StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,252
of 18,208 indexed, latest versions
Container images
3,701
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 3,252 of 18,208 indexed charts deploy, on 3,701 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+197 more1.26.103,659
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+13 more20260909-r357
rustls-webpkicargo0.101.7, 0.102.8, 0.103.10, 0.103.130.103.1629
webpki-root-certscargo1.0.6, 1.0.7, 1.0.8, 1.0.91.0.1026
webpki-rootscargo0.22.6, 0.26.80.26.112
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

3,252 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher92.11.02See more

kube-prometheus-stack prometheus-community 92.11.0

2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

—
ingress-nginxingress-nginx4.15.12 of 2See more

ingress-nginx ingress-nginx 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
stdlib@go1.26.1
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
stdlib@go1.26.1
1.26.10

Open the chart page →

2,392
prometheusprometheus-communityOfficialVerified publisher29.37.02 of 6See more

prometheus prometheus-community 29.37.0

2 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

1,734
kubernetes-dashboardk8s-dashboard7.14.04 of 5See more

kubernetes-dashboard k8s-dashboard 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.14.096a702cfd339
stdlib@go1.23.12
1.26.10
kubernetesui/dashboard-auth:1.4.053e9917898bf
stdlib@go1.23.12
1.26.10
kubernetesui/dashboard-metrics-scraper:1.2.25154b68252bd
stdlib@go1.23.4
1.26.10
kubernetesui/dashboard-web:1.7.0cc7c31bd2d84
stdlib@go1.23.9
1.26.10

Open the chart page →

5,173
lokigrafana7.3.02 of 6See more

loki grafana 7.3.0

2 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/loki:3.6.1144148ad243c0
stdlib@go1.26.2
1.26.10
prom/memcached-exporter:v0.15.4b6763ecb3c47
stdlib@go1.25.3
1.26.10

Open the chart page →

5,475
metrics-servermetrics-serverVerified publisher3.14.01 of 1See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
stdlib@go1.26.4
1.26.10

Open the chart page →

483
vaulthashicorpVerified publisher0.34.12 of 2See more

vault hashicorp 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
stdlib@go1.26.5
1.26.10
hashicorp/vault-k8s:1.7.655e27b080c9b
stdlib@go1.26.5
1.26.10

Open the chart page →

1,230
gitlabgitlabVerified publisher10.5.01 of 21See more

gitlab gitlab 10.5.0

1 of the 21 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
stdlib@go1.26.6
1.26.10

Open the chart page →

20,825
airflowapache-airflowOfficialVerified publisher1.22.01 of 4See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/statsd-exporter:v0.30.0378cb79c4ac7
stdlib@go1.26.3
1.26.10

Open the chart page →

3,626
velerovmware-tanzu12.2.11 of 1See more

velero vmware-tanzu 12.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
stdlib@go1.25.11
1.26.10

Open the chart page →

1,525
metallbmetallbVerified publisher0.16.13 of 4See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
stdlib@go1.25.9
1.26.10
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
stdlib@go1.25.8
1.26.10
quay.io/metallb/speaker:v0.16.116561e96531e
stdlib@go1.25.9
1.26.10

Open the chart page →

3,495
giteagiteaOfficialVerified publisher12.7.02 of 4See more

gitea gitea 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.26.10
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
stdlib@go1.24.6
1.26.10

Open the chart page →

10,568
nfs-subdir-external-provisionernfs-subdir-external-provisioner4.0.181 of 1See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.26.10

Open the chart page →

4,019
artifact-hubartifact-hubVerified publisher1.23.06 of 7See more

artifact-hub artifact-hub 1.23.0

6 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
stdlib@go1.25.7
1.26.10
artifacthub/db-migrator:v1.23.028c13565ac5c
stdlib@go1.26.4
1.26.10
artifacthub/hub:v1.23.07d3a91c539dc
stdlib@go1.26.4
1.26.10
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
artifacthub/scanner:v1.23.02d8365601f0e
stdlib@go1.25.7
1.26.10
artifacthub/tracker:v1.23.05368d21a6e5c
stdlib@go1.24.4
1.26.10

