StackRadar

GO-2026-5932

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,154
of 17,790 indexed, latest versions
Container images
3,584
deployed by those charts
Fix available
None
affected package

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

Carried by container images the latest versions of 3,154 of 17,790 indexed charts deploy, on 3,584 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+159 moreno fix listed3,584
OSV records
GO-2026-5932

Charts affected

3,154 by stars
ChartLatestAffected imagesRadar Score
cert-manager-webhook-hetznercert-manager-webhook-hetznerVerified publisher0.2.11 of 1See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
deyaeddin/cert-manager-webhook-hetzner:latest797b0d06210a
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
no fix listed

Open the chart page →

3,080
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
no fix listed
library/traefik:2.5.47d0228d19042
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
no fix listed

Open the chart page →

53,012
openstack-cloud-controller-managercloud-provider-openstack2.36.51 of 1See more

openstack-cloud-controller-manager cloud-provider-openstack 2.36.5

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
golang.org/x/crypto@v0.50.0
no fix listed

Open the chart page →

498
cloudquerycloudquery39.0.41 of 1See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

544
immudbcodenotaryVerified publisher1.9.71 of 1See more

immudb codenotary 1.9.7

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
codenotary/immudb:1.9.77c85d7cc4f22
golang.org/x/crypto@v0.17.0
no fix listed

Open the chart page →

1,247
routercosmo-routerOfficialVerified publisher0.18.01 of 1See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
golang.org/x/crypto@v0.36.0
no fix listed

Open the chart page →

1,669
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
wait4x/wait4x:3.3.14dcd86307de1
golang.org/x/crypto@v0.37.0
no fix listed

Open the chart page →

9,154
daskhubdask2024.1.12 of 9See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
golang.org/x/crypto@v0.14.0
no fix listed
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
golang.org/x/crypto@v0.14.0
no fix listed

Open the chart page →

14,134
seafiledatamateVerified publisher0.6.02 of 6See more

seafile datamate 0.6.0

2 of the 6 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
golang.org/x/crypto@v0.24.0
no fix listed
datamate/seafile-professional:11.0.202dd66b722464
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
no fix listed

Open the chart page →

27,358
drone-runner-dockerdroneVerified publisher0.7.02 of 3See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
golang.org/x/crypto@v0.0.0-20190621222207-cc06ce4a13d4
no fix listed
library/docker:20-dindaf96c680a7e1
golang.org/x/crypto@v0.2.0
no fix listed

Open the chart page →

5,674
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
golang.org/x/crypto@v0.17.0
no fix listed

Open the chart page →

1,980
loadtesterflagger0.39.01 of 1See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

1,760
flannelflannel0.28.91 of 2See more

flannel flannel 0.28.9

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/flannel-io/flannel:v0.28.9708a2c9c1cfb
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

610
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
no fix listed

Open the chart page →

3,282
lndfold0.3.153 of 4See more

lnd fold 0.3.15

3 of the 4 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
golang.org/x/crypto@v0.7.0
no fix listed
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
no fix listed
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
no fix listed

Open the chart page →

8,834
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
jwilder/dockerize:v0.10.0839cd6793d19
golang.org/x/crypto@v0.47.0
no fix listed

Open the chart page →

14,043
gitops-promotergitops-promoterOfficialVerified publisher0.17.02 of 2See more

gitops-promoter gitops-promoter 0.17.0

2 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
golang.org/x/crypto@v0.56.0
no fix listed
quay.io/brancz/kube-rbac-proxy:v0.22.1e8cad21b2f9a
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

2,800
alloy-operatorgrafana0.7.11 of 1See more

alloy-operator grafana 0.7.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.12.14ee4b71cf16a
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

420
grafana-mcpgrafana-communityVerified publisher0.23.21 of 1See more

grafana-mcp grafana-community 0.23.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
grafana/mcp-grafana:1.4.2f87fa67a561f
golang.org/x/crypto@v0.57.0
no fix listed

Open the chart page →

1,009
mongodbgroundhog2k0.8.21 of 1See more

mongodb groundhog2k 0.8.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/mongo:8.3.981a1c8842a09
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

960
haproxy-ingresshaproxy-ingressVerified publisher0.16.11 of 1See more

haproxy-ingress haproxy-ingress 0.16.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
golang.org/x/crypto@v0.46.0
no fix listed

Open the chart page →

794
kerberneteskerbernetesVerified publisher1.1.111 of 1See more

kerbernetes kerbernetes 1.1.11

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/froz42/kerbernetes:v1.1.6d5c074be8366
golang.org/x/crypto@v0.55.0
no fix listed

Open the chart page →

165
permission-managerkfirfer1.0.71 of 1See more

permission-manager kfirfer 1.0.7

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
no fix listed

Open the chart page →

2,266
klusterviewklusterviewVerified publisher0.1.02 of 4See more

klusterview klusterview 0.1.0

2 of the 4 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
golang.org/x/crypto@v0.52.0
no fix listed
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

