StackRadar

CVE-2026-78662

Unscored

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,108
of 17,813 indexed, latest versions
Container images
3,442
deployed by those charts
Fix available
1 of 1
affected package

Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Carried by container images the latest versions of 3,108 of 17,813 indexed charts deploy, on 3,442 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+158 more0.56.03,442
OSV records
GO-2026-6354

Charts affected

3,108 by stars
ChartLatestAffected imagesRadar Score
ygdrassil-monitoringygdrassilVerified publisher0.4.07 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

7 of the 10 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
golang.org/x/crypto@v0.32.0
0.56.0
prom/alertmanager:v0.28.0d5155cfac40a
golang.org/x/crypto@v0.31.0
0.56.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
golang.org/x/crypto@v0.31.0
0.56.0
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/crypto@v0.21.0
0.56.0
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
golang.org/x/crypto@v0.31.0
0.56.0
quay.io/prometheus/pushgateway:v1.11.099392035ae99
golang.org/x/crypto@v0.32.0
0.56.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/crypto@v0.28.0
0.56.0

Open the chart page →

9,526
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
golang.org/x/crypto@v0.22.0
0.56.0

Open the chart page →

1,610
matrixdb-operatorymatrixOfficialVerified publisher0.13.01 of 2See more

matrixdb-operator ymatrix 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
matrixdb/kubebuilder_kube-rbac-proxy:v0.12.0ed3c7e6291e8
golang.org/x/crypto@v0.0.0-20211115234514-b4de73f9ece8
0.56.0

Open the chart page →

1,966
rawfile-csiymatrixVerified publisher0.2.12 of 4See more

rawfile-csi ymatrix 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
matrixdb/custom-external-provisioner:4622a07d7-202204247e9ffe249a51
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.56.0
matrixdb/rawfile-csi:v0.2.195b2e38e913d
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.56.0

Open the chart page →

8,002
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0

Open the chart page →

3,025
prometheus-monitoring-stackyotron-helm-charts1.2.03 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

3 of the 3 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
golang.org/x/crypto@v0.52.0
0.56.0
quay.io/prometheus/alertmanager:latest690c7b525f43
golang.org/x/crypto@v0.54.0
0.56.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

936
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.56.0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.56.0

Open the chart page →

5,077
zahori-moonzahoriVerified publisher1.0.11 of 3See more

zahori-moon zahori 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
quay.io/aerokube/moon-ui:2.0.589990b146824
golang.org/x/crypto@v0.10.0
0.56.0

