StackRadar

GO-2026-5932

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,154
of 17,790 indexed, latest versions
Container images
3,584
deployed by those charts
Fix available
None
affected package

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

Carried by container images the latest versions of 3,154 of 17,790 indexed charts deploy, on 3,584 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+159 moreno fix listed3,584
OSV records
GO-2026-5932

Charts affected

3,154 by stars
ChartLatestAffected imagesRadar Score
cert-manager-webhook-hetznercert-manager-webhook-hetznerVerified publisher0.2.11 of 1See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
deyaeddin/cert-manager-webhook-hetzner:latest797b0d06210a
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
no fix listed

Open the chart page →

3,080
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
no fix listed
library/traefik:2.5.47d0228d19042
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
no fix listed

Open the chart page →

53,012
openstack-cloud-controller-managercloud-provider-openstack2.36.51 of 1See more

openstack-cloud-controller-manager cloud-provider-openstack 2.36.5

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
golang.org/x/crypto@v0.50.0
no fix listed

Open the chart page →

498
cloudquerycloudquery39.0.41 of 1See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

544
immudbcodenotaryVerified publisher1.9.71 of 1See more

immudb codenotary 1.9.7

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
codenotary/immudb:1.9.77c85d7cc4f22
golang.org/x/crypto@v0.17.0
no fix listed

Open the chart page →

1,247
routercosmo-routerOfficialVerified publisher0.18.01 of 1See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
golang.org/x/crypto@v0.36.0
no fix listed

Open the chart page →

1,669
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
wait4x/wait4x:3.3.14dcd86307de1
golang.org/x/crypto@v0.37.0
no fix listed

Open the chart page →

9,154
daskhubdask2024.1.12 of 9See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
golang.org/x/crypto@v0.14.0
no fix listed
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
golang.org/x/crypto@v0.14.0
no fix listed

Open the chart page →

14,134
seafiledatamateVerified publisher0.6.02 of 6See more

seafile datamate 0.6.0

2 of the 6 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
golang.org/x/crypto@v0.24.0
no fix listed
datamate/seafile-professional:11.0.202dd66b722464
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
no fix listed

Open the chart page →

27,358
drone-runner-dockerdroneVerified publisher0.7.02 of 3See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
golang.org/x/crypto@v0.0.0-20190621222207-cc06ce4a13d4
no fix listed
library/docker:20-dindaf96c680a7e1
golang.org/x/crypto@v0.2.0
no fix listed

Open the chart page →

5,674
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
golang.org/x/crypto@v0.17.0
no fix listed

Open the chart page →

1,980
loadtesterflagger0.39.01 of 1See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

1,760
flannelflannel0.28.91 of 2See more

flannel flannel 0.28.9

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/flannel-io/flannel:v0.28.9708a2c9c1cfb
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

610
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
no fix listed

Open the chart page →

3,282
lndfold0.3.153 of 4See more

lnd fold 0.3.15

3 of the 4 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
golang.org/x/crypto@v0.7.0
no fix listed
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
no fix listed
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
no fix listed

Open the chart page →

8,834
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
jwilder/dockerize:v0.10.0839cd6793d19
golang.org/x/crypto@v0.47.0
no fix listed

Open the chart page →

14,043
gitops-promotergitops-promoterOfficialVerified publisher0.17.02 of 2See more

gitops-promoter gitops-promoter 0.17.0

2 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.38.19c8a510dc25e
golang.org/x/crypto@v0.56.0
no fix listed
quay.io/brancz/kube-rbac-proxy:v0.22.1e8cad21b2f9a
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

2,800
alloy-operatorgrafana0.7.11 of 1See more

alloy-operator grafana 0.7.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.12.14ee4b71cf16a
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

420
grafana-mcpgrafana-communityVerified publisher0.23.21 of 1See more

grafana-mcp grafana-community 0.23.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
grafana/mcp-grafana:1.4.2f87fa67a561f
golang.org/x/crypto@v0.57.0
no fix listed

Open the chart page →

1,009
mongodbgroundhog2k0.8.21 of 1See more

mongodb groundhog2k 0.8.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/mongo:8.3.981a1c8842a09
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

960
haproxy-ingresshaproxy-ingressVerified publisher0.16.11 of 1See more

haproxy-ingress haproxy-ingress 0.16.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
golang.org/x/crypto@v0.46.0
no fix listed

Open the chart page →

794
kerberneteskerbernetesVerified publisher1.1.111 of 1See more

kerbernetes kerbernetes 1.1.11

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/froz42/kerbernetes:v1.1.6d5c074be8366
golang.org/x/crypto@v0.55.0
no fix listed

