StackRadar

GO-2026-5932

Unscored

Advisory

Published 7 Jul 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,315
of 17,821 indexed, latest versions
Container images
3,713
deployed by those charts
Fix available
None
affected package

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

Carried by container images the latest versions of 3,315 of 17,821 indexed charts deploy, on 3,713 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+160 moreno fix listed3,713
OSV records
GO-2026-5932

Charts affected

3,315 by stars
ChartLatestAffected imagesRadar Score
nfs-server-provisionernfs-ganesha-server-and-external-provisioner1.8.01 of 1See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392
no fix listed

Open the chart page →

2,316
nginx-service-meshnginxVerified publisher2.0.01 of 9See more

nginx-service-mesh nginx 2.0.0

1 of the 9 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/nats:2.9-alpined402af4147fc
golang.org/x/crypto@v0.12.0
no fix listed

Open the chart page →

1,167
ntfyntfyVerified publisher0.5.221 of 1See more

ntfy ntfy 0.5.22

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.28.06ef4b819f722
golang.org/x/crypto@v0.55.0
no fix listed

Open the chart page →

165
nuclionuclio0.23.82 of 2See more

nuclio nuclio 0.23.8

2 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/nuclio/controller:1.17.8-amd6407cc0db1fb65
golang.org/x/crypto@v0.56.0
no fix listed
quay.io/nuclio/dashboard:1.17.8-amd64b5f5bd4efbee
golang.org/x/crypto@v0.56.0
no fix listed

Open the chart page →

982
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
library/traefik:v2.11.00a5157f742d2
golang.org/x/crypto@v0.18.0
no fix listed
openmined/syft-seaweedfs:0.9.53a4144c0bb82
golang.org/x/crypto@v0.19.0
no fix listed

Open the chart page →

17,443
prometheus-nats-exporterprometheus-communityVerified publisher2.23.21 of 1See more

prometheus-nats-exporter prometheus-community 2.23.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
golang.org/x/crypto@v0.55.0
no fix listed

Open the chart page →

165
k8s-infrasignoz0.17.11 of 1See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
golang.org/x/crypto@v0.43.0
no fix listed

Open the chart page →

1,188
radarskyhookOfficialVerified publisher1.14.11 of 1See more

radar skyhook 1.14.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/skyhook-io/radar:1.14.18fda6d4c3e80
golang.org/x/crypto@v0.57.0
no fix listed

Open the chart page →

4
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
no fix listed

Open the chart page →

4,164
tailing-sidecar-operatortailing-sidecar-operatorOfficialVerified publisher0.111.01 of 2See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
golang.org/x/crypto@v0.37.0
no fix listed

Open the chart page →

1,220
gatustwin1.5.01 of 1See more

gatus twin 1.5.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
twinproduction/gatus:v5.34.03fff895e77d3
golang.org/x/crypto@v0.45.0
no fix listed

Open the chart page →

728
elasticsearch-clusterwiremindVerified publisher4.5.21 of 2See more

elasticsearch-cluster wiremind 4.5.2

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/elasticsearch-exporter:v1.11.0a056739b095d
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

2,378
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
golang.org/x/crypto@v0.9.0
no fix listed

Open the chart page →

5,700
home-assistantalekcVerified publisher2.11.31 of 1See more

home-assistant alekc 2.11.3

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.3d89226851697
golang.org/x/crypto@v0.47.0
no fix listed

Open the chart page →

2,162
home-assistantandrenarchyVerified publisher14.104.01 of 1See more

home-assistant andrenarchy 14.104.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
golang.org/x/crypto@v0.26.0
no fix listed

Open the chart page →

2,162
astarte-operatorastarteOfficialVerified publisher26.5.21 of 1See more

astarte-operator astarte 26.5.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
astarte/astarte-kubernetes-operator:26.5.1e3ff1b3c0c98
golang.org/x/crypto@v0.28.0
no fix listed

Open the chart page →

709
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
golang.org/x/crypto@v0.14.0
no fix listed

