CVE-2026-56855

Unscored

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.004; 31st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,056; of 17,781 indexed, latest versions
Container images: 3,428; deployed by those charts
Fix available: 2 of 2; affected packages

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Carried by container images the latest versions of 3,056 of 17,781 indexed charts deploy, on 3,428 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+157 more	0.56.0	3,428
kubernetes-1.34apk	1.34.11-r2	1.34.11-r7	1

OSV records: CGA-3gvh-4gf5-5579 GO-2026-6355
Also known as: CGA-3w88-m6vh-6c8c, CGA-cvgr-fgxm-pcwv, CGA-fhvr-vpmj-c8hw, CGA-h6hp-wj28-7xmg, CGA-p66m-c5fj-p2hc, CGA-q833-3p5v-56mv, CGA-qr7w-fvfc-56ph, CGA-w898-ghx8-g76x, CGA-wfr9-2vq9-5w72, CGA-wv8c-j2xv-q9p4, CGA-x94j-59r9-mmcv
Trending: Rank 23 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

3,056 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

90.2.0

4 of 6 See more

kube-prometheus-stack prometheus-community 90.2.0

4 of the 6 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.1-distroless	3600073f45a9	golang.org/x/crypto@v0.52.0	0.56.0
quay.io/prometheus-operator/prometheus-operator :v0.93.1	e52bb28fd41c	golang.org/x/crypto@v0.54.0	0.56.0
quay.io/prometheus/node-exporter :v1.12.1-distroless	8c9bac11973b	golang.org/x/crypto@v0.54.0	0.56.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

740

argo-cdargo

10.9.0

2 of 3 See more

argo-cd argo 10.9.0

2 of the 3 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/crypto@v0.47.0	0.56.0
quay.io/argoproj/argocd :v3.5.2	e2aadfae709d	golang.org/x/crypto@v0.36.0	0.56.0

Open the chart page →

3,218

prometheusprometheus-community

29.29.0

6 of 6 See more

prometheus prometheus-community 29.29.0

6 of the 6 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.0	142a1f11df8d	golang.org/x/crypto@v0.55.0	0.56.0
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	golang.org/x/crypto@v0.54.0	0.56.0
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	golang.org/x/crypto@v0.54.0	0.56.0
quay.io/prometheus/prometheus :v3.14.0	5ce7540c3c00	golang.org/x/crypto@v0.54.0	0.56.0
quay.io/prometheus/pushgateway :v1.11.3	74fa117cef2d	golang.org/x/crypto@v0.52.0	0.56.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

458

metrics-servermetrics-server

3.14.0

1 of 1 See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	golang.org/x/crypto@v0.53.0	0.56.0

Open the chart page →

156

vaulthashicorp

0.34.1

2 of 2 See more

vault hashicorp 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
hashicorp/vault :2.0.4	5be49781ecf7	golang.org/x/crypto@v0.54.0	0.56.0
hashicorp/vault-k8s :1.7.6	55e27b080c9b	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

542

harborharbor

1.19.2

4 of 8 See more

harbor harbor 1.19.2

4 of the 8 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
goharbor/harbor-core :v2.15.2	d7b780d23721	golang.org/x/crypto@v0.52.0	0.56.0
goharbor/harbor-registryctl :v2.15.2	223d5cb49d5d	golang.org/x/crypto@v0.52.0	0.56.0
goharbor/registry-photon :v2.15.2	c4ebef61ceb5	golang.org/x/crypto@v0.52.0	0.56.0
goharbor/trivy-adapter-photon :v2.15.2	215c07b71c37	golang.org/x/crypto@v0.53.0	0.56.0

Open the chart page →

1,650

jenkinsjenkinsci

5.9.58

1 of 2 See more

jenkins jenkinsci 5.9.58

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-jdk21	c1e4c349365f	golang.org/x/crypto@v0.36.0	0.56.0

Open the chart page →

2,665

external-secretsexternal-secrets-operator

2.10.0

1 of 1 See more

external-secrets external-secrets-operator 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
ghcr.io/external-secrets/external-secrets :v2.10.0	814117b0fd6d	golang.org/x/crypto@v0.55.0	0.56.0

Open the chart page →

longhornlonghorn

1.12.1

1 of 3 See more

longhorn longhorn 1.12.1

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.12.1	83b79f57043f	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

554

gitlab-runnergitlab

0.92.1

1 of 1 See more

gitlab-runner gitlab 0.92.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/gitlab-runner :alpine-v19.3.1	af0325804248	golang.org/x/crypto@v0.50.0	0.56.0