Open the chart page →

165
permission-managerkfirfer1.0.71 of 1See more

permission-manager kfirfer 1.0.7

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
no fix listed

Open the chart page →

2,266
klusterviewklusterviewVerified publisher0.1.02 of 4See more

klusterview klusterview 0.1.0

2 of the 4 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
golang.org/x/crypto@v0.52.0
no fix listed
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

3,796
gateway-operatorkongOfficialVerified publisher0.6.11 of 1See more

gateway-operator kong 0.6.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
kong/gateway-operator:1.603510967482b
golang.org/x/crypto@v0.37.0
no fix listed

Open the chart page →

842
kong-meshkong-meshVerified publisher2.14.42 of 3See more

kong-mesh kong-mesh 2.14.4

2 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
kong/kuma-cp:2.14.47e4f53630a28
golang.org/x/crypto@v0.55.0
no fix listed
kong/kumactl:2.14.463d11b2d3f60
golang.org/x/crypto@v0.55.0
no fix listed

Open the chart page →

529
kubeflowkubeflow1.6.214 of 45See more

kubeflow kubeflow 1.6.2

14 of the 45 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
no fix listed
istio/proxyv2:1.14.1df69c1a7af7c
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
no fix listed
kubeflow/training-operator:v1-e1434f6ff847e2b6af0
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
no fix listed
kubeflownotebookswg/kfam:v1.6.1f226fb44db57
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
no fix listed
kubeflownotebookswg/notebook-controller:v1.6.185e2e685abd6
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
no fix listed
kubeflownotebookswg/profile-controller:v1.6.19f01767a460f
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
no fix listed
kubeflownotebookswg/tensorboard-controller:v1.6.182ffdd2da285
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
no fix listed
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
no fix listed
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
no fix listed
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
no fix listed
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
no fix listed
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
no fix listed
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed
no fix listed
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
no fix listed

Open the chart page →

97,040
testkubekubeshop2.13.24 of 5See more

testkube kubeshop 2.13.2

4 of the 5 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
golang.org/x/crypto@v0.47.0
no fix listed
kubeshop/testkube-api-server:2.13.244166c28422f
golang.org/x/crypto@v0.55.0
no fix listed
kubeshop/testkube-minio:2025.10d8e1af6aca99
golang.org/x/crypto@v0.46.0
no fix listed
library/nats:2.14.5-alpined4ac35882ac6
golang.org/x/crypto@v0.55.0
no fix listed

Open the chart page →

5,012
openelbkubesphere-stable0.5.01 of 2See more

openelb kubesphere-stable 0.5.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.5.0b5b665c4672c
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
no fix listed

Open the chart page →

4,329
sbomscannerkubewardenVerified publisher0.12.14 of 5See more

sbomscanner kubewarden 0.12.1

4 of the 5 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/nats:2.14.6-alpinead7a43eb7e33
golang.org/x/crypto@v0.55.0
no fix listed
ghcr.io/kubewarden/sbomscanner/controller:v0.12.1153ccb651e49
golang.org/x/crypto@v0.56.0
no fix listed
ghcr.io/kubewarden/sbomscanner/storage:v0.12.1811ed0383187
golang.org/x/crypto@v0.56.0
no fix listed
ghcr.io/kubewarden/sbomscanner/worker:v0.12.1b4274b7cc473
golang.org/x/crypto@v0.56.0
no fix listed

Open the chart page →

988
venti-stackkuossOfficialVerified publisher0.5.08 of 9See more

venti-stack kuoss 0.5.0

8 of the 9 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/kuoss/eventrouter:v0.4.156226040e1346
golang.org/x/crypto@v0.36.0
no fix listed
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
golang.org/x/crypto@v0.39.0
no fix listed
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
golang.org/x/crypto@v0.41.0
no fix listed
quay.io/prometheus-operator/prometheus-config-reloader:v0.93.1428f088fe6fe
golang.org/x/crypto@v0.54.0
no fix listed
quay.io/prometheus/alertmanager:v0.34.0690c7b525f43
golang.org/x/crypto@v0.54.0
no fix listed
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
golang.org/x/crypto@v0.54.0
no fix listed
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
golang.org/x/crypto@v0.53.0
no fix listed
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
golang.org/x/crypto@v0.52.0
no fix listed

Open the chart page →

3,810
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
golang.org/x/crypto@v0.45.0
no fix listed

Open the chart page →

5,833
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
golang.org/x/crypto@v0.51.0
no fix listed