Open the chart page →

2,908

Container images carrying it

3,442 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
aktosecurity/mirror-api-logging:k8s_agentc1313b1ff2ed
golang.org/x/crypto@v0.52.0
0.56.0
1
aktosecurity/mirror-api-logging:k8s_ebpffcf8be10bead
golang.org/x/crypto@v0.36.0
0.56.0
1
alex6021710/ai-scale-auth:latest6c7a47e470c3
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.56.0
1
alex6021710/ai-scale-doer:latest31e533cf7cd3
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.56.0
1
alex6021710/ai-scale-migrator:latest744b8a924f35
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.56.0
1
alex6021710/ai-scale-provider:latest5837d9b30cc7
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
0.56.0
1
alex6021710/ai-scale-saver:latestf73e8d60fd03
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.56.0
1
alireza7/s-ui:1.5.302aa86983cdb
golang.org/x/crypto@v0.51.0
0.56.0
1
almorgv/gitlab-code-review-notifier:0.1.25f2a7d2b44d8
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.56.0
1
alpine/git:2.47.2062a01ad7a0e
golang.org/x/crypto@v0.38.0
0.56.0
1
alpine/git:2.36.366b210a97bc0
golang.org/x/crypto@v0.0.0-20221005025214-4161e89ecf1b
0.56.0
1
alpine/git:v2.49.1c0280cf95723
golang.org/x/crypto@v0.43.0
0.56.0
1
alpine/helm105741fa6621
golang.org/x/crypto@v0.25.0
0.56.0
1
alpine/helm:4.1.0905a068da431
golang.org/x/crypto@v0.46.0
0.56.0
1
alpine/k8s:1.22.600ac10bcb759
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.56.0
1
alpine/k8s:1.27.321b24e6bf801
golang.org/x/crypto@v0.9.0
0.56.0
1
alpine/k8s:1.36.244ef4942e171
golang.org/x/crypto@v0.51.0
0.56.0
1
alpine/k8s:1.31.106dbe6f391eda
golang.org/x/crypto@v0.38.0
0.56.0
1
alpine/k8s:1.31.137a319b15cfc9
golang.org/x/crypto@v0.41.0
0.56.0
1
alpine/k8s:1.32.47e1e7d5b7a96
golang.org/x/crypto@v0.36.0
0.56.0
1
alpine/k8s:1.31.49c4976d47656
golang.org/x/crypto@v0.27.0
0.56.0
1
alpine/k8s:1.18.16a41efe02a041
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
1
alpine/k8s:1.37.0b421c2e9419e
golang.org/x/crypto@v0.54.0
0.56.0
1
alpine/k8s:1.35.6b7a12c5ddf26
golang.org/x/crypto@v0.51.0
0.56.0
1
alpine/k8s:1.30.0bd01dae02676
golang.org/x/crypto@v0.17.0
0.56.0
1
alpine/k8s:1.30.2cd560fce90f7
golang.org/x/crypto@v0.24.0
0.56.0
1
alpine/k8s:1.35.5d870622d0040
golang.org/x/crypto@v0.50.0
0.56.0
1
alpine/k8s:1.28.13e5c0b053fed7
golang.org/x/crypto@v0.24.0
0.56.0
1
alpine/k8s:1.32.3eec354133193
golang.org/x/crypto@v0.32.0
0.56.0
1
alpine/k8s:1.28.2fc059f056ad0
golang.org/x/crypto@v0.13.0
0.56.0
1
altinity/clickhouse-operator:0.16.1db7dde971407
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.56.0
1
altinity/metrics-exporter:0.16.185b4fdbae053
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.56.0
1
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
golang.org/x/crypto@v0.1.0
0.56.0
1
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
golang.org/x/crypto@v0.14.0
0.56.0
1
amazon/cloudwatch-agent:latest-arm649dea6643715a
golang.org/x/crypto@v0.53.0
0.56.0
1
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.56.0
1
ambassador/aes-authsvc:v4.0.0-preview.12a4598b03a6a
golang.org/x/crypto@v0.10.0
0.56.0
1
ambassador/aes-wafsvc:v4.0.0-preview.15fc571509b8c
golang.org/x/crypto@v0.10.0
0.56.0
1
anchore/anchore-engine:v0.10.0bde9eedf639d
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
1
anchore/kai:v0.5.08aad6d0912dd
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.56.0
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
golang.org/x/crypto@v0.36.0
0.56.0
1
andrcuns/smocker:0.18.5b4a8eb20581a
golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70
0.56.0
1
ansgroup/cert-manager-webhook-safedns:v1.0.1cd6b0ef2b309
golang.org/x/crypto@v0.0.0-20191202143827-86a70503ff7e
0.56.0
1
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
1
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
golang.org/x/crypto@v0.55.0
0.56.0
1
antrea/antrea-controller-ubuntu:v2.7.0f1373d39217c
golang.org/x/crypto@v0.55.0
0.56.0
1
antrea/flow-aggregator:v2.7.0065193e7572f
golang.org/x/crypto@v0.55.0
0.56.0
1
apache/answer:2.0.2a0d71b0e30a5
golang.org/x/crypto@v0.53.0
0.56.0
1
apache/camel-k:1.10.43bb13d14f64a
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.56.0
1
apache/camel-k:2.11.0d173e7efe258
golang.org/x/crypto@v0.54.0
0.56.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.