StackRadar

GO-2026-5932

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,265
of 17,828 indexed, latest versions
Container images
3,640
deployed by those charts
Fix available
None
affected package

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

Carried by container images the latest versions of 3,265 of 17,828 indexed charts deploy, on 3,640 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+160 moreno fix listed3,640
OSV records
GO-2026-5932

Charts affected

3,265 by stars
ChartLatestAffected imagesRadar Score
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
golang.org/x/crypto@v0.13.0
no fix listed

Open the chart page →

2,070
xkopsxkops0.1.02 of 5See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
golang.org/x/crypto@v0.54.0
no fix listed
murtazashah46/helmfile:latest4d11726cf803
golang.org/x/crypto@v0.5.0
no fix listed

Open the chart page →

13,925
atlas-operatorxxl-job-adminVerified publisher0.7.111 of 1See more

atlas-operator xxl-job-admin 0.7.11

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
arigaio/atlas-operator:0.7.111c4caa13c92b
golang.org/x/crypto@v0.39.0
no fix listed

Open the chart page →

1,197
cloudeye-exporterxxl-job-adminVerified publisher0.1.21 of 1See more

cloudeye-exporter xxl-job-admin 0.1.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
dellnoantechnp/cloudeye-exporter:v2.0.316873356c882d
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
no fix listed

Open the chart page →

2,698
kminionxxl-job-adminVerified publisher0.13.01 of 1See more

kminion xxl-job-admin 0.13.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
redpandadata/kminion:v2.3.256da99e8d0d3
golang.org/x/crypto@v0.51.0
no fix listed

Open the chart page →

668
nfs-subdir-external-provisionerxxl-job-adminVerified publisher4.0.181 of 1See more

nfs-subdir-external-provisioner xxl-job-admin 4.0.18

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
no fix listed

Open the chart page →

2,746
nightingalexxl-job-adminVerified publisher0.2.113 of 6See more

nightingale xxl-job-admin 0.2.11

3 of the 6 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
golang.org/x/crypto@v0.52.0
no fix listed
flashcatcloud/nightingale:8.0.0-beta.11ea1b0aaabe09
golang.org/x/crypto@v0.32.0
no fix listed
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
golang.org/x/crypto@v0.25.0
no fix listed

Open the chart page →

9,743
ygdrassil-monitoringygdrassilVerified publisher0.4.07 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

7 of the 10 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
golang.org/x/crypto@v0.32.0
no fix listed
prom/alertmanager:v0.28.0d5155cfac40a
golang.org/x/crypto@v0.31.0
no fix listed
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
golang.org/x/crypto@v0.31.0
no fix listed
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/crypto@v0.21.0
no fix listed
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
golang.org/x/crypto@v0.31.0
no fix listed
quay.io/prometheus/pushgateway:v1.11.099392035ae99
golang.org/x/crypto@v0.32.0
no fix listed
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/crypto@v0.28.0
no fix listed

Open the chart page →

9,528
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
golang.org/x/crypto@v0.22.0
no fix listed

Open the chart page →

1,610
matrixdb-operatorymatrixOfficialVerified publisher0.13.01 of 2See more

matrixdb-operator ymatrix 0.13.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
matrixdb/kubebuilder_kube-rbac-proxy:v0.12.0ed3c7e6291e8
golang.org/x/crypto@v0.0.0-20211115234514-b4de73f9ece8
no fix listed

Open the chart page →

1,966
rawfile-csiymatrixVerified publisher0.2.12 of 4See more

rawfile-csi ymatrix 0.2.1

2 of the 4 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
matrixdb/custom-external-provisioner:4622a07d7-202204247e9ffe249a51
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
no fix listed
matrixdb/rawfile-csi:v0.2.195b2e38e913d
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
no fix listed

Open the chart page →

8,002
version-checkerymrs0.2.31 of 1See more

version-checker ymrs 0.2.3

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed

Open the chart page →

3,025
prometheus-monitoring-stackyotron-helm-charts1.2.03 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

3 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
golang.org/x/crypto@v0.52.0
no fix listed
quay.io/prometheus/alertmanager:latest690c7b525f43
golang.org/x/crypto@v0.54.0
no fix listed
quay.io/prometheus/prometheus:latest5ce7540c3c00
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

936
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
no fix listed
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
no fix listed

Open the chart page →

5,077
zahori-moonzahoriVerified publisher1.0.11 of 3See more

zahori-moon zahori 1.0.1

1 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/aerokube/moon-ui:2.0.589990b146824
golang.org/x/crypto@v0.10.0
no fix listed