Open the chart page →

9,885
cerboscerbosVerified publisher0.55.01 of 1See more

cerbos cerbos 0.55.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/cerbos/cerbos:0.55.04b9d3b58c4f1
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

115
cert-manager-istio-csrcert-managerOfficialVerified publisher0.18.01 of 1See more

cert-manager-istio-csr cert-manager 0.18.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-istio-csr:v0.18.0495dcdad72a4
golang.org/x/crypto@v0.56.0
no fix listed

Open the chart page →

95
cadvisorckotzbauerVerified publisher2.4.31 of 1See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
golang.org/x/crypto@v0.31.0
no fix listed

Open the chart page →

968
m365-exportercloudeteer-helm-chartsVerified publisher1.7.11 of 1See more

m365-exporter cloudeteer-helm-charts 1.7.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/cloudeteer/m365-exporter:3.9.3a13a11fe9558
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

84
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
golang.org/x/crypto@v0.22.0
no fix listed

Open the chart page →

7,190
dronecommunity-chartsVerified publisher0.1.52 of 2See more

drone community-charts 0.1.5

2 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
drone/drone:2.28.255897c8fb22d
golang.org/x/crypto@v0.40.0
no fix listed
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
no fix listed

Open the chart page →

2,737
convoyconvoyVerified publisher3.7.131 of 3See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
getconvoy/convoy:v26.7.6f4934cc05e31
golang.org/x/crypto@v0.52.0
no fix listed

Open the chart page →

5,975
cortexcortex3.3.82 of 4See more

cortex cortex 3.3.8

2 of the 4 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
prom/memcached-exporter:v0.17.0995c80e3ffbe
golang.org/x/crypto@v0.54.0
no fix listed
quay.io/cortexproject/cortex:v1.21.18577eb292a01
golang.org/x/crypto@v0.47.0
no fix listed

Open the chart page →

3,212
uptime-kumaduyet0.1.81 of 1See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
no fix listed

Open the chart page →

4,570
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
golang.org/x/crypto@v0.27.0
no fix listed

Open the chart page →

4,709
gethethereum-helm-chartsVerified publisher1.1.41 of 2See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ethereum/client-go:stableb8ab3451a117
golang.org/x/crypto@v0.48.0
no fix listed

Open the chart page →

633
gotifygotifyVerified publisher0.8.11 of 1See more

gotify gotify 0.8.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
gotify/server:2.9.1a3af47067ce6
golang.org/x/crypto@v0.47.0
no fix listed

Open the chart page →

568
myipkuossOfficialVerified publisher0.2.21 of 1See more

myip kuoss 0.2.2

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/kuoss/myip:v0.1.7760f5ccae493
golang.org/x/crypto@v0.36.0
no fix listed

Open the chart page →

660
keptnlifecycle-toolkitOfficialVerified publisher0.11.01 of 3See more

keptn lifecycle-toolkit 0.11.0

1 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
golang.org/x/crypto@v0.36.0
no fix listed

Open the chart page →

1,957
mercuremercureOfficialVerified publisher1.0.01 of 1See more

mercure mercure 1.0.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
dunglas/mercure:v1.0.033223c37ec29
golang.org/x/crypto@v0.57.0
no fix listed

Open the chart page →

650
meshery-operatormesheryOfficialVerified publisher1.0.701 of 2See more

meshery-operator meshery 1.0.70

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
golang.org/x/crypto@v0.51.0
no fix listed

Open the chart page →

2,463
tailscale-relaymvisonneau0.2.71 of 1See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
mvisonneau/tailscale:v1.68.1fc45ad8abf10
golang.org/x/crypto@v0.23.0
no fix listed

Open the chart page →

1,358
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge520d439f9a9a
golang.org/x/crypto@v0.56.0
no fix listed

Open the chart page →

1,423
olmolmVerified publisher0.45.01 of 1See more

olm olm 0.45.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:v0.45.0f228c7a6b8c5
golang.org/x/crypto@v0.51.0
no fix listed

Open the chart page →

448
opencostopencost-ociOfficialVerified publisher2.5.311 of 2See more

opencost opencost-oci 2.5.31

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.2de2784434527
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

