CVE-2026-56855

Unscored

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.004; 31st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,058; of 17,790 indexed, latest versions
Container images: 3,439; deployed by those charts
Fix available: 2 of 2; affected packages

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Carried by container images the latest versions of 3,058 of 17,790 indexed charts deploy, on 3,439 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+157 more	0.56.0	3,439
kubernetes-1.34apk	1.34.11-r2	1.34.11-r7	1

OSV records: CGA-3gvh-4gf5-5579 GO-2026-6355
Also known as: CGA-3w88-m6vh-6c8c, CGA-cvgr-fgxm-pcwv, CGA-fhvr-vpmj-c8hw, CGA-h6hp-wj28-7xmg, CGA-p66m-c5fj-p2hc, CGA-q833-3p5v-56mv, CGA-qr7w-fvfc-56ph, CGA-w898-ghx8-g76x, CGA-wfr9-2vq9-5w72, CGA-wv8c-j2xv-q9p4, CGA-x94j-59r9-mmcv
Trending: Rank 30 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

3,058 by stars

Chart

Latest

Affected images

Radar Score

harvester-csi-driverrke2-charts

0.1.3100

4 of 6 See more

harvester-csi-driver rke2-charts 0.1.3100

4 of the 6 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rancher/harvester-csi-driver :v0.2.9	f9099b5ef8cb	golang.org/x/crypto@v0.47.0	0.56.0
rancher/mirrored-longhornio-csi-attacher :v4.11.0-20260428	fe417c28a6b8	golang.org/x/crypto@v0.46.0	0.56.0
rancher/mirrored-longhornio-csi-resizer :v2.1.0-20260428	41cb674d1154	golang.org/x/crypto@v0.46.0	0.56.0
rancher/mirrored-longhornio-csi-snapshotter :v8.5.0-20260428	1975fac3890f	golang.org/x/crypto@v0.47.0	0.56.0

Open the chart page →

2,729

rancher-vsphere-cpirke2-charts

1.16.200

1 of 1 See more

rancher-vsphere-cpi rke2-charts 1.16.200

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rancher/mirrored-cloud-provider-vsphere :v1.31.1	febfd0517838	golang.org/x/crypto@v0.24.0	0.56.0

Open the chart page →

912

rke2-calicorke2-charts

3.18.1-101

1 of 1 See more

rke2-calico rke2-charts 3.18.1-101

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.15.1	c6591da87aa8	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.56.0

Open the chart page →

2,250

rke2-canal-1.19-1.20rke2-charts

3.13.3-build2021102202

2 of 2 See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.56.0
rancher/hardened-flannel :v0.14.1-build20211022	d6a47d394c03	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.56.0

Open the chart page →

5,956

rke2-ciliumrke2-charts

1.20.103

2 of 3 See more

rke2-cilium rke2-charts 1.20.103

2 of the 3 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.20.1	ae9ea21f7427	golang.org/x/crypto@v0.53.0	0.56.0
quay.io/cilium/operator-generic :v1.20.1	6c3885fc7b62	golang.org/x/crypto@v0.53.0	0.56.0

Open the chart page →

1,092

yopassrlex

0.8.0

1 of 2 See more

yopass rlex 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.15.1	6bca8d5a4914	golang.org/x/crypto@v0.14.0	0.56.0

Open the chart page →

1,095

memosrm3l

0.1.1

1 of 1 See more

memos rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
neosmemo/memos :0.24	c6defc2dfb98	golang.org/x/crypto@v0.38.0	0.56.0

Open the chart page →

1,622

ntfyrm3l

0.1.1

1 of 1 See more

ntfy rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
binwiederhier/ntfy :v2.11.0	4a7d0f0adc6d	golang.org/x/crypto@v0.23.0	0.56.0

Open the chart page →

1,283

olivetinrm3l

0.2.0

1 of 1 See more

olivetin rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
ghcr.io/olivetin/olivetin :2025.2.19	a89958921526	golang.org/x/crypto@v0.31.0	0.56.0

Open the chart page →

1,377

krr-enforcerrobusta

0.3.5

1 of 2 See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.0	bd01dae02676	golang.org/x/crypto@v0.17.0	0.56.0

Open the chart page →

4,047

kubewatchrobusta

3.5.0

1 of 1 See more

kubewatch robusta 3.5.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
robustadev/kubewatch :v2.9.0	0457a51e36e8	golang.org/x/crypto@v0.24.0	0.56.0

