55.0

Open the chart page →

2,064

minioopenobserve

5.0.7

2 of 2 See more

minio openobserve 5.0.7

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	golang.org/x/crypto@v0.3.0	0.55.0
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	golang.org/x/crypto@v0.5.0	0.55.0

Open the chart page →

7,471

openobserveopenobserve

0.92.2

3 of 6 See more

openobserve openobserve 0.92.2

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/nats :2.14.2-alpine	952d157e28d5	golang.org/x/crypto@v0.52.0	0.55.0
natsio/nats-box :0.19.7	ffce8bd10338	golang.org/x/crypto@v0.50.0	0.55.0
natsio/prometheus-nats-exporter :0.20.1	4fbf6dacb847	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

3,166

openobserve-collectoropenobserve

0.4.6

1 of 1 See more

openobserve-collector openobserve 0.4.6

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.15.0	db384bf43222	golang.org/x/crypto@v0.31.0	0.55.0

Open the chart page →

731

dify-enterpriseopenshift

3.9.8

8 of 13 See more

dify-enterprise openshift 3.9.8

8 of the 13 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
langgenius/dify-ee-audit :3.9.8-ubi9	e99aed151fc5	golang.org/x/crypto@v0.52.0	0.55.0
langgenius/dify-ee-collector :3.9.8-ubi9	a9b91fd62c94	golang.org/x/crypto@v0.52.0	0.55.0
langgenius/dify-ee-enterprise :3.9.8-ubi9	c392a36a4ef7	golang.org/x/crypto@v0.52.0	0.55.0
langgenius/dify-ee-gateway :3.9.8-ubi9	9e314c29a61f	golang.org/x/crypto@v0.52.0	0.55.0
langgenius/dify-ee-plugin-connector :3.9.8-ubi9	1848d8f1f144	golang.org/x/crypto@v0.52.0	0.55.0
langgenius/dify-ee-plugin-crd :3.9.8-ubi9	6f4e0e5f6e5a	golang.org/x/crypto@v0.52.0	0.55.0
langgenius/dify-ee-plugin-daemon-serverless :3.9.8-ubi9	d2b8df196d08	golang.org/x/crypto@v0.52.0	0.55.0
langgenius/dify-ee-plugin-manager :3.9.8-ubi9	207b343013a0	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

4,899

exporteropenshift

1.0.47

2 of 3 See more

exporter openshift 1.0.47

2 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	golang.org/x/crypto@v0.14.0	0.55.0
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	golang.org/x/crypto@v0.25.0	0.55.0

Open the chart page →

13,041

fsmopenshift

0.1.8-ubi.6

3 of 6 See more

fsm openshift 0.1.8-ubi.6

3 of the 6 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.55.0
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.55.0
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.55.0

Open the chart page →

16,563

harikubeopenshift

0.16.3

3 of 3 See more

harikube openshift 0.16.3

3 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/harikube/harikube :release-v0.16.3	b58b6d40c3bb	golang.org/x/crypto@v0.50.0	0.55.0
quay.io/harikube/kubernetes :v1.36.2	2804aabd76d2	golang.org/x/crypto@v0.47.0	0.55.0
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	golang.org/x/crypto@v0.42.0	0.55.0

Open the chart page →

2,566

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	golang.org/x/crypto@v0.17.0	0.55.0

Open the chart page →

4,170

kite-agentopenshift

1.0.0

1 of 1 See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent :V2.0.0	734808044936	golang.org/x/crypto@v0.31.0	0.55.0

Open the chart page →

5,863

kubedb-certifiedopenshift

2026.7.10

6 of 8 See more

kubedb-certified openshift 2026.7.10

6 of the 8 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/petset :v0.1.0	93fa0daf603c	golang.org/x/crypto@v0.46.0	0.55.0
ghcr.io/kubedb/kubedb-autoscaler :v0.51.0	5d1182ac21f0	golang.org/x/crypto@v0.52.0	0.55.0
ghcr.io/kubedb/kubedb-crd-manager :v0.21.0	9506a6cb98d1	golang.org/x/crypto@v0.52.0	0.55.0
ghcr.io/kubedb/kubedb-ops-manager :v0.53.0	6d4c9fe66e4f	golang.org/x/crypto@v0.52.0	0.55.0
ghcr.io/kubedb/kubedb-provisioner :v0.66.0	824d6d78d451	golang.org/x/crypto@v0.52.0	0.55.0
ghcr.io/kubedb/kubedb-webhook-server :v0.42.0	f7dcade6523b	golang.org/x/crypto@v0.52.0	0.55.0

Open the chart page →

4,145

kubestash-certifiedopenshift

2026.7.10

1 of 2 See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/kubestash/kubestash :v0.29.0	43e01ed32486	golang.org/x/crypto@v0.46.0	0.55.0

