StackRadar

CVE-2026-56855

Unscored

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,053
of 17,805 indexed, latest versions
Container images
3,375
deployed by those charts
Fix available
1 of 1
affected package

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Carried by container images the latest versions of 3,053 of 17,805 indexed charts deploy, on 3,375 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+157 more0.56.03,375
OSV records
GO-2026-6355

Charts affected

3,053 by stars
ChartLatestAffected imagesRadar Score
prometheus-monitoring-stackyotron-helm-charts1.2.03 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

3 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
golang.org/x/crypto@v0.52.0
0.56.0
quay.io/prometheus/alertmanager:latest690c7b525f43
golang.org/x/crypto@v0.54.0
0.56.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

936
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.56.0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.56.0

Open the chart page →

5,076
zahori-moonzahoriVerified publisher1.0.11 of 3See more

zahori-moon zahori 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/aerokube/moon-ui:2.0.589990b146824
golang.org/x/crypto@v0.10.0
0.56.0

Open the chart page →

2,908

Container images carrying it

3,375 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
golang.org/x/crypto@v0.37.0
0.56.0
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.56.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
golang.org/x/crypto@v0.40.0
0.56.0
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
golang.org/x/crypto@v0.31.0
0.56.0
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.56.0
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/dirien/minecraft-exporter:0.24.061d89bf99ff7
golang.org/x/crypto@v0.49.0
0.56.0
1
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
golang.org/x/crypto@v0.36.0
0.56.0
1
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
1
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
golang.org/x/crypto@v0.6.0
0.56.0
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
golang.org/x/crypto@v0.0.0-20220314234724-5d542ad81a58
0.56.0
1
ghcr.io/doodlescheduling/k8s-pause:v0.1.16b3215e37738
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.56.0
1
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.56.0
1
ghcr.io/doodlescheduling/saml-exporter:v0.5.03d5a99841bc2
golang.org/x/crypto@v0.33.0
0.56.0
1
ghcr.io/dploeger/cloudflare-ddns-update:v0.1.0ec06685b9ff4
golang.org/x/crypto@v0.23.0
0.56.0
1
ghcr.io/druggeri/nut_exporter:3.3.0276460d141c7
golang.org/x/crypto@v0.33.0
0.56.0
1
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.56.0
1
ghcr.io/edgelesssys/continuum/continuum-proxy24c76f294a80
golang.org/x/crypto@v0.31.0
0.56.0
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.56.0
1
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/einstack/glide:0.0.1-alpineab3f7d0a1d50
golang.org/x/crypto@v0.16.0
0.56.0
1
ghcr.io/element-hq/lk-jwt-service:0.6.0822f0c03a3bd
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/ente/server:0472c929b6070e61fecaf2013d47efce2dcda462f646b68a1b8d
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88
0.56.0
1
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/erpc/erpc:0.1.18bfed3d49a08
golang.org/x/crypto@v0.51.0
0.56.0
1
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
golang.org/x/crypto@v0.35.0
0.56.0
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
golang.org/x/crypto@v0.17.0
0.56.0
1
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
golang.org/x/crypto@v0.48.0
0.56.0
1
ghcr.io/ethpandaops/dispatchoor-api:latesta0b272f6682a
golang.org/x/crypto@v0.46.0
0.56.0
1
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
golang.org/x/crypto@v0.52.0
0.56.0
1
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
golang.org/x/crypto@v0.45.0
0.56.0
1
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.56.0
1
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
golang.org/x/crypto@v0.49.0
0.56.0
1
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
golang.org/x/crypto@v0.6.0
0.56.0
1
ghcr.io/fabioluciano/tekton-events-relay:0.10.184cb5a2b8b81
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/fbuchner/meerkat-crm:1.7.0d513bdd3ae80
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
golang.org/x/crypto@v0.18.0
0.56.0
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab
0.56.0
1
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.56.0
1
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
golang.org/x/crypto@v0.43.0
0.56.0
1
ghcr.io/fikaworks/grgate:v0.6.37104f60d8972
golang.org/x/crypto@v0.7.0
0.56.0
1
ghcr.io/fission/fission-bundle:v1.27.0d353720b037a
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
golang.org/x/crypto@v0.41.0
0.56.0
1
ghcr.io/flannel-io/flannel:v0.28.9708a2c9c1cfb
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
golang.org/x/crypto@v0.42.0
0.56.0
1
ghcr.io/fluxcd/flagger:1.45.015b372d35012
golang.org/x/crypto@v0.54.0
0.56.0
1
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
golang.org/x/crypto@v0.53.0
0.56.0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.