Open the chart page →

1,854

bastillion-upstreamrock8s

0.1.0

1 of 1 See more

bastillion-upstream rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
iamdorsah/bastillion :v0.1	db83a0254d81	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.56.0

Open the chart page →

3,053

fleet-vendoredrock8s

6.5.1

1 of 1 See more

fleet-vendored rock8s 6.5.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
fleetdm/fleet :v4.66.0	12e644b7f40e	golang.org/x/crypto@v0.35.0	0.56.0

Open the chart page →

1,588

gitlab-operatorrock8s

0.7.0

1 of 2 See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.56.0

Open the chart page →

5,430

imgproxyrock8s

0.8.30

1 of 1 See more

imgproxy rock8s 0.8.30

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.15.0	40f6eb807444	golang.org/x/crypto@v0.6.0	0.56.0

Open the chart page →

2,029

mailserverrock8s

0.1.2

1 of 1 See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	golang.org/x/crypto@v0.13.0	0.56.0

Open the chart page →

1,954

matrix-stackrock8s

0.8.1

1 of 7 See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	golang.org/x/crypto@v0.32.0	0.56.0

Open the chart page →

9,299

monitoringrocketchat-server

0.0.17

5 of 9 See more

monitoring rocketchat-server 0.0.17

5 of the 9 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
grafana/loki :3.6.3	cd6e176883a9	golang.org/x/crypto@v0.45.0	0.56.0
otel/opentelemetry-collector-contrib :0.143.0	3bc07732530c	golang.org/x/crypto@v0.46.0	0.56.0
ghcr.io/grafana/grafana-operator :v5.18.0	0af2faec9d6f	golang.org/x/crypto@v0.36.0	0.56.0
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	golang.org/x/crypto@v0.36.0	0.56.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	golang.org/x/crypto@v0.38.0	0.56.0

Open the chart page →

6,884

jaegerromanow-helm-charts

1.7.3

1 of 1 See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.9.0	e128b9adbb29	golang.org/x/crypto@v0.40.0	0.56.0

Open the chart page →

1,605

ai-agentromholdings

0.0.1

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/crypto@v0.24.0	0.56.0

Open the chart page →

9,685

argocdromholdings

1.8.1

2 of 3 See more

argocd romholdings 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.56.0
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.56.0

Open the chart page →

10,484

argocd-certificate-refreshromholdings

0.10.8

1 of 1 See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.56.0

Open the chart page →

13,011

argo-workflowromholdings

0.1.6

1 of 1 See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.56.0

Open the chart page →

1,587

caddy-reverse-proxyromholdings

0.10.1

1 of 1 See more

caddy-reverse-proxy romholdings 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
library/caddy :latest	df7f1c2fb114	golang.org/x/crypto@v0.52.0	0.56.0

Open the chart page →

853

calicoromholdings

0.1.1

3 of 4 See more

calico romholdings 0.1.1

3 of the 4 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.56.0
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.56.0
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.56.0

Open the chart page →

10,094

clairromholdings

0.1.14

1 of 2 See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.56.0

Open the chart page →

6,237

devtron-enterpriseromholdings

48.0.0

18 of 28 See more

devtron-enterprise romholdings 48.0.0

18 of the 28 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.56.0
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	golang.org/x/crypto@v0.46.0	0.56.0
quay.io/devtron/cost-sync :172ef62b-1159-39429	edf210d763ca	golang.org/x/crypto@v0.38.0	0.56.0
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	golang.org/x/crypto@v0.46.0	0.56.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.56.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.56.0
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	golang.org/x/crypto@v0.46.0	0.56.0
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.56.0
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.56.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.56.0
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	golang.org/x/crypto@v0.46.0	0.56.0
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	golang.org/x/crypto@v0.46.0	0.56.0
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	golang.org/x/crypto@v0.46.0	0.56.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.56.0
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.56.0
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.56.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.56.0
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.56.0

Open the chart page →

68,695

devtron-in-clustercdromholdings

0.10.2

2 of 2 See more

devtron-in-clustercd romholdings 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.56.0
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.56.0

Open the chart page →

5,055

devtron-operatorromholdings

0.23.3

9 of 11 See more

devtron-operator romholdings 0.23.3

9 of the 11 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.56.0
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	golang.org/x/crypto@v0.46.0	0.56.0
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	golang.org/x/crypto@v0.14.0	0.56.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.56.0
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	golang.org/x/crypto@v0.46.0	0.56.0
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.56.0
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	golang.org/x/crypto@v0.46.0	0.56.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/crypto@v0.7.0	0.56.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.56.0