275
ketoory0.64.01 of 1See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
oryd/keto:v26.2.0bfdb8b9e283a
golang.org/x/crypto@v0.46.0
no fix listed

Open the chart page →

979
oathkeeperory0.64.01 of 1See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
oryd/oathkeeper:v26.2.0467329abde34
golang.org/x/crypto@v0.46.0
no fix listed

Open the chart page →

932
pmmpercona1.9.11 of 1See more

pmm percona 1.9.1

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
percona/pmm-server:3.9.1003f9c25f842
golang.org/x/crypto@v0.52.0
no fix listed

Open the chart page →

824
redis-enterprise-operatorredis-enterprise-operator-officialOfficialVerified publisher8.0.18-111 of 1See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
redislabs/operator:8.0.18-119078e713bb6a
golang.org/x/crypto@v0.48.0
no fix listed

Open the chart page →

944
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
golang.org/x/crypto@v0.46.0
no fix listed

Open the chart page →

1,400
sealed-secretssealed-secretsVerified publisher2.20.01 of 1See more

sealed-secrets sealed-secrets 2.20.0

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
bitnami/sealed-secrets-controller:0.40.0b1ff382e9300
golang.org/x/crypto@v0.56.0
no fix listed

Open the chart page →

4
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
golang.org/x/crypto@v0.56.0
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
golang.org/x/crypto@v0.56.0
no fix listed

Open the chart page →

7,351
rekorsigstoreVerified publisher1.8.63 of 9See more

rekor sigstore 1.8.6

3 of the 9 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
golang.org/x/crypto@v0.55.0
no fix listed
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned5a878e4e4f03
golang.org/x/crypto@v0.53.0
no fix listed
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned28c5ff40963f
golang.org/x/crypto@v0.53.0
no fix listed

Open the chart page →

5,531
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
golang.org/x/crypto@v0.38.0
no fix listed

Open the chart page →

598
swo-k8s-collectorsolarwindsOfficialVerified publisher5.3.03 of 3See more

swo-k8s-collector solarwinds 5.3.0

3 of the 3 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
golang.org/x/crypto@v0.52.0
no fix listed
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.9.026f82b148dfe
golang.org/x/crypto@v0.50.0
no fix listed
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
golang.org/x/crypto@v0.49.0
no fix listed

Open the chart page →

2,364
sops-operatorsops-operatorVerified publisher0.10.11 of 2See more

sops-operator sops-operator 0.10.1

1 of the 2 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

1,260
thehivestrangebee-helmOfficialVerified publisher1.1.02 of 7See more

thehive strangebee-helm 1.1.0

2 of the 7 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
golang.org/x/crypto@v0.40.0
no fix listed
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
golang.org/x/crypto@v0.40.0
no fix listed

Open the chart page →

16,294
tailscale-operatortailscale1.102.41 of 1See more

tailscale-operator tailscale 1.102.4

1 of the 1 container images this version deploys carry GO-2026-5932.

Container imageDigestPackageFixed in
tailscale/k8s-operator:v1.102.43c8958c42fb3
golang.org/x/crypto@v0.54.0
no fix listed

Open the chart page →

186

Container images carrying it

3,713 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
golang.org/x/crypto@v0.18.0
no fix listed
1
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
golang.org/x/crypto@v0.18.0
no fix listed
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
golang.org/x/crypto@v0.23.0
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
golang.org/x/crypto@v0.25.0
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
golang.org/x/crypto@v0.46.0
no fix listed
1
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
golang.org/x/crypto@v0.1.0
no fix listed
1
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.36.0e354e40db2d0
golang.org/x/crypto@v0.50.0
no fix listed
1
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
golang.org/x/crypto@v0.38.0
no fix listed
1
registry.k8s.io/sig-storage/csi-attacher:v4.13.0d1a26170efed
golang.org/x/crypto@v0.55.0
no fix listed
1
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
golang.org/x/crypto@v0.37.0
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
golang.org/x/crypto@v0.36.0
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
golang.org/x/crypto@v0.53.0
no fix listed
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.