StackRadar

CVE-2026-78662

Unscored

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,108
of 17,813 indexed, latest versions
Container images
3,442
deployed by those charts
Fix available
1 of 1
affected package

Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

Carried by container images the latest versions of 3,108 of 17,813 indexed charts deploy, on 3,442 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+158 more0.56.03,442
OSV records
GO-2026-6354

Charts affected

3,108 by stars
ChartLatestAffected imagesRadar Score
ygdrassil-monitoringygdrassilVerified publisher0.4.07 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

7 of the 10 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
golang.org/x/crypto@v0.32.0
0.56.0
prom/alertmanager:v0.28.0d5155cfac40a
golang.org/x/crypto@v0.31.0
0.56.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
golang.org/x/crypto@v0.31.0
0.56.0
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/crypto@v0.21.0
0.56.0
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
golang.org/x/crypto@v0.31.0
0.56.0
quay.io/prometheus/pushgateway:v1.11.099392035ae99
golang.org/x/crypto@v0.32.0
0.56.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/crypto@v0.28.0
0.56.0

Open the chart page →

9,526
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
golang.org/x/crypto@v0.22.0
0.56.0

Open the chart page →

1,610
matrixdb-operatorymatrixOfficialVerified publisher0.13.01 of 2See more

matrixdb-operator ymatrix 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
matrixdb/kubebuilder_kube-rbac-proxy:v0.12.0ed3c7e6291e8
golang.org/x/crypto@v0.0.0-20211115234514-b4de73f9ece8
0.56.0

Open the chart page →

1,966
rawfile-csiymatrixVerified publisher0.2.12 of 4See more

rawfile-csi ymatrix 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
matrixdb/custom-external-provisioner:4622a07d7-202204247e9ffe249a51
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.56.0
matrixdb/rawfile-csi:v0.2.195b2e38e913d
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.56.0

Open the chart page →

8,002
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0

Open the chart page →

3,025
prometheus-monitoring-stackyotron-helm-charts1.2.03 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

3 of the 3 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
golang.org/x/crypto@v0.52.0
0.56.0
quay.io/prometheus/alertmanager:latest690c7b525f43
golang.org/x/crypto@v0.54.0
0.56.0
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
0.56.0

Open the chart page →

936
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.56.0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.56.0

Open the chart page →

5,077
zahori-moonzahoriVerified publisher1.0.11 of 3See more

zahori-moon zahori 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-78662.

Container imageDigestPackageFixed in
quay.io/aerokube/moon-ui:2.0.589990b146824
golang.org/x/crypto@v0.10.0
0.56.0