3,796
gateway-operatorkongOfficialVerified publisher0.6.11 of 1See more

gateway-operator kong 0.6.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
kong/gateway-operator:1.603510967482b
golang.org/x/crypto@v0.37.0
no fix listed

Open the chart page →

842
kong-meshkong-meshVerified publisher2.14.42 of 3See more

kong-mesh kong-mesh 2.14.4

2 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
kong/kuma-cp:2.14.47e4f53630a28
golang.org/x/crypto@v0.55.0
no fix listed
kong/kumactl:2.14.463d11b2d3f60
golang.org/x/crypto@v0.55.0
no fix listed

Open the chart page →

529
kubeflowkubeflow1.6.214 of 45See more

kubeflow kubeflow 1.6.2

14 of the 45 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
no fix listed
istio/proxyv2:1.14.1df69c1a7af7c
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
no fix listed
kubeflow/training-operator:v1-e1434f6ff847e2b6af0
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
no fix listed
kubeflownotebookswg/kfam:v1.6.1f226fb44db57
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
no fix listed
kubeflownotebookswg/notebook-controller:v1.6.185e2e685abd6
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
no fix listed
kubeflownotebookswg/profile-controller:v1.6.19f01767a460f
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
no fix listed
kubeflownotebookswg/tensorboard-controller:v1.6.182ffdd2da285
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
no fix listed
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
no fix listed
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
no fix listed
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
no fix listed
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
no fix listed
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
no fix listed
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
no fix listed
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
no fix listed

Open the chart page →

97,040
testkubekubeshop2.13.24 of 5See more

testkube kubeshop 2.13.2

4 of the 5 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
golang.org/x/crypto@v0.47.0
no fix listed
kubeshop/testkube-api-server:2.13.244166c28422f
golang.org/x/crypto@v0.55.0
no fix listed
kubeshop/testkube-minio:2025.10d8e1af6aca99
golang.org/x/crypto@v0.46.0
no fix listed
library/nats:2.14.5-alpined4ac35882ac6
golang.org/x/crypto@v0.55.0
no fix listed

Open the chart page →

5,012
openelbkubesphere-stable0.5.01 of 2See more

openelb kubesphere-stable 0.5.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.5.0b5b665c4672c
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
no fix listed

Open the chart page →

4,329
sbomscannerkubewardenVerified publisher0.12.14 of 5See more

sbomscanner kubewarden 0.12.1

4 of the 5 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/nats:2.14.6-alpinead7a43eb7e33
golang.org/x/crypto@v0.55.0
no fix listed
ghcr.io/kubewarden/sbomscanner/controller:v0.12.1153ccb651e49
golang.org/x/crypto@v0.56.0
no fix listed
ghcr.io/kubewarden/sbomscanner/storage:v0.12.1811ed0383187
golang.org/x/crypto@v0.56.0
no fix listed
ghcr.io/kubewarden/sbomscanner/worker:v0.12.1b4274b7cc473
golang.org/x/crypto@v0.56.0
no fix listed

Open the chart page →

988
venti-stackkuossOfficialVerified publisher0.5.08 of 9See more

venti-stack kuoss 0.5.0

8 of the 9 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/kuoss/eventrouter:v0.4.156226040e1346
golang.org/x/crypto@v0.36.0
no fix listed
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
golang.org/x/crypto@v0.39.0
no fix listed
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
golang.org/x/crypto@v0.41.0
no fix listed
quay.io/prometheus-operator/prometheus-config-reloader:v0.93.1428f088fe6fe
golang.org/x/crypto@v0.54.0
no fix listed
quay.io/prometheus/alertmanager:v0.34.0690c7b525f43
golang.org/x/crypto@v0.54.0
no fix listed
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
golang.org/x/crypto@v0.54.0
no fix listed
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
golang.org/x/crypto@v0.53.0
no fix listed
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
golang.org/x/crypto@v0.52.0
no fix listed

Open the chart page →

3,810
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
golang.org/x/crypto@v0.45.0
no fix listed

Open the chart page →

5,833
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
golang.org/x/crypto@v0.51.0
no fix listed

Open the chart page →

4,050
vclustermainVerified publisher0.17.06 of 10See more

vcluster main 0.17.0

6 of the 10 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
golang.org/x/crypto@v0.4.0
no fix listed
quay.io/kubermatic/operating-system-manager:v1.3.010081473da43
golang.org/x/crypto@v0.8.0
no fix listed
registry.k8s.io/etcd:3.6.4-0e36c08168342
golang.org/x/crypto@v0.36.0
no fix listed
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
no fix listed
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
no fix listed
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
no fix listed