Open the chart page →

1,098

mattermost-team-editionopenshift

6.6.83

1 of 4 See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	golang.org/x/crypto@v0.38.0	0.55.0

Open the chart page →

4,113

opscruiseopenshift

0.35.100

3 of 11 See more

opscruise openshift 0.35.100

3 of the 11 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.55.0
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.55.0
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.55.0

Open the chart page →

8,224

osm-edgeopenshift

1.2.1-ubi8

3 of 7 See more

osm-edge openshift 1.2.1-ubi8

3 of the 7 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/crypto@v0.5.0	0.55.0
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/crypto@v0.5.0	0.55.0
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/crypto@v0.5.0	0.55.0

Open the chart page →

19,471

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.55.0

Open the chart page →

8,643

voyager-gatewayopenshift

2026.1.15

2 of 2 See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.1.0	13fd0cccafe8	golang.org/x/crypto@v0.46.0	0.55.0
ghcr.io/voyagermesh/gateway :v1.6.2	23f4da194134	golang.org/x/crypto@v0.44.0	0.55.0

Open the chart page →

2,645

sohaopensoha

0.1.9

1 of 2 See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/opensoha/soha :v0.1.7	a99cc2a4e0df	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

1,781

soha-agentopensoha

0.2.3

1 of 1 See more

soha-agent opensoha 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/opensoha/soha-agent :v0.1.6	0c2091757132	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

soha-observabilityopensoha

0.2.1

2 of 2 See more

soha-observability opensoha 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
grafana/loki :3.7.4	87f0a0676737	golang.org/x/crypto@v0.52.0	0.55.0
otel/opentelemetry-collector-contrib :0.157.0	f2f01157055a	golang.org/x/crypto@v0.54.0	0.55.0

Open the chart page →

349

openvscode-serveropenvscode-server-helm

2.7.37

1 of 2 See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/crypto@v0.2.0	0.55.0

Open the chart page →

4,298

operator-lifecycle-manageroperator-lifecycle-manager

1.2.2

2 of 2 See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/catalogd :v1.8.0	6ff40fa6257f	golang.org/x/crypto@v0.48.0	0.55.0
quay.io/operator-framework/operator-controller :v1.8.0	bca5dfcc67ca	golang.org/x/crypto@v0.48.0	0.55.0

Open the chart page →

1,837

gitlab-proxyopslevel

0.0.8

1 of 1 See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
library/caddy :2.6	60fb54d36b4b	golang.org/x/crypto@v0.5.0	0.55.0

Open the chart page →

1,879

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	golang.org/x/crypto@v0.26.0	0.55.0

Open the chart page →

1,739

opslevelopslevel

2025.1.22

2 of 10 See more

opslevel opslevel 2025.1.22

2 of the 10 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/crypto@v0.6.0	0.55.0
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	golang.org/x/crypto@v0.25.0	0.55.0

Open the chart page →

5,658

agentoptimizely-agent

1.4.0

1 of 1 See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/crypto@v0.14.0	0.55.0

Open the chart page →

1,220

orderregistratiecomponentorderregistratiecomponent

1.0.0

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.55.0

Open the chart page →

7,501

origin-ca-issuerorigin-ca-issuer

0.6.9

1 of 1 See more

origin-ca-issuer origin-ca-issuer 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
cloudflare/origin-ca-issuer :v0.14.4	c92ef5ac7e4b	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

336

orkestraorkestra

0.7.17

1 of 2 See more

orkestra orkestra 0.7.17

1 of the 2 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/orkspace/orkestra :0.7.17	38c388cfc8d1	golang.org/x/crypto@v0.53.0	0.55.0

Open the chart page →

125

hydra-maesterory

0.64.0

1 of 1 See more

hydra-maester ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
oryd/hydra-maester :v0.0.42	0a7a2bfd0e7d	golang.org/x/crypto@v0.51.0	0.55.0

Open the chart page →

325

prometheusosc

0.26.2

3 of 12 See more

prometheus osc 0.26.2

3 of the 12 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/crypto@v0.8.0	0.55.0
quay.io/prometheus/pushgateway :v1.11.3	74fa117cef2d	golang.org/x/crypto@v0.52.0	0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.55.0

Open the chart page →

3,381

grrosdfir-infrastructure

1.0.3

1 of 5 See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-56854.