Open the chart page →

33,180

dgraphromholdings

0.0.20

1 of 1 See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.56.0

Open the chart page →

11,959

jaeger-all-in-one-opentelemetryromholdings

0.1.2

1 of 1 See more

jaeger-all-in-one-opentelemetry romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector :latest	e495787f07db	golang.org/x/crypto@v0.55.0	0.56.0

Open the chart page →

jcmhproxy-ingressromholdings

0.14.6

1 of 1 See more

jcmhproxy-ingress romholdings 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/crypto@v0.18.0	0.56.0

Open the chart page →

1,379

kube-prometheus-stackromholdings

19.3.0

2 of 6 See more

kube-prometheus-stack romholdings 19.3.0

2 of the 6 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.56.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.56.0

Open the chart page →

8,659

migrantromholdings

0.0.3

1 of 1 See more

migrant romholdings 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
migrate/migrate :latest	cc4ad8e19d66	golang.org/x/crypto@v0.45.0	0.56.0

Open the chart page →

740

securityromholdings

0.2.2

1 of 1 See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.56.0

Open the chart page →

2,441

zincromholdings

0.1.2

1 of 1 See more

zinc romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.56.0

Open the chart page →

1,514

controllerrookout

0.2.56

1 of 1 See more

controller rookout 0.2.56

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	golang.org/x/crypto@v0.11.0	0.56.0

Open the chart page →

1,967

datastorerookout

0.1.48

1 of 1 See more

datastore rookout 0.1.48

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rookout/data-on-prem :latest	51c0fce64467	golang.org/x/crypto@v0.11.0	0.56.0

Open the chart page →

1,948

operatorrookout

0.0.20

1 of 2 See more

operator rookout 0.0.20

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rookout/k8s-operator :latest	0d083f3ef1a7	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.56.0

Open the chart page →

2,209

rookout-hybridrookout

0.3.1

2 of 2 See more

rookout-hybrid rookout 0.3.1

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	golang.org/x/crypto@v0.11.0	0.56.0
rookout/data-on-prem :latest	51c0fce64467	golang.org/x/crypto@v0.11.0	0.56.0

Open the chart page →

3,915

acme-linoderotational

1.0.4

1 of 1 See more

acme-linode rotational 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rotationalio/linode-acme-webhook :1.0.0	cc7bb030a20f	golang.org/x/crypto@v0.46.0	0.56.0

Open the chart page →

1,316

beaconrotational

0.2.0

1 of 1 See more

beacon rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rotationalio/beacon :0.2.0	f8d8b694515a	golang.org/x/crypto@v0.51.0	0.56.0

Open the chart page →

968

geopingrotational

1.3.2

1 of 1 See more

geoping rotational 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rotationalio/geoping :1.3.0	34bcb6fc3cb7	golang.org/x/crypto@v0.48.0	0.56.0

Open the chart page →

1,592

rotational-apirotational

1.3.1

1 of 1 See more

rotational-api rotational 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rotationalio/rotational-api :1.3.0	f1a2d05d8fff	golang.org/x/crypto@v0.49.0	0.56.0

Open the chart page →

1,590

chainrss3

0.1.28

5 of 8 See more

chain rss3 0.1.28

5 of the 8 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rss3/op-batcher :d2c5ced00901227473fc196fda838191f0cb4e02	e8adc09d9c07	golang.org/x/crypto@v0.16.0	0.56.0
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/crypto@v0.18.0	0.56.0
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	golang.org/x/crypto@v0.16.0	0.56.0
rss3/op-proposer :d2c5ced00901227473fc196fda838191f0cb4e02	96672897ba9e	golang.org/x/crypto@v0.16.0	0.56.0
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	golang.org/x/crypto@v0.14.0	0.56.0

Open the chart page →

8,532

op-batcherrss3

0.1.0

1 of 2 See more

op-batcher rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	golang.org/x/crypto@v0.16.0	0.56.0

Open the chart page →

1,251

op-proposerrss3

0.1.0

1 of 2 See more

op-proposer rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	golang.org/x/crypto@v0.16.0	0.56.0

Open the chart page →

1,251

proxydrss3

0.1.0

1 of 1 See more

proxyd rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rss3/proxyd :6edce9ddfeee0b00a2d98f24c3ce67885653651b	865a0a6bdf4c	golang.org/x/crypto@v0.17.0	0.56.0

Open the chart page →

2,110

vsl-chainrss3

0.1.0

4 of 7 See more

vsl-chain rss3 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	golang.org/x/crypto@v0.16.0	0.56.0
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/crypto@v0.18.0	0.56.0
rss3/op-node :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	45b91380bbe7	golang.org/x/crypto@v0.16.0	0.56.0
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	golang.org/x/crypto@v0.16.0	0.56.0