Open the chart page →

11,556
stannatsVerified publisher0.13.01 of 2See more

stan nats 0.13.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:latestc623b608e148
golang.org/x/crypto@v0.55.0
no fix listed

Open the chart page →

165
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
headscale/headscale:0.25.1a7a8ae9616bb
golang.org/x/crypto@v0.32.0
no fix listed

Open the chart page →

7,968
netris-operatornetrisai3.0.21 of 2See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
netrisai/netris-operator:v4.0.244f60aa0d898
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed

Open the chart page →

1,588
geonodeone-acre-fundVerified publisher0.1.161 of 7See more

geonode one-acre-fund 0.1.16

1 of the 7 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
jwilder/dockerize:latestf94fb59fb4f6
golang.org/x/crypto@v0.45.0
no fix listed

Open the chart page →

1,746
open5gsopen5gsVerified publisher2.3.42 of 5See more

open5gs open5gs 2.3.4

2 of the 5 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
bitnami/mongodb:lateste46cffb66274
golang.org/x/crypto@v0.54.0
no fix listed
gradiant/open5gs-dbctl:0.10.3332031245fce
golang.org/x/crypto@v0.32.0
no fix listed

Open the chart page →

9,300
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
golang.org/x/crypto@v0.14.0
no fix listed

Open the chart page →

8,767
prometheus-consul-exporterprometheus-communityVerified publisher1.1.11 of 1See more

prometheus-consul-exporter prometheus-community 1.1.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
prom/consul-exporter:v0.13.04e4cfd809e96
golang.org/x/crypto@v0.28.0
no fix listed

Open the chart page →

782
prometheus-json-exporterprometheus-communityOfficialVerified publisher0.20.11 of 1See more

prometheus-json-exporter prometheus-community 0.20.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/json-exporter:v0.7.03a777171d39a
golang.org/x/crypto@v0.31.0
no fix listed

Open the chart page →

725
prometheus-nginx-exporterprometheus-communityVerified publisher1.23.11 of 1See more

prometheus-nginx-exporter prometheus-community 1.23.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
nginx/nginx-prometheus-exporter:1.5.385666e7fde7e
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

22
prometheus-smartctl-exporterprometheus-communityVerified publisher0.17.11 of 1See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/smartctl-exporter:v0.14.0cfe22c36d7d2
golang.org/x/crypto@v0.33.0
no fix listed

Open the chart page →

1,064
prometheus-statsd-exporterprometheus-communityVerified publisher1.0.01 of 1See more

prometheus-statsd-exporter prometheus-community 1.0.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.28.04e7a1f00b9b2
golang.org/x/crypto@v0.27.0
no fix listed

Open the chart page →

782
proxmox-cloud-controller-managerproxmox-ccm0.2.301 of 1See more

proxmox-cloud-controller-manager proxmox-ccm 0.2.30

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/proxmox-cloud-controller-manager:v0.15.0fbc553921145
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

109
rke2-multusrke2-charts3.7.1-build20210416011 of 2See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed

Open the chart page →

4,519
popeyeself-hosters-by-nightVerified publisher0.6.11 of 1See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
golang.org/x/crypto@v0.32.0
no fix listed

Open the chart page →

1,196
fulciosigstoreVerified publisher2.11.14 of 6See more

fulcio sigstore 2.11.1

4 of the 6 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/sigstore/fulcio:v1.8.8ef72cf56c64b
golang.org/x/crypto@v0.53.0
no fix listed
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned7f59f7c08d1a
golang.org/x/crypto@v0.43.0
no fix listed
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
golang.org/x/crypto@v0.43.0
no fix listed
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
golang.org/x/crypto@v0.43.0
no fix listed

Open the chart page →

3,491
policy-controllersigstoreVerified publisher0.10.81 of 2See more

policy-controller sigstore 0.10.8

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned0bcd60beb93f
golang.org/x/crypto@v0.37.0
no fix listed

