CVE-2026-56851 | Vulnetix

CVE-2026-56851 PUBLISHED CVSS 7.5 HIGH

Reported by Go · Published October 7, 2026

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vendor	Product	Versions
golang.org/x/text	golang.org/x/text/secure/precis	0
chainguard	kubevirt-cdi-uploadproxy-1.6	*
chainguard	go-spdk-helper	*
chainguard	postgres-operator	*
wolfi	glow	*
chainguard	wavefront-collector-for-kubernetes-1.13	0
chainguard	cilium-certgen-0.3	*
chainguard	k3s-fips-1.36	*
chainguard	datadog-agent-fips-7.77	*
wolfi	local-path-provisioner	*
chainguard	tigera-operator-1.28	0
wolfi	kbld	*
chainguard	zabbix-agent2-7.4	*
chainguard	gitlab-runner-operator	*
chainguard	tigera-operator-1.37	*
chainguard	hcl2json-fips	*
chainguard	kubevirt-cdi-apiserver-1.5	*
chainguard	gitlab-runner-operator-fips	*
chainguard	longhorn-cli-1.8	*
chainguard	kyverno-policy-reporter-kyverno-plugin	*

…and 548 more