CVE-2026-56862

High

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4,620; of 17,832 indexed, latest versions
Container images: 5,329; deployed by those charts
Fix available: 1 of 2; affected packages

Limit handshake messages we are willing to accept post-handshake in crypto/tls

Carried by container images the latest versions of 4,620 of 17,832 indexed charts deploy, on 5,329 images.

Affected package	Affected versions	Fixed in	Images
golang-1.19deb	1.19.8-2	no fix listed	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+193 more	1.25.13	5,329

OSV records: DEBIAN-CVE-2026-56862 GO-2026-6090
Also known as: BIT-golang-2026-56862

Charts affected

4,620 by stars

Chart

Latest

Affected images

Radar Score

eigendap2p-avs

0.1.1

2 of 3 See more

eigenda p2p-avs 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
ghcr.io/layr-labs/eigenda/opr-node :0.8.4	6650119a385f	stdlib@go1.21.1	1.25.13
ghcr.io/layr-labs/eigenda/opr-nodeplugin :0.8.4	e459ad3ae758	stdlib@go1.21.1	1.25.13

Open the chart page →

2,338

predicatep2p-avs

0.1.4

1 of 1 See more

predicate p2p-avs 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
ghcr.io/predicatelabs/operator :v1.0.5	b62113fe1b27	stdlib@go1.23.5	1.25.13

Open the chart page →

893

p4p4

0.1.0

3 of 7 See more

p4 p4 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	stdlib@go1.18.10	1.25.13
library/mongo :5.0-focal	5e15a3f014ed	stdlib@go1.25.9	1.25.13
library/mysql :8	0744ee5ef89c	stdlib@go1.24.6	1.25.13

Open the chart page →

28,008

myappp4-helm

0.1.0

1 of 6 See more

19,773

pacmanpacman-mh

0.1.28

1 of 2 See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mongo :7.0.28-jammy	88785f6f665a	stdlib@go1.24.0	1.25.13

Open the chart page →

3,649

pagespages

1.0.0

1 of 3 See more

20,350

pagespages10

1.0.0

1 of 3 See more

20,350

pagespages111

1.0.0

1 of 3 See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages2

1.0.0

1 of 3 See more

20,350

pagespages-alexchmielu

1.0.0

1 of 3 See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-alps

1.0.0

1 of 3 See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-alstom

1.0.0

1 of 3 See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-ambala

1.0.0

1 of 3 See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-andromeda

1.0.0

1 of 3 See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespagesbadami

1.0.0

1 of 3 See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-blackburn

1.0.0

1 of 3 See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-botes

1.0.0

1 of 3 See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-brian

1.0.0

1 of 3 See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-buckll

1.0.0

1 of 3 See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-camden

1.0.0

1 of 3 See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-camden771

1.0.0

1 of 3 See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-diarmuidkeane

1.0.0

1 of 3 See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-draco

1.0.0

1 of 3 See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-ellora

1.0.0

1 of 3 See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-finchley

1.0.0

1 of 3 See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-fornax

1.0.0

1 of 3 See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-harsh

1.0.0

1 of 3 See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespagesk

1.0.0

1 of 3 See more

20,350

pagespages-microservice-ashim

1.0.0

1 of 3 See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-mihai

1.0.0

1 of 3 See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-nivesh

1.0.0

1 of 3 See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespagessandeepgudu

1.0.0

1 of 3 See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-shubhanker

1.0.0

1 of 3 See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-ssharma0909

1.0.0

1 of 3 See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-sucharitha

1.0.0

1 of 3 See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-sudhir

1.0.0

1 of 3 See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-sushi

1.0.0

1 of 3 See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-vasanth5814

1.0.0

1 of 3 See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

pagespages-vjp

1.0.0

1 of 3 See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.25.13

Open the chart page →

20,350

alistpanghuli

0.1.5

1 of 2 See more

alist panghuli 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
xhofe/alist :v3.24.0	33f15a31be6c	stdlib@go1.20.5	1.25.13

Open the chart page →

1,990

paperclippaperclip-helm

0.1.0

1 of 3 See more

paperclip paperclip-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	18cfe3ef5e68	stdlib@go1.24.6	1.25.13