Open the chart page →

904

ciliumcilium

1.20.1

2 of 3 See more

cilium cilium 1.20.1

2 of the 3 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.20.1	ae9ea21f7427	golang.org/x/crypto@v0.53.0	0.56.0
quay.io/cilium/operator-generic :v1.20.1	6c3885fc7b62	golang.org/x/crypto@v0.53.0	0.56.0

Open the chart page →

1,708

airflowapache-airflow

1.22.0

1 of 4 See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/prometheus/statsd-exporter :v0.30.0	378cb79c4ac7	golang.org/x/crypto@v0.49.0	0.56.0

Open the chart page →

3,195

mongodbbitnami

19.2.1

1 of 1 See more

mongodb bitnami 19.2.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
bitnami/mongodb :latest	e46cffb66274	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

velerovmware-tanzu

12.1.0

1 of 1 See more

velero vmware-tanzu 12.1.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.1	11459094b1b2	golang.org/x/crypto@v0.46.0	0.56.0

Open the chart page →

1,331

rancherrancher-stable

2.15.1

2 of 2 See more

rancher rancher-stable 2.15.1

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rancher/rancher :v2.15.1	5f6c4dc52a05	golang.org/x/crypto@v0.48.0	0.56.0
rancher/shell :v0.8.1	f293af9c635f	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

1,456

oauth2-proxyoauth2-proxy

10.7.0

1 of 1 See more

oauth2-proxy oauth2-proxy 10.7.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/oauth2-proxy/oauth2-proxy :v7.15.3	10a1165743a1	golang.org/x/crypto@v0.52.0	0.56.0

Open the chart page →

147

nginx-ingressnginx

2.7.1

1 of 1 See more

nginx-ingress nginx 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
nginx/nginx-ingress :5.6.1	8ca7b42ae702	golang.org/x/crypto@v0.55.0	0.56.0

Open the chart page →

1,285

kedakedacore

2.20.2

3 of 3 See more

keda kedacore 2.20.2

3 of the 3 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.20.2	fe74c7b88495	golang.org/x/crypto@v0.52.0	0.56.0
ghcr.io/kedacore/keda-admission-webhooks :2.20.2	41f74102aba7	golang.org/x/crypto@v0.52.0	0.56.0
ghcr.io/kedacore/keda-metrics-apiserver :2.20.2	27286536a8a7	golang.org/x/crypto@v0.52.0	0.56.0

Open the chart page →

873

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.56.0

Open the chart page →

2,743

artifact-hubartifact-hub

1.23.0

5 of 7 See more

artifact-hub artifact-hub 1.23.0

5 of the 7 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	golang.org/x/crypto@v0.46.0	0.56.0
artifacthub/db-migrator :v1.23.0	28c13565ac5c	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.56.0
artifacthub/hub :v1.23.0	7d3a91c539dc	golang.org/x/crypto@v0.53.0	0.56.0
artifacthub/scanner :v1.23.0	2d8365601f0e	golang.org/x/crypto@v0.53.0	0.56.0
artifacthub/tracker :v1.23.0	5368d21a6e5c	golang.org/x/crypto@v0.42.0	0.56.0

Open the chart page →

10,755

kube-state-metricsprometheus-community

8.4.2

1 of 1 See more

kube-state-metrics prometheus-community 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

alloygrafana

1.12.1

2 of 2 See more

alloy grafana 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.19.2	b8ec653c4423	golang.org/x/crypto@v0.55.0	0.56.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.91.0	7d9e4eea5f11	golang.org/x/crypto@v0.50.0	0.56.0

Open the chart page →

1,100

prometheus-blackbox-exporterprometheus-community

11.18.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	golang.org/x/crypto@v0.45.0	0.56.0

Open the chart page →

594

deschedulerdescheduler

0.36.0

1 of 1 See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	golang.org/x/crypto@v0.49.0	0.56.0

Open the chart page →

569

argo-rolloutsargo

2.43.1

1 of 1 See more

argo-rollouts argo 2.43.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-rollouts :v1.10.0	187630ba7228	golang.org/x/crypto@v0.53.0	0.56.0

Open the chart page →

115

mimir-distributedgrafana

6.2.0

3 of 6 See more

mimir-distributed grafana 6.2.0

3 of the 6 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
grafana/mimir :3.2.0	736f7459913d	golang.org/x/crypto@v0.55.0	0.56.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.56.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.56.0

Open the chart page →

4,517

jaegerjaegertracing

4.13.1

1 of 1 See more

jaeger jaegertracing 4.13.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.20.0	46a886260e04	golang.org/x/crypto@v0.53.0	0.56.0

Open the chart page →

294

jupyterhubjupyterhub

4.4.2

1 of 7 See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	golang.org/x/crypto@v0.21.0	0.56.0