Open the chart page →

15,229
kube-state-metricsprometheus-communityVerified publisher8.6.01 of 1See more

kube-state-metrics prometheus-community 8.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

336
jupyterhubjupyterhubOfficialVerified publisher4.4.41See more

jupyterhub jupyterhub 4.4.4

1 container image this version deploys carries CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
stdlib@go1.23.10
1.26.10

Open the chart page →

—
mimir-distributedgrafana6.2.11 of 5See more

mimir-distributed grafana 6.2.1

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/rollout-operator:v0.38.132fe838b79dd
stdlib@go1.26.5
1.26.10

Open the chart page →

3,177
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
stdlib@go1.20.5
1.26.10

Open the chart page →

37,527
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
stdlib@go1.21.8
1.26.10

Open the chart page →

13,034
kongkongOfficialVerified publisher3.4.11 of 2See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.10

Open the chart page →

1,034
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
stdlib@go1.16.2
1.26.10

Open the chart page →

3,537
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
stdlib@go1.24.1
1.26.10

Open the chart page →

2,182
prometheus-node-exporterprometheus-communityOfficialVerified publisher4.60.01 of 1See more

prometheus-node-exporter prometheus-community 4.60.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10

Open the chart page →

371
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
stdlib@go1.25.6
1.26.10

Open the chart page →

1,624
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.96.03 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.96.0

3 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/victoriametrics/sync-job:v0.0.17b6f233532a85
stdlib@go1.26.4-X:jsonv2
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

1,848
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
stdlib@go1.19.5
1.26.10

Open the chart page →

2,300
kuredkuredOfficialVerified publisher6.1.01 of 1See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubereboot/kured:1.23.08dfd3c2e8893
stdlib@go1.26.4
1.26.10

Open the chart page →

545
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.10

Open the chart page →

1,571
openebsopenebsOfficialVerified publisher4.6.216 of 35See more

openebs openebs 4.6.2

16 of the 35 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
stdlib@go1.24.1
1.26.10
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.26.10
library/nats:2.9.17-alpine1a7b320b2942
stdlib@go1.19.9
1.26.10
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
stdlib@go1.19.4
1.26.10
natsio/prometheus-nats-exporter:0.11.031c02aac089a
stdlib@go1.20.3
1.26.10
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.26.10
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.26.10

Open the chart page →

36,551
open-webuiopen-webui17.0.01 of 4See more

open-webui open-webui 17.0.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.26.10

Open the chart page →

2,368
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
stdlib@go1.19.1
1.26.10

Open the chart page →

4,514
aws-for-fluent-bitaws0.2.01 of 1See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit:3.2.1a480a1241720
stdlib@go1.25.6
1.26.10

Open the chart page →

564
apisixapisix2.18.21 of 3See more

apisix apisix 2.18.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.26.10

Open the chart page →

3,725
vpafairwinds-stableVerified publisher5.1.04 of 4See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.10

Open the chart page →

2,891
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
stdlib@go1.18.8
1.26.10

Open the chart page →

2,974
dagsterdagsterVerified publisher1.13.261 of 5See more

dagster dagster 1.13.26

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:14.6f565573d74ae
stdlib@go1.18.2
1.26.10

Open the chart page →

4,178
zabbixzabbix-communityVerified publisher7.1.02 of 5See more

zabbix zabbix-community 7.1.0

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
stdlib@go1.24.10
1.26.10
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
stdlib@go1.24.10
1.26.10

Open the chart page →

16,645
graylogkong-zVerified publisher3.0.381See more

graylog kong-z 3.0.38

1 container image this version deploys carries CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.10

Open the chart page →

—
openfaasopenfaas15.0.144See more

openfaas openfaas 15.0.14

4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
stdlib@go1.20.11
1.26.10
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
stdlib@go1.26.3
1.26.10
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
stdlib@go1.24.13
1.26.10
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
stdlib@go1.23.4
1.26.10

Open the chart page →

—
prometheus-elasticsearch-exporterprometheus-communityVerified publisher7.4.01 of 1See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/elasticsearch-exporter:v1.11.0a056739b095d
stdlib@go1.26.5
1.26.10

Open the chart page →

397
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
stdlib@go1.18.2
1.26.10