Open the chart page →

911

Container images carrying it

3,584 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hashicorp/terraform-k8s:1.1.2b19857bab620
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
no fix listed
1
hashicorp/vault:1.15.40b01ed3924e6
golang.org/x/crypto@v0.15.0
no fix listed
1
hashicorp/vault:latest5520cc26271c
golang.org/x/crypto@v0.55.0
no fix listed
1
hashicorp/vault:2.0.1755355002715
golang.org/x/crypto@v0.51.0
no fix listed
1
hashicorp/vault:1.14.0b2177a8bfe85
golang.org/x/crypto@v0.9.0
no fix listed
1
hashicorp/vault:1.19.0bbb7f98dc67d
golang.org/x/crypto@v0.35.0
no fix listed
1
hashicorp/vault:1.8.4dfc3500beb0e
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
no fix listed
1
hashicorp/vault-k8s:1.6.2103a2d817a74
golang.org/x/crypto@v0.35.0
no fix listed
1
hashicorp/vault-k8s:1.2.14500e988b7ce
golang.org/x/crypto@v0.5.0
no fix listed
1
hashicorp/vault-k8s:0.6.05697b85bc69a
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
no fix listed
1
hashicorp/vault-k8s:1.7.2ae3d307658b7
golang.org/x/crypto@v0.45.0
no fix listed
1
hashicorp/vault-secrets-operator:1.5.1458c842add32
golang.org/x/crypto@v0.54.0
no fix listed
1
hashicorp/waypoint:0.11.397d521a27498
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
no fix listed
1
hauler/hauler:2.1.04671f9bb6c5a
golang.org/x/crypto@v0.55.0
no fix listed
1
hazelcast/hazelcast-platform-operator:5.19.02783cd66846d
golang.org/x/crypto@v0.55.0
no fix listed
1
hbahadorzadeh/cert-manager-webhook-arvan:latestbf9756b3bc47
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed
1
headscale/headscale:0.25.1a7a8ae9616bb
golang.org/x/crypto@v0.32.0
no fix listed
1
headscale/headscale:0.27.1cd37b3001857
golang.org/x/crypto@v0.43.0
no fix listed
1
henrygd/beszel:latestfefb27166f5e
golang.org/x/crypto@v0.56.0
no fix listed
1
henrygd/beszel-agent:latest00c88600e7d1
golang.org/x/crypto@v0.56.0
no fix listed
1
hetzner/cert-manager-webhook-hetzner:v0.9.0b64db89ba4c1
golang.org/x/crypto@v0.55.0
no fix listed
1
hetznercloud/hcloud-cloud-controller-manager:v1.16.08c07e6d7a76c
golang.org/x/crypto@v0.10.0
no fix listed
1
hetznercloud/hcloud-cloud-controller-manager:v1.13.0ed5ee5f83973
golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90
no fix listed
1
hhaluk/mocktail:2.0.3350d19360038
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
no fix listed
1
hhyo/archery:v1.9.11aa41843419e
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed
1
hiversh/antigravity:0.1.45-microvm0e36d98402bc
golang.org/x/crypto@v0.53.0
no fix listed
1
hiversh/browser:0.1.45-microvmb5048c6342ce
golang.org/x/crypto@v0.53.0
no fix listed
1
hiversh/claude:0.1.45-microvm2fbf9f264498
golang.org/x/crypto@v0.53.0
no fix listed
1
hiversh/codex:0.1.45-microvm4f43130f51e5
golang.org/x/crypto@v0.53.0
no fix listed
1
hiversh/controller:0.1.45b0b85f8942c7
golang.org/x/crypto@v0.53.0
no fix listed
1
hiversh/copilot:0.1.45-microvm50c07b84f298
golang.org/x/crypto@v0.53.0
no fix listed
1
hiversh/node:0.1.45-alpine-microvm836a37641941
golang.org/x/crypto@v0.53.0
no fix listed
1
hiversh/openclaw:0.1.45-microvm958b7ebb4eb4
golang.org/x/crypto@v0.53.0
no fix listed
1
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
golang.org/x/crypto@v0.53.0
no fix listed
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272
no fix listed
1
holiman/nodemonitor:latest5cd609761065
golang.org/x/crypto@v0.8.0
no fix listed
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
no fix listed
1
homeassistant/home-assistant:2026.75a531753cea9
golang.org/x/crypto@v0.26.0
no fix listed
1
homeassistant/home-assistant:2023.12.48d000332b09b
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
no fix listed
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
golang.org/x/crypto@v0.14.0
no fix listed
1
hoppscotch/hoppscotch:2026.8.0d50725df661f
golang.org/x/crypto@v0.53.0
no fix listed
1
huacnlee/gobackup:v3.1.1560be93229a5
golang.org/x/crypto@v0.41.0
no fix listed
1
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
no fix listed
1
hyperledger/fabric-ca:1.5.1c7f3422ec1d5
golang.org/x/crypto@v0.0.0-20201117144127-c1f2f97bffc9
no fix listed
1
hyperledger/fabric-ca:1.5.0f270dfeee91d
golang.org/x/crypto@v0.0.0-20201117144127-c1f2f97bffc9
no fix listed
1
hyperledger/fabric-orderer:2.2.137294e05209b
golang.org/x/crypto@v0.0.0-20200221231518-2aa609cf4a9d
no fix listed
1
hyperledger/fabric-peer:2.2.1bf4995c86af6
golang.org/x/crypto@v0.0.0-20200221231518-2aa609cf4a9d
no fix listed
1
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
golang.org/x/crypto@v0.7.0
no fix listed
1
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
golang.org/x/crypto@v0.7.0
no fix listed
1
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.