StackRadar

CVE-2026-56855

Unscored

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,116
of 17,821 indexed, latest versions
Container images
3,454
deployed by those charts
Fix available
1 of 1
affected package

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

Carried by container images the latest versions of 3,116 of 17,821 indexed charts deploy, on 3,454 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+158 more0.56.03,454
OSV records
GO-2026-6355

Charts affected

3,116 by stars
ChartLatestAffected imagesRadar Score
procestypecatalogusprocestypecatalogus1.1.01 of 4See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.56.0

Open the chart page →

7,442
productenendienstencatalogusproductenendienstencatalogus1.0.01 of 3See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.56.0

Open the chart page →

7,521
capsule-proxyprojectcapsuleOfficialVerified publisher0.14.11 of 2See more

capsule-proxy projectcapsule 0.14.1

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/projectcapsule/capsule-proxy:v0.14.17c90292e3172
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

1,254
alertmanager-snmp-notifierprometheus-communityOfficialVerified publisher2.2.01 of 1See more

alertmanager-snmp-notifier prometheus-community 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
maxwo/snmp-notifier:v2.1.15cdf9914c78e
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

22
prometheus-modbus-exporterprometheus-communityVerified publisher0.1.41 of 1See more

prometheus-modbus-exporter prometheus-community 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
openenergyprojects/modbus_exporter:20230617_a14455158990f24fb25
golang.org/x/crypto@v0.7.0
0.56.0

Open the chart page →

1,210
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
golang.org/x/crypto@v0.15.0
0.56.0

Open the chart page →

4,490
alertmanagerprometheus-worawutchan0.3.01 of 1See more

alertmanager prometheus-worawutchan 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.56.0

Open the chart page →

2,306
prometheus-blackbox-exporterprometheus-worawutchan4.10.11 of 1See more

prometheus-blackbox-exporter prometheus-worawutchan 4.10.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.18.01ffc3f109eb3
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.56.0

Open the chart page →

2,251
prometheus-kafka-exporterprometheus-worawutchan0.2.01 of 3See more

prometheus-kafka-exporter prometheus-worawutchan 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
danielqsj/kafka-exporter:latesta51b280b55a7
golang.org/x/crypto@v0.48.0
0.56.0

Open the chart page →

431
prometheus-node-exporterprometheus-worawutchan1.12.01 of 1See more

prometheus-node-exporter prometheus-worawutchan 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37
0.56.0

Open the chart page →

2,189
github-exporterpromhippieVerified publisher20.0.01 of 1See more

github-exporter promhippie 20.0.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/promhippie/github-exporter:19.0.0d3f23225fde9
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

165
hetzner-exporterpromhippieVerified publisher2.15.11 of 1See more

hetzner-exporter promhippie 2.15.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/promhippie/hetzner-exporter:2.15.1fef37ffbd2b6
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

165
jenkins-exporterpromhippieVerified publisher2.14.11 of 1See more

jenkins-exporter promhippie 2.14.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/promhippie/jenkins-exporter:2.14.1b85f303da376
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

165
prometheus-hcloud-sdpromhippieVerified publisher3.27.11 of 1See more

prometheus-hcloud-sd promhippie 3.27.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/promhippie/prometheus-hcloud-sd:2.27.17353de739311
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

165
prometheus-hetzner-sdpromhippieVerified publisher3.19.01 of 1See more

prometheus-hetzner-sd promhippie 3.19.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/promhippie/prometheus-hetzner-sd:2.19.085db9f61eba1
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

165
prometheus-scw-sdpromhippieVerified publisher2.18.11 of 1See more

prometheus-scw-sd promhippie 2.18.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/promhippie/prometheus-scw-sd:2.18.1ad53a2942e01
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

165
prometheus-vcd-sdpromhippieVerified publisher3.12.11 of 1See more

prometheus-vcd-sd promhippie 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/promhippie/prometheus-vcd-sd:2.12.175b05355d439
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

165
scw-exporterpromhippieVerified publisher3.15.11 of 1See more

scw-exporter promhippie 3.15.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/promhippie/scw-exporter:2.15.11952125f8423
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

165
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.56.0

Open the chart page →

8,736
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.56.0

Open the chart page →

7,521
kspanpuckpuck0.2.41 of 1See more

kspan puckpuck 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/honeycombio/kspan/kspan:0.2c966a4f8a4b7
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0

Open the chart page →

1,688
powerdnspuckpuck2.0.02 of 4See more

powerdns puckpuck 2.0.0

2 of the 4 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
golang.org/x/crypto@v0.17.0
0.56.0
pschiffe/pdns-pgsql:5.0a227d41bc665
golang.org/x/crypto@v0.17.0
0.56.0

Open the chart page →

4,665
pulumi-esc-csi-providerpulumi-esc-csi-provider0.1.61 of 1See more

pulumi-esc-csi-provider pulumi-esc-csi-provider 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/pulumi/pulumi-esc-csi-provider:0.1.13fb058e93502
golang.org/x/crypto@v0.31.0
0.56.0

Open the chart page →

823
game-serverpvillaverdeVerified publisher1.0.61 of 1See more

game-server pvillaverde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latest46919d151d39
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

4,216
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
sarwansharma/minio:v359d1da9385d1
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.56.0

Open the chart page →

6,706
loki-stackpyalive-cdmswebappVerified publisher2.6.54 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

4 of the 4 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
grafana/grafana:latestac461fb352ab
golang.org/x/crypto@v0.52.0
0.56.0
grafana/loki:2.5.0f9ef133793af
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.56.0
grafana/promtail:2.4.2626900031c4e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.56.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