Container image	Digest	Package	Fixed in
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/crypto@v0.22.0	0.55.0

Open the chart page →

11,021

Container images carrying it

3,219 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
samcm/ethereum-metrics-exporter :0.29.2 :latest	91a2d9a015c1	golang.org/x/crypto@v0.41.0	0.55.0	2
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	2
shlinkio/shlink :5.1.6 :stable	666cc24edf72	golang.org/x/crypto@v0.53.0	0.55.0	2
squareup/ghostunnel :v1.5.2	70f4cf270425	golang.org/x/crypto@v0.0.0-20191002192127-34f69633bfdc	0.55.0	2
statping/statping :v0.90.74	e874da513a5c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	golang.org/x/crypto@v0.4.0	0.55.0	2
syncthing/syncthing :2.1.1	775c4aac4862	golang.org/x/crypto@v0.51.0	0.55.0	2
temporalio/server :1.22.4	c0a44c26397b	golang.org/x/crypto@v0.14.0	0.55.0	2
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/crypto@v0.1.0	0.55.0	2
thanosio/thanos :v0.41.0	cf3e9b292e43	golang.org/x/crypto@v0.47.0	0.55.0	2
thesisrobot/loop :v0.11.1-beta	89ae07e787ca	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.55.0	2
thesisrobot/pool :v0.3.3-alpha	2d1c388a4bda	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.55.0	2
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.55.0	2
timescale/timescaledb :latest-pg15	6343bdc87ca1	golang.org/x/crypto@v0.32.0	0.55.0	2
tykio/tyk-mdcb-docker :v2.12.0	942a5b8bf847	golang.org/x/crypto@v0.52.0	0.55.0	2
tykio/tyk-pump-docker-pub :v1.16.0	284b9d2ac5da	golang.org/x/crypto@v0.52.0	0.55.0	2
uselagoon/docker-host :v3.6.1	2c89ed939b8b	golang.org/x/crypto@v0.37.0	0.55.0	2
velero/velero :v1.18.2	37396519f399	golang.org/x/crypto@v0.52.0	0.55.0	2
voltha/voltha-openolt-adapter :4.5.16	d6d79c08350a	golang.org/x/crypto@v0.24.0	0.55.0	2
voltha/voltha-openonu-adapter-go :2.12.25	d8f2eb5f2a7e	golang.org/x/crypto@v0.32.0	0.55.0	2
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.55.0	2
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.55.0	2
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.55.0	2
zhenghaoz/gorse-master :0.4.12	033046b432ec	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.55.0	2
zhenghaoz/gorse-server :0.4.12	39c565685b01	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.55.0	2
zhenghaoz/gorse-worker :0.4.12	f7739f64c9b0	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.55.0	2
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.55.0	2
gcr.io/knative-releases/knative.dev/serving/cmd/controller	5b93308a392c	golang.org/x/crypto@v0.37.0	0.55.0	2
ghcr.io/appscode/fargocd :v0.0.3	1f5c791fc54d	golang.org/x/crypto@v0.52.0	0.55.0	2
ghcr.io/appscode/grafana-tools :v0.8.0	77c9d29080eb	golang.org/x/crypto@v0.49.0	0.55.0	2
ghcr.io/appscode/kube-auth-manager :v0.0.1	789692ab9193	golang.org/x/crypto@v0.6.0	0.55.0	2
ghcr.io/appscode/kube-rbac-proxy :v0.11.0	0df4ae70e3bd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.55.0	2
ghcr.io/appscode/license-proxyserver :v0.1.1	e192ad567e0b	golang.org/x/crypto@v0.46.0	0.55.0	2
ghcr.io/appscode/service-provider :v0.0.2	f6e481386d70	golang.org/x/crypto@v0.46.0	0.55.0	2
ghcr.io/astriaorg/astria-geth :latest	4249e403225a	golang.org/x/crypto@v0.24.0	0.55.0	2
ghcr.io/bank-vaults/vault-operator :v1.24.0	6f622c5fb8a9	golang.org/x/crypto@v0.52.0	0.55.0	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	golang.org/x/crypto@v0.37.0	0.55.0	2
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	golang.org/x/crypto@v0.26.0	0.55.0	2
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	golang.org/x/crypto@v0.41.0	0.55.0	2
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0	2
ghcr.io/chaos-mesh/chaos-coredns :v0.2.6	78dc63bc5b89	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.55.0	2
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.1	b5210df46c05	golang.org/x/crypto@v0.35.0	0.55.0	2
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	golang.org/x/crypto@v0.38.0	0.55.0	2
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.55.0	2
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.55.0	2
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	golang.org/x/crypto@v0.53.0	0.55.0	2
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	golang.org/x/crypto@v0.53.0	0.55.0	2
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	golang.org/x/crypto@v0.53.0	0.55.0	2
ghcr.io/glassflow/glassflow-etl-k8s-operator :v3.2.1	e70364e88629	golang.org/x/crypto@v0.41.0	0.55.0	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	golang.org/x/crypto@v0.22.0	0.55.0	2