Published 7 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,195
of 17,803 indexed, latest versions
Container images
3,626
deployed by those charts
Fix available
None
affected package
The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
Carried by container images the latest versions of 3,195 of 17,803 indexed charts deploy, on 3,626 images.
Affected package
Affected versions
Fixed in
Images
golang.org/x/cryptogolang
v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+159 more
kube-prometheus-stackprometheus-communityOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
cert-managercert-managerOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
argo-cdargoOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
prometheusprometheus-communityOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
traefiktraefikOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
harborharborOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
jenkinsjenkinsciOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
ciliumciliumOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
airflowapache-airflowOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
argo-workflowsargoOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
oauth2-proxyoauth2-proxyOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
prometheus-blackbox-exporterprometheus-communityOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
argo-rolloutsargoOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
jaegerjaegertracingOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
jupyterhubjupyterhubOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
argocd-image-updaterargoOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
headlampheadlampOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
alertmanagerprometheus-communityOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
prometheus-node-exporterprometheus-communityOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
rook-cephrookOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
argo-eventsargoOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository
openebsopenebsOfficialOfficial: Artifact Hub marks the chart as published by the project itselfVerified publisherVerified publisher: Artifact Hub verified the publisher owns the repository