Open the chart page →

494

paperclip-operatorpaperclip-operator

0.19.1

1 of 1 See more

paperclip-operator paperclip-operator 0.19.1

1 of the 1 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
ghcr.io/paperclipinc/paperclip-operator :v0.19.1	0984b890eb38	stdlib@go1.25.0	1.25.13

Open the chart page →

352

Parpar

0.1.0

1 of 1 See more

Par par 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
ghcr.io/jmcgrath207/par :v0.1.0	9977511cb142	stdlib@go1.19.10	1.25.13

Open the chart page →

890

parcaparca

4.19.0

2 of 2 See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	stdlib@go1.21.1	1.25.13
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	stdlib@go1.21.4	1.25.13

Open the chart page →

3,385

parcaparca-chart

0.1.0

1 of 1 See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.20.0	0d1df8f436f7	stdlib@go1.21.1	1.25.13

Open the chart page →

1,995

parcaparca-rr

0.1.0

2 of 2 See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
ghcr.io/parca-dev/parca :v0.24.2	3776500fde82	stdlib@go1.25.1	1.25.13
ghcr.io/parca-dev/parca-agent :v0.42.0	adc0eeb4dd05	stdlib@go1.24.7	1.25.13

Open the chart page →

2,405

parcial-1parcial-1-chart

1.0.0

2 of 5 See more

parcial-1 parcial-1-chart 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.13.1	37e489b22ac7	stdlib@go1.24.6	1.25.13
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.1	e63459ec5965	stdlib@go1.24.6	1.25.13

Open the chart page →

3,883

istio-operatorparticuleio

1.7.0

1 of 1 See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
gcr.io/istio-testing/operator :latest	8d4576f7b98f	stdlib@go1.22.5	1.25.13

Open the chart page →

4,219

scaleway-webhookparticuleio

0.0.1

1 of 1 See more

scaleway-webhook particuleio 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
scaleway/cert-manager-webhook-scaleway :v0.0.1	dcc14608d000	stdlib@go1.15.2	1.25.13

Open the chart page →

2,355

cloudflaredpascaliske

3.0.0

1 of 1 See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-56862.

Container image	Digest	Package	Fixed in
ghcr.io/crazy-max/cloudflared :2025.9.1	9b4e856d18f6	stdlib@go1.24.7	1.25.13