6,439
node-exporterpyalive-cdmswebappVerified publisher0.1.01 of 1See more

node-exporter pyalive-cdmswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:latest1b4e4438faca
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

78
unifiqaoruVerified publisher1.1.41 of 2See more

unifi qaoru 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
library/mongo:7.0-jammy84c4a18b60a0
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

3,407
qualys-scannerqualys-helm-chartVerified publisher2.1.01 of 1See more

qualys-scanner qualys-helm-chart 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
qualys/qscanner:5.1.0-59ff255352422
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

259
cf-operatorquarks2.3.0+0.g27a91cdf2 of 2See more

cf-operator quarks 2.3.0+0.g27a91cdf

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.56.0
cfcontainerization/quarks-job:v0.0.0-0.g70ae34b58fb1c173a46
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.56.0

Open the chart page →

11,956
quarksquarks7.0.1+0.g5396b114 of 5See more

quarks quarks 7.0.1+0.g5396b11

4 of the 5 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-job:v1.0.213760eee87f839
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
ghcr.io/cloudfoundry-incubator/quarks-operator:v7.0.1-0.g5396b116a1432b0d503
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1308-g6a8b2220e24a9e0a21b6
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0

Open the chart page →

18,206
quarks-statefulsetquarks0.0.1304-g4b4f2ac51 of 1See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset:v0.0.1304-g4b4f2ac5c7c70b527255
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0

Open the chart page →

4,012
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
grafana/loki:3.3.28af2de1abbdd
golang.org/x/crypto@v0.31.0
0.56.0

Open the chart page →

4,548
apisixquench-apisixVerified publisher0.0.41 of 2See more

apisix quench-apisix 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/etcddigest-pinned05765ee83074
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

100
coolifyquench-coolifyVerified publisher0.0.201 of 4See more

coolify quench-coolify 0.0.20

1 of the 4 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

491
coolify-realtimequench-coolify-realtimeVerified publisher0.0.71 of 1See more

coolify-realtime quench-coolify-realtime 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/coolify-realtimedigest-pinnedf128e512c9c0
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

344
dexquench-dexVerified publisher0.0.111 of 1See more

dex quench-dex 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/dexdigest-pinned8b41a7c5f1bf
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

102
grafanaquench-grafanaVerified publisher0.0.121 of 1See more

grafana quench-grafana 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

177
harbor-observabilityquench-harbor-observabilityVerified publisher0.0.102 of 2See more

harbor-observability quench-harbor-observability 0.0.10

2 of the 2 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
golang.org/x/crypto@v0.54.0
0.56.0
ghcr.io/quenchworks/images/prometheusdigest-pinnede9037c190bc1
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

281
identity-stackquench-identity-stackVerified publisher0.0.131 of 3See more

identity-stack quench-identity-stack 0.0.13

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/oauth2-proxydigest-pinned6c479b032dcd
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

292
lgtm-stackquench-lgtm-stackVerified publisher0.0.212 of 9See more

lgtm-stack quench-lgtm-stack 0.0.21

2 of the 9 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
golang.org/x/crypto@v0.54.0
0.56.0
ghcr.io/quenchworks/images/tempodigest-pinned9e889ec33f96
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

518
logging-stackquench-logging-stackVerified publisher0.0.131 of 3See more

logging-stack quench-logging-stack 0.0.13

1 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

251
observability-stackquench-observability-stackVerified publisher0.0.162 of 5See more

observability-stack quench-observability-stack 0.0.16

2 of the 5 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
golang.org/x/crypto@v0.54.0
0.56.0
ghcr.io/quenchworks/images/prometheusdigest-pinnede9037c190bc1
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

339
tracing-stackquench-tracing-stackVerified publisher0.0.93 of 3See more

tracing-stack quench-tracing-stack 0.0.9

3 of the 3 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/grafanadigest-pinned3ccc56791c8a
golang.org/x/crypto@v0.54.0
0.56.0
ghcr.io/quenchworks/images/otel-collectordigest-pinned695e7fd14483
golang.org/x/crypto@v0.55.0
0.56.0
ghcr.io/quenchworks/images/tempodigest-pinned9e889ec33f96
golang.org/x/crypto@v0.55.0
0.56.0

Open the chart page →

537
cloudnative-pgradar-baseVerified publisher0.23.21 of 1See more

cloudnative-pg radar-base 0.23.2

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
golang.org/x/crypto@v0.35.0
0.56.0

Open the chart page →

856
headlampradar-baseVerified publisher1.0.01 of 1See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
golang.org/x/crypto@v0.52.0
0.56.0

Open the chart page →

657
hydraradar-baseVerified publisher0.48.01 of 1See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
golang.org/x/crypto@v0.17.0
0.56.0

Open the chart page →

1,542
kratosradar-baseVerified publisher0.43.11 of 1See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
oryd/kratos:v1.1.08f15006a080d
golang.org/x/crypto@v0.18.0
0.56.0

Open the chart page →

1,793
kubecostradar-baseVerified publisher1.0.03 of 7See more

kubecost radar-base 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
golang.org/x/crypto@v0.27.0
0.56.0
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
golang.org/x/crypto@v0.32.0
0.56.0
quay.io/prometheus/prometheus:v3.2.05888c188cf09
golang.org/x/crypto@v0.32.0
0.56.0

Open the chart page →

9,636
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-56855.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
golang.org/x/crypto@v0.35.0
0.56.0

Open the chart page →

1,839

Container images carrying it

3,454 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
golang.org/x/crypto@v0.37.0
0.56.0
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
golang.org/x/crypto@v0.36.0
0.56.0
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
golang.org/x/crypto@v0.53.0
0.56.0
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.56.0
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.