Open the chart page →

2,908

Container images carrying it

3,442 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
natsio/prometheus-nats-exporter:0.16.054b0d7ff058e
golang.org/x/crypto@v0.27.0
0.56.0
1
natsio/prometheus-nats-exporter:0.10.1bce728062c4f
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.56.0
1
ncabatoff/process-exporter6f0549dc24e9
golang.org/x/crypto@v0.31.0
0.56.0
1
neosmemo/memos:0.293e1253477066
golang.org/x/crypto@v0.50.0
0.56.0
1
neosmemo/memos:0.26.23eefcc231141
golang.org/x/crypto@v0.47.0
0.56.0
1
neosmemo/memos:0.24c6defc2dfb98
golang.org/x/crypto@v0.38.0
0.56.0
1
neosu/kubebadges:v0.0.5256530d8e5c6
golang.org/x/crypto@v0.14.0
0.56.0
1
nerzhul/mc-arm64:2020.10.034215df511f31
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.56.0
1
netapp/controller:25.11.0-bxp-preview06f6c9a0653f
golang.org/x/crypto@v0.37.0
0.56.0
1
netapp/controller:26.08.0-console09c6cc6b5f71
golang.org/x/crypto@v0.54.0
0.56.0
1
netapp/controller:26.06.08235a77cfc92
golang.org/x/crypto@v0.52.0
0.56.0
1
netapp/trident-operator:21.10.049cfe552d9c2
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.56.0
1
netapp/trident-operator:26.06.15e8ba78f4ab1
golang.org/x/crypto@v0.55.0
0.56.0
1
netbirdio/management:0.45.10c9994b393ea
golang.org/x/crypto@v0.37.0
0.56.0
1
netbirdio/management:0.60.252682e5f48f9
golang.org/x/crypto@v0.41.0
0.56.0
1
netbirdio/management:0.46.0b0adc4ad4ec6
golang.org/x/crypto@v0.37.0
0.56.0
1
netbirdio/netbird-server:0.78.13086534361a1
golang.org/x/crypto@v0.55.0
0.56.0
1
netbirdio/netbird-server:0.78.2ac6317722f6f
golang.org/x/crypto@v0.55.0
0.56.0
1
netbirdio/relay:0.45.1872e3add0e1e
golang.org/x/crypto@v0.37.0
0.56.0
1
netbirdio/relay:0.60.2a10762533793
golang.org/x/crypto@v0.41.0
0.56.0
1
netbirdio/relay:0.46.0d32f82514a24
golang.org/x/crypto@v0.37.0
0.56.0
1
netbirdio/reverse-proxy:0.72.43104d5ca3a76
golang.org/x/crypto@v0.50.0
0.56.0
1
netbirdio/signal:0.45.146ce5a45538f
golang.org/x/crypto@v0.37.0
0.56.0
1
netbirdio/signal:0.60.267176bcbf6ab
golang.org/x/crypto@v0.41.0
0.56.0
1
netbirdio/signal:0.46.0e8f392611152
golang.org/x/crypto@v0.37.0
0.56.0
1
netdata/netdata:v2.11.121970e176031
golang.org/x/crypto@v0.54.0
0.56.0
1
netrisai/controller-telescope:4.6.0.00414d82948a8b2
golang.org/x/crypto@v0.47.0
0.56.0
1
netrisai/netris-operator:v4.0.244f60aa0d898
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.56.0
1
neuvector/controller:5.6.2824e29cf32c5
golang.org/x/crypto@v0.55.0
0.56.0
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
golang.org/x/crypto@v0.40.0
0.56.0
1
newrelic/newrelic-agent-control-cli:1.24.047520b65d6b2
golang.org/x/crypto@v0.54.0
0.56.0
1
nginx/nginx-ingress:1.11.1eb5b4fd73325
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.56.0
1
nginx/nginx-prometheus-exporter:1.5.385666e7fde7e
golang.org/x/crypto@v0.54.0
0.56.0
1
ngosang/restic-exporter:2.1.2a8f9cfa30162
golang.org/x/crypto@v0.52.0
0.56.0
1
nineinfra/nineinfra:v0.7.0d4aad414eccd
golang.org/x/crypto@v0.14.0
0.56.0
1
nocodb/nocodb:0.258.06779a4ddedf2
golang.org/x/crypto@v0.17.0
0.56.0
1
nocodb/nocodb:0.100.2b0b91ec2a2dd
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.56.0
1
nocodb/nocodb:0.84.15f9b799933aa8
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.56.0
1
noooste/garage-ui:v0.12.10b68a9237da6
golang.org/x/crypto@v0.52.0
0.56.0
1
novosga/novosga:latest34b9acbe6e51
golang.org/x/crypto@v0.50.0
0.56.0
1
ntakashi/gitana:1.4.04171ec641120
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.56.0
1
oamdev/cluster-gateway:v1.9.0-alpha.25591e29d66a2
golang.org/x/crypto@v0.1.0
0.56.0
1
oamdev/cluster-gateway:v1.4.0dc97164c4c1f
golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e
0.56.0
1
oamdev/terraform-controller:v0.8.070447f4d360a
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.56.0
1
oamdev/vector-controller:v0.2.39dd8be44ffc9
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.56.0
1
oamdev/vela-core:v1.11.095fa412c934e
golang.org/x/crypto@v0.40.0
0.56.0
1
oamdev/vela-prism:v1.6.06db6a937647d
golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e
0.56.0
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
golang.org/x/crypto@v0.42.0
0.56.0
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
golang.org/x/crypto@v0.6.0
0.56.0
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
golang.org/x/crypto@v0.36.0
0.56.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.