Open the chart page →

7,894

argo-cdargo-cd-oci

10.9.0

2 of 3 See more

argo-cd argo-cd-oci 10.9.0

2 of the 3 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	golang.org/x/crypto@v0.47.0	0.56.0
quay.io/argoproj/argocd :v3.5.2	e2aadfae709d	golang.org/x/crypto@v0.36.0	0.56.0

Open the chart page →

3,218

natsnats

2.14.6

2 of 3 See more

nats nats 2.14.6

2 of the 3 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
library/nats :2.14.6-alpine	ad7a43eb7e33	golang.org/x/crypto@v0.55.0	0.56.0
natsio/nats-box :0.19.7	ffce8bd10338	golang.org/x/crypto@v0.50.0	0.56.0

Open the chart page →

2,313

argocd-image-updaterargo

1.3.1

1 of 1 See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

718

headlampheadlamp

0.45.0

1 of 1 See more

headlamp headlamp 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
ghcr.io/headlamp-k8s/headlamp :v0.45.0	db3f0e0fc58d	golang.org/x/crypto@v0.53.0	0.56.0

Open the chart page →

229

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	golang.org/x/crypto@v0.40.0	0.56.0

Open the chart page →

1,765

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	golang.org/x/crypto@v0.51.0	0.56.0

Open the chart page →

30,159

falcofalcosecurity

9.1.0

3 of 3 See more

falco falcosecurity 9.1.0

3 of the 3 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
falcosecurity/falco :0.44.1	d0cfe422d6ac	golang.org/x/crypto@v0.47.0	0.56.0
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	golang.org/x/crypto@v0.50.0	0.56.0
falcosecurity/falcoctl :0.13.0	0eeb79adc580	golang.org/x/crypto@v0.50.0	0.56.0

Open the chart page →

5,227

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.56.0

Open the chart page →

2,315

alertmanagerprometheus-community

1.43.1

1 of 1 See more

alertmanager prometheus-community 1.43.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.34.0	690c7b525f43	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	golang.org/x/crypto@v0.36.0	0.56.0

Open the chart page →

1,360

prometheus-node-exporterprometheus-community

4.57.0

1 of 1 See more

prometheus-node-exporter prometheus-community 4.57.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

rook-cephrook

1.20.7

1 of 2 See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
rook/ceph :v1.20.7	2f970c425617	golang.org/x/crypto@v0.52.0	0.56.0

Open the chart page →

1,447

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	golang.org/x/crypto@v0.45.0	0.56.0

Open the chart page →

969

grafanagrafana-community

13.2.4

1 of 1 See more

grafana grafana-community 13.2.4

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.1-distroless	3600073f45a9	golang.org/x/crypto@v0.52.0	0.56.0

Open the chart page →

431

victoria-metrics-k8s-stackvictoriametrics

0.92.1

4 of 7 See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

4 of the 7 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	golang.org/x/crypto@v0.52.0	0.56.0
victoriametrics/operator :v0.74.1	7310c4a80b94	golang.org/x/crypto@v0.54.0	0.56.0
quay.io/prometheus/node-exporter :v1.11.1	0f422f62c15f	golang.org/x/crypto@v0.49.0	0.56.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	golang.org/x/crypto@v0.52.0	0.56.0

Open the chart page →

1,889

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	golang.org/x/crypto@v0.3.0	0.56.0

Open the chart page →

1,445

openebsopenebs

4.6.1

10 of 35 See more

openebs openebs 4.6.1

10 of the 35 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/crypto@v0.36.0	0.56.0
grafana/loki :3.4.2	58a6c186ce78	golang.org/x/crypto@v0.32.0	0.56.0
library/nats :2.9.17-alpine	1a7b320b2942	golang.org/x/crypto@v0.8.0	0.56.0
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	golang.org/x/crypto@v0.8.0	0.56.0
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	golang.org/x/crypto@v0.36.0	0.56.0
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	golang.org/x/crypto@v0.27.0	0.56.0
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	golang.org/x/crypto@v0.27.0	0.56.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	golang.org/x/crypto@v0.36.0	0.56.0
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	golang.org/x/crypto@v0.41.0	0.56.0
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	golang.org/x/crypto@v0.37.0	0.56.0

Open the chart page →

23,894

tigera-operatorprojectcalico

3.32.2

1 of 1 See more

tigera-operator projectcalico 3.32.2

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.42.6	3a03d460f8a1	golang.org/x/crypto@v0.55.0	0.56.0

Open the chart page →

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.56.0

Open the chart page →

930

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	golang.org/x/crypto@v0.11.0	0.56.0
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.56.0

Open the chart page →

2,883

corednscoredns

1.47.1

1 of 1 See more

coredns coredns 1.47.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
coredns/coredns :1.14.6	900f9c109f7a	golang.org/x/crypto@v0.53.0	0.56.0

