StackRadar

CVE-2026-56855

Unscored

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,108
of 17,813 indexed, latest versions
Container images
3,442
deployed by those charts
Fix available
1 of 1
affected package

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Carried by container images the latest versions of 3,108 of 17,813 indexed charts deploy, on 3,442 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+158 more0.56.03,442
OSV records
GO-2026-6355

Charts affected

3,108 by stars
ChartLatestAffected imagesRadar Score
ygdrassil-monitoringygdrassilVerified publisher0.4.07 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

7 of the 10 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
golang.org/x/crypto@v0.32.0
0.56.0
prom/alertmanager:v0.28.0d5155cfac40a
golang.org/x/crypto@v0.31.0
0.56.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
golang.org/x/crypto@v0.31.0
0.56.0
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/crypto@v0.21.0
0.56.0
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
golang.org/x/crypto@v0.31.0
0.56.0
quay.io/prometheus/pushgateway:v1.11.099392035ae99
golang.org/x/crypto@v0.32.0
0.56.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/crypto@v0.28.0
0.56.0

Open the chart page →

9,526
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
golang.org/x/crypto@v0.22.0
0.56.0

Open the chart page →

1,610
matrixdb-operatorymatrixOfficialVerified publisher0.13.01 of 2See more

matrixdb-operator ymatrix 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
matrixdb/kubebuilder_kube-rbac-proxy:v0.12.0ed3c7e6291e8
golang.org/x/crypto@v0.0.0-20211115234514-b4de73f9ece8
0.56.0

Open the chart page →

1,966
rawfile-csiymatrixVerified publisher0.2.12 of 4See more

rawfile-csi ymatrix 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
matrixdb/custom-external-provisioner:4622a07d7-202204247e9ffe249a51
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.56.0
matrixdb/rawfile-csi:v0.2.195b2e38e913d
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.56.0

Open the chart page →

8,002
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0

Open the chart page →

3,025
prometheus-monitoring-stackyotron-helm-charts1.2.03 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

3 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
golang.org/x/crypto@v0.52.0
0.56.0
quay.io/prometheus/alertmanager:latest690c7b525f43
golang.org/x/crypto@v0.54.0
0.56.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

936
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.56.0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.56.0

Open the chart page →

5,077
zahori-moonzahoriVerified publisher1.0.11 of 3See more

zahori-moon zahori 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/aerokube/moon-ui:2.0.589990b146824
golang.org/x/crypto@v0.10.0
0.56.0

Open the chart page →

2,908

Container images carrying it

3,442 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.56.0
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.56.0
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.56.0
1
ghcr.io/containeroo/cert-manager-webhook-bluecat:latest96f82d5840d4
golang.org/x/crypto@v0.54.0
0.56.0
1
ghcr.io/containers/kubernetes-mcp-server:v0.0.666d650f4bd6ac
golang.org/x/crypto@v0.54.0
0.56.0
1
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
golang.org/x/crypto@v0.40.0
0.56.0
1
ghcr.io/cosmo-workspace/cosmo-controller-manager:v0.9.08c7fa5552028
golang.org/x/crypto@v0.9.0
0.56.0
1
ghcr.io/cosmo-workspace/cosmo-dashboard:v0.9.16a1c4a81a924
golang.org/x/crypto@v0.9.0
0.56.0
1
ghcr.io/crashappsec/chalkular-controller:v0.0.8d31986456626
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
golang.org/x/crypto@v0.45.0
0.56.0
1
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
golang.org/x/crypto@v0.38.0
0.56.0
1
ghcr.io/crazy-max/diun:4.19.0c94e32b888e4
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.56.0
1
ghcr.io/crossplane-contrib/crossview:v4.6.07b54c5ba60e5
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/ctron/kubectl:1.25e37d61b5277c
golang.org/x/crypto@v0.14.0
0.56.0
1
ghcr.io/d0ugal/internet-perf-exporter:v0.2.91f5c9a96fe52a
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/dadrus/heimdall:0.17.22f05d9658764a
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
golang.org/x/crypto@v0.24.0
0.56.0
1
ghcr.io/dapr/injector:1.17.0-rc.37a2fd888ed5f
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/dapr/operator:1.17.0-rc.3d5cc61cbe735
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/dapr/placement:1.17.0-rc.3a237b43cd5c6
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/dapr/scheduler:1.17.0-rc.36c62e01e736b
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/dapr/sentry:1.17.0-rc.3bf79b03591e0
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/dash0hq/operator-controller:0.155.12acc8dd9c4da
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/davidkarlsen/flyway-operator:0.2.1366f60b461c0d
golang.org/x/crypto@v0.36.0
0.56.0
1
ghcr.io/db-operator/db-operator:2.42.0fb6531d509b9
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/dc-tec/openbao-operator:0.5.04f1d8e79e9d3
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/deepch/rtsptoweb:v2.2.0f9de3a1a5deb
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.56.0
1
ghcr.io/devangradadiya/k8s-s3-bucket-operator:0.2.258288de9f9fa
golang.org/x/crypto@v0.45.0
0.56.0
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
golang.org/x/crypto@v0.23.0
0.56.0
1
ghcr.io/devops-ia/dwpk:1.0.0d76dbf82a81d
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/devops-ia/dwpk-gateway:1.0.02911d8b02c64
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/devops-ia/dwpk-ui:1.0.0b1af8311eba8
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
golang.org/x/crypto@v0.37.0
0.56.0
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.56.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
golang.org/x/crypto@v0.40.0
0.56.0
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
golang.org/x/crypto@v0.31.0
0.56.0
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.56.0
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/dirien/minecraft-exporter:0.24.061d89bf99ff7
golang.org/x/crypto@v0.49.0
0.56.0
1
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
golang.org/x/crypto@v0.36.0
0.56.0
1
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
1
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
golang.org/x/crypto@v0.6.0
0.56.0
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
golang.org/x/crypto@v0.0.0-20220314234724-5d542ad81a58
0.56.0
1
ghcr.io/doodlescheduling/k8s-pause:v0.1.16b3215e37738
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.56.0
1
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.56.0
1
ghcr.io/doodlescheduling/saml-exporter:v0.5.03d5a99841bc2
golang.org/x/crypto@v0.33.0
0.56.0
1
ghcr.io/dploeger/cloudflare-ddns-update:v0.1.0ec06685b9ff4
golang.org/x/crypto@v0.23.0
0.56.0
1
ghcr.io/drakkan/sftpgo:v2.7.59011fe608d33
golang.org/x/crypto@v0.54.0
0.56.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.