StackRadar

CVE-2026-56855

Unscored

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,053
of 17,805 indexed, latest versions
Container images
3,375
deployed by those charts
Fix available
1 of 1
affected package

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Carried by container images the latest versions of 3,053 of 17,805 indexed charts deploy, on 3,375 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+157 more0.56.03,375
OSV records
GO-2026-6355

Charts affected

3,053 by stars
ChartLatestAffected imagesRadar Score
prometheus-monitoring-stackyotron-helm-charts1.2.03 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

3 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
golang.org/x/crypto@v0.52.0
0.56.0
quay.io/prometheus/alertmanager:latest690c7b525f43
golang.org/x/crypto@v0.54.0
0.56.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

936
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.56.0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.56.0

Open the chart page →

5,076
zahori-moonzahoriVerified publisher1.0.11 of 3See more

zahori-moon zahori 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/aerokube/moon-ui:2.0.589990b146824
golang.org/x/crypto@v0.10.0
0.56.0

Open the chart page →

2,908

Container images carrying it

3,375 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
golang.org/x/crypto@v0.33.0
0.56.0
1
ghcr.io/fluxcd/helm-controller:v1.2.062eaa9c9a929
golang.org/x/crypto@v0.32.0
0.56.0
1
ghcr.io/fluxcd/image-automation-controller:v1.2.26b0b16ab2115
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/fluxcd/image-reflector-controller:v1.2.227e6bad1dac5
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/fluxcd/kustomize-controller:v1.9.23aecec8bafdb
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/fluxcd/notification-controller:v1.9.29ce503e7bcb8
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
golang.org/x/crypto@v0.32.0
0.56.0
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be
0.56.0
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
golang.org/x/crypto@v0.4.0
0.56.0
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
golang.org/x/crypto@v0.40.0
0.56.0
1
ghcr.io/foxcpp/maddy:0.9.5de42151adff6
golang.org/x/crypto@v0.32.0
0.56.0
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver:1.9.0324f9b7b689c
golang.org/x/crypto@v0.14.0
0.56.0
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver:1.9.0cdba39e3f3d0
golang.org/x/crypto@v0.14.0
0.56.0
1
ghcr.io/froz42/kerbernetes:v1.1.6d5c074be8366
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
0.56.0
1
ghcr.io/gabe565/ascii-movie:1.9.627f85bb98da3
golang.org/x/crypto@v0.33.0
0.56.0
1
ghcr.io/gabe565/castsponsorskip:0.8.15f7b4c6dd299
golang.org/x/crypto@v0.31.0
0.56.0
1
ghcr.io/gabe565/limo:latest6dfdbc9853bb
golang.org/x/crypto@v0.6.0
0.56.0
1
ghcr.io/gabe565/matrimony:latestd39a9d7c3e1b
golang.org/x/crypto@v0.19.0
0.56.0
1
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
golang.org/x/crypto@v0.36.0
0.56.0
1
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
golang.org/x/crypto@v0.14.0
0.56.0
1
ghcr.io/georgmangold/console:v1.8.158f4f180aa6e
golang.org/x/crypto@v0.36.0
0.56.0
1
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
golang.org/x/crypto@v0.41.0
0.56.0
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
golang.org/x/crypto@v0.42.0
0.56.0
1
ghcr.io/glassflow/glassflow-etl-be:v3.2.020f066d0f631
golang.org/x/crypto@v0.49.0
0.56.0
1
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
golang.org/x/crypto@v0.45.0
0.56.0
1
ghcr.io/glauth/glauth:v2.5.209c782ca5984
golang.org/x/crypto@v0.18.0
0.56.0
1
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
golang.org/x/crypto@v0.52.0
0.56.0
1
ghcr.io/gochain/rpc-proxy/rpc-proxy:latestca01f5ab95f7
golang.org/x/crypto@v0.36.0
0.56.0
1
ghcr.io/gomenhashai/gomenhashai:v1.3.36f031172a5ec
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/googlecloudplatform/k8s-aibom05e86c39c535
golang.org/x/crypto@v0.52.0
0.56.0
1
ghcr.io/gotify/server:2.6.104f4c4bb7cdd
golang.org/x/crypto@v0.29.0
0.56.0
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
golang.org/x/crypto@v0.39.0
0.56.0
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
golang.org/x/crypto@v0.43.0
0.56.0
1
ghcr.io/grafana/alloy-operator:1.12.14ee4b71cf16a
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
golang.org/x/crypto@v0.47.0
0.56.0
1
ghcr.io/grafana/grafana-operator:v5.18.00af2faec9d6f
golang.org/x/crypto@v0.36.0
0.56.0
1
ghcr.io/grafana/grafana-operator:v5.25.0bc572995823f
golang.org/x/crypto@v0.55.0
0.56.0
1
ghcr.io/grafana/grafana-operator:v5.22.2d45fc24e8f43
golang.org/x/crypto@v0.48.0
0.56.0
1
ghcr.io/grycap/oscar:latest0c58ff972451
golang.org/x/crypto@v0.48.0
0.56.0
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
golang.org/x/crypto@v0.40.0
0.56.0
1
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
golang.org/x/crypto@v0.46.0
0.56.0
1
ghcr.io/happymooguild/wardn-backend:0.1.023ee1b8cfc3c
golang.org/x/crypto@v0.54.0
0.56.0
1
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
golang.org/x/crypto@v0.52.0
0.56.0
1
ghcr.io/helm/chartmuseum:v0.16.648bc27743c08
golang.org/x/crypto@v0.53.0
0.56.0
1
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
golang.org/x/crypto@v0.9.0
0.56.0
1
ghcr.io/helm/chartmuseum:v0.14.0878ef6a31fa0
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.56.0
1
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.56.0
1
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
golang.org/x/crypto@v0.36.0
0.56.0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.