Open the chart page →

4,050
vclustermainVerified publisher0.17.06 of 10See more

vcluster main 0.17.0

6 of the 10 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
golang.org/x/crypto@v0.4.0
no fix listed
quay.io/kubermatic/operating-system-manager:v1.3.010081473da43
golang.org/x/crypto@v0.8.0
no fix listed
registry.k8s.io/etcd:3.6.4-0e36c08168342
golang.org/x/crypto@v0.36.0
no fix listed
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
no fix listed
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
no fix listed
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
no fix listed

Open the chart page →

11,556
stannatsVerified publisher0.13.01 of 2See more

stan nats 0.13.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:latestc623b608e148
golang.org/x/crypto@v0.55.0
no fix listed

Open the chart page →

165
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
headscale/headscale:0.25.1a7a8ae9616bb
golang.org/x/crypto@v0.32.0
no fix listed

Open the chart page →

7,968
netris-operatornetrisai3.0.21 of 2See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
netrisai/netris-operator:v4.0.244f60aa0d898
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed

Open the chart page →

1,588
geonodeone-acre-fundVerified publisher0.1.161 of 7See more

geonode one-acre-fund 0.1.16

1 of the 7 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
jwilder/dockerize:latestf94fb59fb4f6
golang.org/x/crypto@v0.45.0
no fix listed

Open the chart page →

1,746
open5gsopen5gsVerified publisher2.3.42 of 5See more

open5gs open5gs 2.3.4

2 of the 5 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
bitnami/mongodb:lateste46cffb66274
golang.org/x/crypto@v0.54.0
no fix listed
gradiant/open5gs-dbctl:0.10.3332031245fce
golang.org/x/crypto@v0.32.0
no fix listed

Open the chart page →

9,300
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
golang.org/x/crypto@v0.14.0
no fix listed

Open the chart page →

8,767
prometheus-consul-exporterprometheus-communityVerified publisher1.1.11 of 1See more

prometheus-consul-exporter prometheus-community 1.1.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
prom/consul-exporter:v0.13.04e4cfd809e96
golang.org/x/crypto@v0.28.0
no fix listed

Open the chart page →

782
prometheus-json-exporterprometheus-communityOfficialVerified publisher0.20.11 of 1See more

prometheus-json-exporter prometheus-community 0.20.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/json-exporter:v0.7.03a777171d39a
golang.org/x/crypto@v0.31.0
no fix listed

Open the chart page →

725
prometheus-nginx-exporterprometheus-communityVerified publisher1.23.11 of 1See more

prometheus-nginx-exporter prometheus-community 1.23.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
nginx/nginx-prometheus-exporter:1.5.385666e7fde7e
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

22
prometheus-smartctl-exporterprometheus-communityVerified publisher0.17.11 of 1See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/smartctl-exporter:v0.14.0cfe22c36d7d2
golang.org/x/crypto@v0.33.0
no fix listed

Open the chart page →

1,064
prometheus-statsd-exporterprometheus-communityVerified publisher1.0.01 of 1See more

prometheus-statsd-exporter prometheus-community 1.0.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.28.04e7a1f00b9b2
golang.org/x/crypto@v0.27.0
no fix listed

Open the chart page →

782
proxmox-cloud-controller-managerproxmox-ccm0.2.301 of 1See more

proxmox-cloud-controller-manager proxmox-ccm 0.2.30

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/proxmox-cloud-controller-manager:v0.15.0fbc553921145
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

109
rke2-multusrke2-charts3.7.1-build20210416011 of 2See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed

Open the chart page →

4,519
popeyeself-hosters-by-nightVerified publisher0.6.11 of 1See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
golang.org/x/crypto@v0.32.0
no fix listed

Open the chart page →

1,196
fulciosigstoreVerified publisher2.11.14 of 6See more

fulcio sigstore 2.11.1

4 of the 6 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/sigstore/fulcio:v1.8.8ef72cf56c64b
golang.org/x/crypto@v0.53.0
no fix listed
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned7f59f7c08d1a
golang.org/x/crypto@v0.43.0
no fix listed
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
golang.org/x/crypto@v0.43.0
no fix listed
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
golang.org/x/crypto@v0.43.0
no fix listed

Open the chart page →

3,491
policy-controllersigstoreVerified publisher0.10.81 of 2See more

policy-controller sigstore 0.10.8

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned0bcd60beb93f
golang.org/x/crypto@v0.37.0
no fix listed