Open the chart page →

2,071

Container images carrying it

5,329 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	stdlib@go1.25.0	1.25.13	1
quay.io/hpestorage/csi-driver :v3.2.0	ef7f4e1544fa	stdlib@go1.25.10	1.25.13	1
quay.io/hpestorage/csi-extensions :v1.2.11	89146672a7ac	stdlib@go1.26.3	1.25.13	1
quay.io/hpestorage/volume-group-provisioner :v1.0.10	7bf9d8f16a5d	stdlib@go1.26.3	1.25.13	1
quay.io/hpestorage/volume-group-snapshotter :v1.0.10	caeaaffe7e2b	stdlib@go1.26.3	1.25.13	1
quay.io/hpestorage/volume-mutator :v1.3.10	9e98b2e697bd	stdlib@go1.26.3	1.25.13	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	stdlib@go1.17.5	1.25.13	1
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	stdlib@go1.16.6	1.25.13	1
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	stdlib@go1.16.4	1.25.13	1
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	stdlib@go1.16.4	1.25.13	1
quay.io/influxdb/telegraf-operator :v1.3.11	eec10ef37cc3	stdlib@go1.18.10	1.25.13	1
quay.io/isindir/sops-secrets-operator :0.21.2	7bba7083dfa0	stdlib@go1.26.5	1.25.13	1
quay.io/jcluppnow/vpa-manager :0.6.4	e459d2fba277	stdlib@go1.22.7	1.25.13	1
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	stdlib@go1.15.6	1.25.13	1
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	stdlib@go1.23.2	1.25.13	1
quay.io/jetstack/cert-manager-cainjector :v1.14.5	4ffda7facb4d	stdlib@go1.21.9	1.25.13	1
quay.io/jetstack/cert-manager-cainjector :v1.18.2	af59e01ad975	stdlib@go1.24.4	1.25.13	1
quay.io/jetstack/cert-manager-cainjector :v1.10.1	b5657161d2c2	stdlib@go1.19.3	1.25.13	1
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	stdlib@go1.17.11	1.25.13	1
quay.io/jetstack/cert-manager-cainjector :v1.21.1	ccf6b919ec05	stdlib@go1.26.5	1.25.13	1
quay.io/jetstack/cert-manager-cainjector :v1.12.0	e0a5b06b231c	stdlib@go1.20.4	1.25.13	1
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	stdlib@go1.17.8	1.25.13	1
quay.io/jetstack/cert-manager-cainjector :v1.19.3	eb1df56668b6	stdlib@go1.25.6	1.25.13	1
quay.io/jetstack/cert-manager-controller :v1.10.1	1143471c90db	stdlib@go1.19.3	1.25.13	1
quay.io/jetstack/cert-manager-controller :v1.21.1	416a2d76870d	stdlib@go1.26.5	1.25.13	1
quay.io/jetstack/cert-manager-controller :v1.12.0	4a9d0264055b	stdlib@go1.20.4	1.25.13	1
quay.io/jetstack/cert-manager-controller :v1.18.2	81316365dc0b	stdlib@go1.24.4	1.25.13	1
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	stdlib@go1.21.9	1.25.13	1
quay.io/jetstack/cert-manager-controller :v1.19.3	a07125af5e83	stdlib@go1.25.6	1.25.13	1
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	stdlib@go1.17.11	1.25.13	1
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	stdlib@go1.23.2	1.25.13	1
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	stdlib@go1.17.8	1.25.13	1
quay.io/jetstack/cert-manager-csi-driver :v0.16.0	9d13db6dc80e	stdlib@go1.26.5	1.25.13	1
quay.io/jetstack/cert-manager-csi-driver-spiffe :v0.15.0	1755a3802efd	stdlib@go1.26.5	1.25.13	1
quay.io/jetstack/cert-manager-csi-driver-spiffe-approver :v0.15.0	5f7a9bbb95fb	stdlib@go1.26.5	1.25.13	1
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	stdlib@go1.20.10	1.25.13	1
quay.io/jetstack/cert-manager-ctl :v1.8.0	595c548dee6f	stdlib@go1.17.8	1.25.13	1
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	stdlib@go1.17.11	1.25.13	1
quay.io/jetstack/cert-manager-ctl :v1.12.0	8d54fe9d0c0d	stdlib@go1.20.4	1.25.13	1
quay.io/jetstack/cert-manager-startupapicheck :v1.14.5	0f5b104bdd1b	stdlib@go1.21.9	1.25.13	1
quay.io/jetstack/cert-manager-startupapicheck :v1.18.2	1075e0974151	stdlib@go1.24.4	1.25.13	1
quay.io/jetstack/cert-manager-startupapicheck :v1.16.1	b4a5e42f6dbf	stdlib@go1.23.2	1.25.13	1
quay.io/jetstack/cert-manager-startupapicheck :v1.21.1	d8ab6416e6e7	stdlib@go1.26.5	1.25.13	1
quay.io/jetstack/cert-manager-startupapicheck :v1.19.3	e51a06251338	stdlib@go1.25.6	1.25.13	1
quay.io/jetstack/cert-manager-webhook :v1.19.3	2625754083d5	stdlib@go1.25.6	1.25.13	1
quay.io/jetstack/cert-manager-webhook :v1.10.1	64121721c665	stdlib@go1.19.3	1.25.13	1
quay.io/jetstack/cert-manager-webhook :v1.16.1	6edf44244b2a	stdlib@go1.23.2	1.25.13	1
quay.io/jetstack/cert-manager-webhook :v1.18.2	9431f0d8b510	stdlib@go1.24.4	1.25.13	1
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	stdlib@go1.17.11	1.25.13	1
quay.io/jetstack/cert-manager-webhook :v1.21.1	d8b3961b51c8	stdlib@go1.26.5	1.25.13	1