Open the chart page →

6,048

vsl-rpcrss3

0.3.4

2 of 4 See more

vsl-rpc rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	golang.org/x/crypto@v0.18.0	0.56.0
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	golang.org/x/crypto@v0.16.0	0.56.0

Open the chart page →

4,615

Container images carrying it

3,439 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	golang.org/x/crypto@v0.3.0	0.56.0	2
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	golang.org/x/crypto@v0.13.0	0.56.0	2
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	golang.org/x/crypto@v0.9.0	0.56.0	2
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	golang.org/x/crypto@v0.5.0	0.56.0	2
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.56.0	2
quay.io/open-cluster-management/argocd-pull-integration :0.29.0	06b4b9b3c3ed	golang.org/x/crypto@v0.55.0	0.56.0	2
quay.io/open-cluster-management/registration-operator :v1.3.1	df6c926a2b54	golang.org/x/crypto@v0.49.0	0.56.0	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.56.0	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.56.0	2
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/crypto@v0.8.0	0.56.0	2
quay.io/prometheuscommunity/elasticsearch-exporter :v1.11.0	a056739b095d	golang.org/x/crypto@v0.53.0	0.56.0	2
quay.io/prometheuscommunity/json-exporter :v0.7.0	3a777171d39a	golang.org/x/crypto@v0.31.0	0.56.0	2
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.56.0	2
quay.io/prometheus/node-exporter :v1.11.1-distroless	6112664fd761	golang.org/x/crypto@v0.49.0	0.56.0	2
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.56.0	2
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.56.0	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.0	142a1f11df8d	golang.org/x/crypto@v0.55.0	0.56.0	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.67.0	14feefde1b80	golang.org/x/crypto@v0.11.0	0.56.0	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.79.2	193280a33bc1	golang.org/x/crypto@v0.31.0	0.56.0	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.78.2	944b2c67345c	golang.org/x/crypto@v0.28.0	0.56.0	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.77.2	c96d4fb1d57f	golang.org/x/crypto@v0.27.0	0.56.0	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.89.0	cb4ac6a56555	golang.org/x/crypto@v0.47.0	0.56.0	2
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.56.0	2
quay.io/prometheus/prometheus :v2.53.0	075b1ba2c4eb	golang.org/x/crypto@v0.24.0	0.56.0	2
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	golang.org/x/crypto@v0.31.0	0.56.0	2
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.56.0	2
quay.io/prometheus/prometheus :v2.47.0	c5dd35038287	golang.org/x/crypto@v0.11.0	0.56.0	2
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.56.0	2
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/crypto@v0.25.0	0.56.0	2
quay.io/prometheus/pushgateway :v1.11.2	49ed9fdf3780	golang.org/x/crypto@v0.43.0	0.56.0	2
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	golang.org/x/crypto@v0.8.0	0.56.0	2
quay.io/prometheus/pushgateway :v1.11.0	99392035ae99	golang.org/x/crypto@v0.32.0	0.56.0	2
quay.io/prometheus/snmp-exporter :v0.30.1	e5fd5e8b43ac	golang.org/x/crypto@v0.46.0	0.56.0	2
quay.io/thanos/thanos :v0.39.2	1d022ef4b8ef	golang.org/x/crypto@v0.39.0	0.56.0	2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra :latest	b1198ea741d1	golang.org/x/crypto@v0.45.0	0.56.0	2
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.56.0	2
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	golang.org/x/crypto@v0.1.0	0.56.0	2
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	golang.org/x/crypto@v0.1.0	0.56.0	2
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	golang.org/x/crypto@v0.21.0	0.56.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.56.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.56.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	golang.org/x/crypto@v0.14.0	0.56.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.56.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.15.0	db384bf43222	golang.org/x/crypto@v0.31.0	0.56.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	golang.org/x/crypto@v0.9.0	0.56.0	2
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	golang.org/x/crypto@v0.38.0	0.56.0	2
registry.k8s.io/nfd/node-feature-discovery :v0.19.0	2fa1c99ad09b	golang.org/x/crypto@v0.53.0	0.56.0	2
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.56.0	2
registry.k8s.io/sig-storage/csi-provisioner :v6.1.1	d992c36d4ddd	golang.org/x/crypto@v0.41.0	0.56.0	2
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	golang.org/x/crypto@v0.41.0	0.56.0	2