Open the chart page →

911

Container images carrying it

3,584 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/operator:1.12.06cfce8a071b9
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
golang.org/x/crypto@v0.9.0
no fix listed
1
istio/pilot:1.10.0294ca55bd1cc
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
no fix listed
1
istio/pilot:1.29.0325156535773
golang.org/x/crypto@v0.46.0
no fix listed
1
istio/pilot:1.23.69c3d6a218181
golang.org/x/crypto@v0.36.0
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
no fix listed
1
istio/pilot:1.17.1ce9d87606701
golang.org/x/crypto@v0.5.0
no fix listed
1
istio/pilot:1.15.2db08d6963975
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
no fix listed
1
istio/pilot:1.10.3e7e110a421c2
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
no fix listed
1
istio/pilot:1.29.1f8b0e412ac4a
golang.org/x/crypto@v0.46.0
no fix listed
1
istio/proxyv2:1.9.687a9db561d2e
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
no fix listed
1
istio/proxyv2:1.10.088c6c693e67a
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
no fix listed
1
itzg/mc-router:1.16.1bb552b59fb53
golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
golang.org/x/crypto@v0.55.0
no fix listed
1
itzmanish/ecr-token-renew:latest02154d1c05b5
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
golang.org/x/crypto@v0.41.0
no fix listed
1
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
no fix listed
1
jaegertracing/all-in-one:1.2942822be7888b
golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63
no fix listed
1
jaegertracing/all-in-one:1.53.060e65bfffe1f
golang.org/x/crypto@v0.17.0
no fix listed
1
jaegertracing/all-in-one:1.42.07d32a4eddec7
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
no fix listed
1
jaegertracing/all-in-one:1.22.0ca6b73330616
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed
1
jaegertracing/all-in-one:1.18db45c07f2e1b
golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6
no fix listed
1
jaegertracing/all-in-one:1.55f6b5d09073f1
golang.org/x/crypto@v0.19.0
no fix listed
1
jaegertracing/jaeger:2.20.046a886260e04
golang.org/x/crypto@v0.53.0
no fix listed
1
jaegertracing/jaeger:2.9.0e128b9adbb29
golang.org/x/crypto@v0.40.0
no fix listed
1
jaegertracing/jaeger:2.19.0ede4864215be
golang.org/x/crypto@v0.52.0
no fix listed
1
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
no fix listed
1
jaegertracing/jaeger-query:1.41.0b636f0f464bc
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
no fix listed
1
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
golang.org/x/crypto@v0.27.0
no fix listed
1
jamesread/olivetin:3000.20.0f3066e207efd
golang.org/x/crypto@v0.57.0
no fix listed
1
jeboehm/mailserver-filter:5.0.92e756949e537d
golang.org/x/crypto@v0.36.0
no fix listed
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
golang.org/x/crypto@v0.36.0
no fix listed
1
jeboehm/mailserver-mta:5.0.925fb2f31c940d
golang.org/x/crypto@v0.36.0
no fix listed
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
golang.org/x/crypto@v0.36.0
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
golang.org/x/crypto@v0.17.0
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
golang.org/x/crypto@v0.17.0
no fix listed
1
jfwenisch/alpine-tor:latest9e6c229f953c
golang.org/x/crypto@v0.0.0-20190325154230-a5d413f7728c
no fix listed
1
jhaals/yopass:11.17.026873480863b
golang.org/x/crypto@v0.28.0
no fix listed
1
jhaals/yopass:11.15.16bca8d5a4914
golang.org/x/crypto@v0.14.0
no fix listed
1
jhaals/yopass:12.5.0916a1cf45d36
golang.org/x/crypto@v0.45.0
no fix listed
1
jhaals/yopass:11.4.69516e3b3e88c
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
no fix listed
1
jhidalgo3/kafka-offset-lag-for-prometheus:latest0390e155c46d
golang.org/x/crypto@v0.1.0
no fix listed
1
jhonbrownn/elchi-backend:v1.6.14-v0.14.0-envoy1.39.031aee9ba2c63
golang.org/x/crypto@v0.54.0
no fix listed
1
jhonbrownn/elchi-collector:v0.1.119fdd0724865e
golang.org/x/crypto@v0.52.0
no fix listed
1
jkremser/log2rbac:v0.0.5e35cf56ef183
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
no fix listed
1
jmferrer/azure-devops-agent:latest030f68ec6998
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
no fix listed
1
joeelliott/cert-exporter:v2.7.0b4acd14642d0
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed
1
johnblack77/clustereye-api:latest9b8dbc0264ac
golang.org/x/crypto@v0.48.0
no fix listed
1
juicedata/csi-dashboard:v0.23.03e4daf9626d5
golang.org/x/crypto@v0.14.0
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.