Open the chart page →

6,800
jaeger-operatorjaegertracingOfficialVerified publisher2.57.01 of 1See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/jaeger-operator:1.61.03f036ec60e61
stdlib@go1.22.3
1.26.10

Open the chart page →

1,171
netboxnetboxOfficialVerified publisher8.3.931See more

netbox netbox 8.3.93

1 container image this version deploys carries CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.26.10

Open the chart page →

—
vault-secrets-operatorhashicorpVerified publisher1.6.01 of 2See more

vault-secrets-operator hashicorp 1.6.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
stdlib@go1.23.0
1.26.10

Open the chart page →

1,769
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
stdlib@go1.21.4
1.26.10

Open the chart page →

2,091
rocketchatrocketchat-server7.0.26 of 12See more

rocketchat rocketchat-server 7.0.2

6 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
stdlib@go1.20.7
1.26.10
library/nats:2.12-alpineb270f5e24283
stdlib@go1.25.12
1.26.10
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.10
natsio/nats-server-config-reloader:0.21.110ff229eaf52
stdlib@go1.25.5
1.26.10
natsio/prometheus-nats-exporter:0.18.002469dc907bc
stdlib@go1.24.6
1.26.10

Open the chart page →

16,918
gatekeepergatekeeperVerified publisher3.23.12 of 3See more

gatekeeper gatekeeper 3.23.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.23.1dfc6fc78753f
stdlib@go1.26.6
1.26.10
openpolicyagent/gatekeeper-crds:v3.23.1ab3620e6bec9
stdlib@go1.26.6
1.26.10

Open the chart page →

1,011
zammadzammadOfficialVerified publisher19.2.01See more

zammad zammad 19.2.0

1 container image this version deploys carries CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.10

Open the chart page →

—
podinfopodinfo6.15.01 of 1See more

podinfo podinfo 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stefanprodan/podinfo:6.15.0ec73780a8425
stdlib@go1.27.0
1.26.10

Open the chart page →

528
solr-operatorapache-solrVerified publisher0.9.12 of 3See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/solr-operator:v0.9.14db34508137f
stdlib@go1.22.12
1.26.10
pravega/zookeeper-operator:0.2.15b2bc4042fdd8
stdlib@go1.19.7
1.26.10

Open the chart page →

4,309

Container images carrying it

3,701 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.10
91
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.10
36
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10
15
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
14
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
14
quay.io/prometheus/node-exporter:latest:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
14
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
stdlib@go1.18.10
1.26.10
13
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
13
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10
12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
12
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.10
11
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.10
10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.10
10
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
stdlib@go1.22.5
1.26.10
10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
9
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.26.10
8
library/rabbitmq:3.13-management:3-managemente582c0bc7766
stdlib@go1.22.2
1.26.10
8
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.26.10
8
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
stdlib@go1.26.5
1.26.10
8
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.26.10
8
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
8
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.26.10
7
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.26.10
7
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
stdlib@go1.26.4
1.26.10
7
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.26.10
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
stdlib@go1.23.3
1.26.10
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
stdlib@go1.21.8
1.26.10
7
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.26.10
7
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
7
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10
7
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10
6
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
6
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.26.10
6
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.26.10
6
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.26.10
6
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.26.10
6
library/registry:2:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.26.10
6
postgis/postgis:17-3.5:latest01a6a70e41e6
stdlib@go1.18.2
1.26.10
6
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.26.10
6
prom/memcached-exporter:v0.15.4b6763ecb3c47
stdlib@go1.25.3
1.26.10
6
traefik/whoami:latest:v1.12.0c4717a8d1f01
stdlib@go1.26.5
1.26.10
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
stdlib@go1.18.2
1.26.10
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
stdlib@go1.20.12
1.26.10
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
stdlib@go1.16.6
1.26.10
6
quay.io/devtron/kubectl:latest2ad610626658
stdlib@go1.18.5
1.26.10
6
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
stdlib@go1.19.9
1.26.10
6
quay.io/devtron/postgres:14.91b594392f7cb
stdlib@go1.18.2
1.26.10
6
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
stdlib@go1.17.6
1.26.10
6
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.26.10
6

syft 1.42.1 · advisories as of 20 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.