Open the chart page →

330

x509-certificate-exporterenix

4.2.0

1 of 1 See more

x509-certificate-exporter enix 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container image	Digest	Package	Fixed in
quay.io/enix/x509-certificate-exporter :4.2.0	afef14dc3862	golang.org/x/crypto@v0.54.0	0.56.0

Open the chart page →

Container images carrying it

3,428 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.56.0	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	golang.org/x/crypto@v0.19.0	0.56.0	2
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.56.0	2
cloudflare/cloudflared :2026.6.1	6d91c121b803	golang.org/x/crypto@v0.52.0	0.56.0	2
cloudflare/cloudflared :2026.9.1	b269e8abd07a	golang.org/x/crypto@v0.53.0	0.56.0	2
coredns/coredns :1.13.1	9b9128672209	golang.org/x/crypto@v0.42.0	0.56.0	2
crate/crate_adapter :latest	b8d89fa5d19b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.56.0	2
cs3org/revad :v1.19.0	3b57a34a7dfd	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.56.0	2
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/crypto@v0.5.0	0.56.0	2
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.56.0	2
danielqsj/kafka-exporter :v1.9.0	4150e46b2e96	golang.org/x/crypto@v0.32.0	0.56.0	2
danielqsj/kafka-exporter :latest	a51b280b55a7	golang.org/x/crypto@v0.48.0	0.56.0	2
datawire/aes :1.14.4	8588eafe6862	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.56.0	2
devopsfaith/krakend :latest	f8bdaa8a1a43	golang.org/x/crypto@v0.35.0	0.56.0	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.56.0	2
dtzar/helm-kubectl :3.14.4	55429449408e	golang.org/x/crypto@v0.17.0	0.56.0	2
dunglas/mercure :v0 :v0.24.2	916834e49961	golang.org/x/crypto@v0.52.0	0.56.0	2
epamedp/cd-pipeline-operator :2.32.0	fc858071b7a1	golang.org/x/crypto@v0.53.0	0.56.0	2
epamedp/codebase-operator :2.35.0	295a008abcef	golang.org/x/crypto@v0.53.0	0.56.0	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.56.0	2
filebrowser/filebrowser :latest :v2.63.23	a469ea076d4a	golang.org/x/crypto@v0.54.0	0.56.0	2
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/crypto@v0.22.0	0.56.0	2
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/crypto@v0.21.0	0.56.0	2
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/crypto@v0.22.0	0.56.0	2
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/crypto@v0.21.0	0.56.0	2
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/crypto@v0.21.0	0.56.0	2
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/crypto@v0.21.0	0.56.0	2
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/crypto@v0.21.0	0.56.0	2
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/crypto@v0.21.0	0.56.0	2
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/crypto@v0.21.0	0.56.0	2
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/crypto@v0.21.0	0.56.0	2
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/crypto@v0.21.0	0.56.0	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.56.0	2
gotenberg/gotenberg :8.36.0	87c16b9f3642	golang.org/x/crypto@v0.54.0	0.56.0	2
gotenberg/gotenberg :8 :8.37.0	f29984bd1e22	golang.org/x/crypto@v0.54.0	0.56.0	2
gotify/server :3.1.0	be44495e4609	golang.org/x/crypto@v0.53.0	0.56.0	2
governify/dashboard :latest	e83a17ba5038	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.56.0	2
grafana/agent-operator :v0.25.1	a136c6208aa3	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.56.0	2
grafana/alloy :v1.8.1	7790f6f7fbd8	golang.org/x/crypto@v0.36.0	0.56.0	2
grafana/alloy :v1.12.2	f94b1c82957a	golang.org/x/crypto@v0.43.0	0.56.0	2
grafana/grafana :9.2.4	057896e23443	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.56.0	2
grafana/grafana :11.1.0	079600c9517b	golang.org/x/crypto@v0.24.0	0.56.0	2
grafana/grafana :12.3.1	2175aaa91c96	golang.org/x/crypto@v0.43.0	0.56.0	2
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.56.0	2
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.56.0	2
grafana/grafana :11.1.4	886b56d5534e	golang.org/x/crypto@v0.24.0	0.56.0	2
grafana/grafana :12.3.3	9e1e77ade304	golang.org/x/crypto@v0.45.0	0.56.0	2
grafana/grafana :11.4.0	d8ea37798ccc	golang.org/x/crypto@v0.27.0	0.56.0	2
grafana/grafana :12.4.1	e932bd6ed0e0	golang.org/x/crypto@v0.47.0	0.56.0	2
grafana/loki :3.6.11	44148ad243c0	golang.org/x/crypto@v0.49.0	0.56.0	2