StackRadar

GO-2026-5932

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,107
of 17,803 indexed, latest versions
Container images
3,534
deployed by those charts
Fix available
None
affected package

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

Carried by container images the latest versions of 3,107 of 17,803 indexed charts deploy, on 3,534 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+159 moreno fix listed3,534
OSV records
GO-2026-5932

Charts affected

3,107 by stars
ChartLatestAffected imagesRadar Score
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
golang.org/x/crypto@v0.22.0
no fix listed

Open the chart page →

1,610
matrixdb-operatorymatrixOfficialVerified publisher0.13.01 of 2See more

matrixdb-operator ymatrix 0.13.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
matrixdb/kubebuilder_kube-rbac-proxy:v0.12.0ed3c7e6291e8
golang.org/x/crypto@v0.0.0-20211115234514-b4de73f9ece8
no fix listed

Open the chart page →

1,965
rawfile-csiymatrixVerified publisher0.2.12 of 4See more

rawfile-csi ymatrix 0.2.1

2 of the 4 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
matrixdb/custom-external-provisioner:4622a07d7-202204247e9ffe249a51
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
no fix listed
matrixdb/rawfile-csi:v0.2.195b2e38e913d
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
no fix listed

Open the chart page →

8,000
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed

Open the chart page →

3,024
prometheus-monitoring-stackyotron-helm-charts1.2.03 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

3 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
golang.org/x/crypto@v0.52.0
no fix listed
quay.io/prometheus/alertmanager:latest690c7b525f43
golang.org/x/crypto@v0.54.0
no fix listed
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

899
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
no fix listed
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
no fix listed

Open the chart page →

5,047
zahori-moonzahoriVerified publisher1.0.11 of 3See more

zahori-moon zahori 1.0.1

1 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/aerokube/moon-ui:2.0.589990b146824
golang.org/x/crypto@v0.10.0
no fix listed

Open the chart page →

2,908

Container images carrying it

3,534 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
alpine/git:2.47.2062a01ad7a0e
golang.org/x/crypto@v0.38.0
no fix listed
2
alpine/git:latest4f9488b7295b
golang.org/x/crypto@v0.52.0
no fix listed
2
alpine/k8s:1.32.12048f8d9c8cc7
golang.org/x/crypto@v0.46.0
no fix listed
2
apache/superset:dockerizeafe59523a6c8
golang.org/x/crypto@v0.9.0
no fix listed
2
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
golang.org/x/crypto@v0.17.0
no fix listed
2
aquasec/trivy:0.74.062b1e65e8869
golang.org/x/crypto@v0.55.0
no fix listed
2
assistiot/fl_repository_db:latestad8f72108636
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
no fix listed
2
axllent/mailpit:v1.31.0c96991d9bef7
golang.org/x/crypto@v0.55.0
no fix listed
2
bitnamilegacy/etcd:latest99b408c15272
golang.org/x/crypto@v0.36.0
no fix listed
2
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
no fix listed
2
bitnami/sealed-secrets-controller:0.40.0b1ff382e9300
golang.org/x/crypto@v0.56.0
no fix listed
2
bitnamisecure/git72ae5bd9715f
golang.org/x/crypto@v0.36.0
no fix listed
2
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
no fix listed
2
burningalchemist/sql_exporter:0.24.8:latest2586aa37f140
golang.org/x/crypto@v0.55.0
no fix listed
2
casbin/casdoor:3.62.17729da148c61
golang.org/x/crypto@v0.47.0
no fix listed
2
cesanta/docker_auth:1.6.04d16885f3d4c
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
no fix listed
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
golang.org/x/crypto@v0.19.0
no fix listed
2
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
no fix listed
2
cloudflare/cloudflared:2026.6.16d91c121b803
golang.org/x/crypto@v0.52.0
no fix listed
2
coredns/coredns:1.13.19b9128672209
golang.org/x/crypto@v0.42.0
no fix listed
2
crate/crate_adapter:latestb8d89fa5d19b
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed
2
cs3org/revad:v1.19.03b57a34a7dfd
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
no fix listed
2
cs3org/revad:v1.24.0e80a4d67b352
golang.org/x/crypto@v0.5.0
no fix listed
2
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
no fix listed
2
danielqsj/kafka-exporter:v1.9.04150e46b2e96
golang.org/x/crypto@v0.32.0
no fix listed
2
danielqsj/kafka-exporter:latesta51b280b55a7
golang.org/x/crypto@v0.48.0
no fix listed
2
datawire/aes:1.14.48588eafe6862
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
no fix listed
2
devopsfaith/krakend:latestf8bdaa8a1a43
golang.org/x/crypto@v0.35.0
no fix listed
2
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
no fix listed
2
dtzar/helm-kubectl:3.14.455429449408e
golang.org/x/crypto@v0.17.0
no fix listed
2
dunglas/mercure:v0:v0.24.2916834e49961
golang.org/x/crypto@v0.52.0
no fix listed
2
epamedp/cd-pipeline-operator:2.32.0fc858071b7a1
golang.org/x/crypto@v0.53.0
no fix listed
2
epamedp/codebase-operator:2.35.0295a008abcef
golang.org/x/crypto@v0.53.0
no fix listed
2
filebrowser/filebrowser:v2.23.086e8449ff8ff
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
no fix listed
2
filebrowser/filebrowser:latest:v2.63.23a469ea076d4a
golang.org/x/crypto@v0.54.0
no fix listed
2
free5gc/amf:v3.4.31bc96ff5a2a6
golang.org/x/crypto@v0.22.0
no fix listed
2
free5gc/ausf:v3.4.3687ff4daf5da
golang.org/x/crypto@v0.21.0
no fix listed
2
free5gc/chf:v3.4.3e2a4dd98a4ed
golang.org/x/crypto@v0.22.0
no fix listed
2
free5gc/nrf:v3.4.399e46b860efb
golang.org/x/crypto@v0.21.0
no fix listed
2
free5gc/nssf:v3.4.3dfe8c68c04b4
golang.org/x/crypto@v0.21.0
no fix listed
2
free5gc/pcf:v3.4.3f712e8ecd927
golang.org/x/crypto@v0.21.0
no fix listed
2
free5gc/smf:v3.4.360e38baa4b10
golang.org/x/crypto@v0.21.0
no fix listed
2
free5gc/udm:v3.4.32f68df062a50
golang.org/x/crypto@v0.21.0
no fix listed
2
free5gc/udr:v3.4.3c0783bcdcbdc
golang.org/x/crypto@v0.21.0
no fix listed
2
free5gc/upf:v3.4.3b6b362a39fdd
golang.org/x/crypto@v0.21.0
no fix listed
2
free5gc/webui:v3.4.39adeb18492cb
golang.org/x/crypto@v0.21.0
no fix listed
2
goelankit/cortex-gateway:v1.1.00d9a82dcf026
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
no fix listed
2
gotenberg/gotenberg:8.36.087c16b9f3642
golang.org/x/crypto@v0.54.0
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
golang.org/x/crypto@v0.54.0
no fix listed
2
governify/dashboard:lateste83a17ba5038
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
no fix listed
2

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.