Open the chart page →

2,908

Container images carrying it

3,640 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-2021.08.13.20.34-linux-amd6402aed3370fce
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
no fix listed
1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64b32c99e7bc45
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed
1
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
golang.org/x/crypto@v0.19.0
no fix listed
1
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
golang.org/x/crypto@v0.41.0
no fix listed
1
public.ecr.aws/cloudnatix/llmariner/database-creator:1.19.162375abc3c56
golang.org/x/crypto@v0.36.0
no fix listed
1
public.ecr.aws/cloudnatix/llmariner/database-creator:1.17.097065ced2942
golang.org/x/crypto@v0.36.0
no fix listed
1
public.ecr.aws/cloudnatix/llmariner/session-manager-server:0.1.0-gfu-devb9537499ff9e
golang.org/x/crypto@v0.33.0
no fix listed
1
public.ecr.aws/cloudnatix/llmariner/session-manager-server:1.9.0f24ecd37fbaa
golang.org/x/crypto@v0.36.0
no fix listed
1
public.ecr.aws/cloudnatix/llmariner/vector-store-manager-server:1.7.0f1f6b884b325
golang.org/x/crypto@v0.36.0
no fix listed
1
public.ecr.aws/csi-components/csi-attacher:v4.12.0-eksbuild.8f12da9edb687
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/csi-components/csi-provisioner:v6.3.0-eksbuild.7344672a6d3a7
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/csi-components/csi-resizer:v2.2.1-eksbuild.63e9480a608a1
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
golang.org/x/crypto@v0.44.0
no fix listed
1
public.ecr.aws/diagrid-dev/diagrid-dashboard:latestf1348a65664a
golang.org/x/crypto@v0.52.0
no fix listed
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
golang.org/x/crypto@v0.5.0
no fix listed
1
public.ecr.aws/dynatrace/dynatrace-operator:v1.10.252281db48c93
golang.org/x/crypto@v0.54.0
no fix listed
1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
golang.org/x/crypto@v0.22.0
no fix listed
1
public.ecr.aws/gravitational/teleport-plugin-datadog:18.11.1bcfca8a86396
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/gravitational/teleport-plugin-email:18.11.1b2e66434dfd9
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/gravitational/teleport-plugin-event-handler:18.11.1d80a92396d00
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/gravitational/teleport-plugin-jira:18.11.160d29113b5b3
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/gravitational/teleport-plugin-mattermost:18.11.122b71780d403
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/gravitational/teleport-plugin-msteams:18.11.15e7b50759e39
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/gravitational/teleport-plugin-pagerduty:18.11.14974f23f3ab8
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/gravitational/teleport-plugin-slack:18.11.16017561c58b5
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
golang.org/x/crypto@v0.54.0
no fix listed
1
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
no fix listed
1
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260730-1af8cea3b8538
golang.org/x/crypto@v0.52.0
no fix listed
1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller:v1.4cac3ed9a9826
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
no fix listed
1
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
no fix listed
1
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
golang.org/x/crypto@v0.42.0
no fix listed
1
public.ecr.aws/karpenter/controller:v0.19.3f0e5ab60b2df
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
no fix listed
1
public.ecr.aws/lumigo/lumigo-kubernetes-rbac-proxy:696c2f0585cd6c
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
no fix listed
1
public.ecr.aws/lumigo/lumigo-kubernetes-telemetry-proxy:691d548e59c2c8
golang.org/x/crypto@v0.40.0
no fix listed
1
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.44f30f0dc32205
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.701afcfbc000e0
golang.org/x/crypto@v0.56.0
no fix listed
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
golang.org/x/crypto@v0.31.0
no fix listed
1
public.ecr.aws/opslevel/kubectl-opslevel:v2024.9.571697b5ff713
golang.org/x/crypto@v0.26.0
no fix listed
1
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
golang.org/x/crypto@v0.31.0
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
golang.org/x/crypto@v0.5.0
no fix listed
1
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
golang.org/x/crypto@v0.14.0
no fix listed
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
golang.org/x/crypto@v0.25.0
no fix listed
1
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
golang.org/x/crypto@v0.37.0
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
golang.org/x/crypto@v0.47.0
no fix listed
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
golang.org/x/crypto@v0.0.0-20220210151621-f4118a5b28e2
no fix listed
1
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
golang.org/x/crypto@v0.32.0
no fix listed
1
quay.io/aerokube/moon-ui:2.0.589990b146824
golang.org/x/crypto@v0.10.0
no fix listed
1
quay.io/appzygy/ociregistry:1.20.052cfc157ed62
golang.org/x/crypto@v0.57.0
no fix listed
1
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
golang.org/x/crypto@v0.53.0
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.