StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,728
of 18,208 indexed, latest versions
Container images
6,681
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,728 of 18,208 indexed charts deploy, on 6,681 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.106,438
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+17 more20260909-r3417
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16103
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1070
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1113
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,728 by stars
ChartLatestAffected imagesRadar Score
moon2aerokube2.8.23 of 3See more

moon2 aerokube 2.8.2

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/aerokube/moon:2.8.2072f3c5592dc
stdlib@go1.27.1
1.26.10
quay.io/aerokube/moon-conf:2.8.235c465ab25d8
stdlib@go1.27.1
1.26.10
quay.io/aerokube/moon-ui:2.8.2f374d0b9953b
stdlib@go1.27.1
1.26.10

Open the chart page →

681
microgatewayairlock-microgatewayOfficialVerified publisher5.2.11 of 1See more

microgateway airlock-microgateway 5.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/airlock/microgateway-operatordigest-pinned980e26c0cea5
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10

Open the chart page →

8
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.2.0-debian-11-r113e65a6b89e38
stdlib@go1.18.2
1.26.10

Open the chart page →

4,900
pod-gatewayangelnu7.1.11 of 2See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/angelnu/gateway-admision-controller:v3.12.06f6ab596afd5
stdlib@go1.24.2
1.26.10

Open the chart page →

1,896
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.10086c9d9ea1e37c4
stdlib@go1.27.1
1.26.10

Open the chart page →

1,044
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
stdlib@go1.16.3
1.26.10

Open the chart page →

5,132
aperture-controlleraperture2.34.04 of 5See more

aperture-controller aperture 2.34.0

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.10
fluxninja/aperture-operator:2.34.0356d7aa86632
stdlib@go1.21.5
1.26.10
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
quay.io/prometheus/prometheus:v2.33.591100b06e86d
stdlib@go1.17.8
1.26.10

Open the chart page →

7,792
k8upappuio2.0.51 of 1See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
stdlib@go1.18
1.26.10

Open the chart page →

4,459
limesurveyarea-42Verified publisher0.3.1011 of 2See more

limesurvey area-42 0.3.101

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.10

Open the chart page →

5,423
artifact-controllerartifact-controllerOfficialVerified publisher0.9.11 of 1See more

artifact-controller artifact-controller 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kargops/artifact-controller:v0.9.10b42a68e9e27
stdlib@go1.26.7
1.26.10

Open the chart page →

238
athens-proxyathens-chartsOfficialVerified publisher0.18.01 of 1See more

athens-proxy athens-charts 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gomods/athens:v0.19.2e1abe3005673
stdlib@go1.26.8
1.26.10

Open the chart page →

953
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
stdlib@go1.16.9
1.26.10

Open the chart page →

10,526
prometheusaveshaVerified publisher19.3.04 of 4See more

prometheus avesha 19.3.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.26.10
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.26.10
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
stdlib@go1.19.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.7.0a15ca437f230
stdlib@go1.19.3
1.26.10

Open the chart page →

8,857
aws-calicoaws0.3.111 of 1See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.20.1379efe0c2541
stdlib@go1.15.2
1.26.10

Open the chart page →

3,520
aws-node-termination-handleraws-node-termination-handler0.27.61 of 1See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
stdlib@go1.25.8
1.26.10

Open the chart page →

955
snapschedulerbackube-helm-chartsVerified publisher3.5.02 of 2See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/backube/snapscheduler:3.5.035ac95c51780
stdlib@go1.24.3
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.10

Open the chart page →

2,335
yataibentomlVerified publisher1.1.131 of 1See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
stdlib@go1.20.7
1.26.10

Open the chart page →

2,665
yatai-deploymentbentomlVerified publisher1.1.211 of 2See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
stdlib@go1.19.13
1.26.10

Open the chart page →

1,901
boundaryboundaryVerified publisher0.1.01 of 1See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/boundary:0.21.037bf86488b74
stdlib@go1.25.1
1.26.10

Open the chart page →

2,255
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
stdlib@go1.19.12
1.26.10

Open the chart page →

69,212
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
stdlib@go1.21.4
1.26.10

Open the chart page →

2,646
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
stdlib@go1.19.9
1.26.10

Open the chart page →

2,472
geoservercloudcamptocamp23.0.27 of 7See more

geoservercloud camptocamp2 3.0.2

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.2244572a8e01d
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-gwc:3.0.25f81a737aff3
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-rest:3.0.2c14c7be99fd7
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wcs:3.0.254cfe408a3ef
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-webui:3.0.23d01d85dcff4
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wfs:3.0.267be5bf231e1
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wms:3.0.26243931b4cc7
stdlib@go1.27.1
1.26.10

Open the chart page →

5,874
version-checkercert-managerVerified publisher0.11.01 of 1See more

version-checker cert-manager 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.11.0eae9a374d22f
stdlib@go1.26.4
1.26.10

Open the chart page →

613
cert-manager-webhook-netcupcert-manager-webhook-netcupVerified publisher1.1.01 of 1See more

cert-manager-webhook-netcup cert-manager-webhook-netcup 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/aellwein/cert-manager-webhook-netcupdigest-pinnedbd397ad6fb82
stdlib@go1.27.2
1.26.10

Open the chart page →

8
cert-managerchoerodon1.8.24 of 4See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
stdlib@go1.17.11
1.26.10

Open the chart page →

11,951
popeyechristianhuthVerified publisher2.4.31 of 1See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
stdlib@go1.23.5
1.26.10

Open the chart page →

1,989
sbom-operatorckotzbauerVerified publisher0.48.01 of 1See more

sbom-operator ckotzbauer 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/sbom-operator:0.47.02916a55055f1
stdlib@go1.26.9
1.26.10

Open the chart page →

8
hellocloudechoVerified publisher0.1.21 of 1See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudecho/hello:0.1.0f76ede067ab9
stdlib@go1.16.6
1.26.10

Open the chart page →

2,828
cloudflare-exportercloudflare-exporter0.2.31 of 1See more

cloudflare-exporter cloudflare-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/lablabs/cloudflare_exporter:0.0.1670d74ec46602
stdlib@go1.22.3
1.26.10

Open the chart page →

1,395
ghostcloudpirates-ghostVerified publisher0.20.293 of 3See more

ghost cloudpirates-ghost 0.20.29

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/ghost:6.69.055131b90d48c
stdlib@go1.24.6
1.26.10
library/mariadb:12.0.25b6a1eac15b8
stdlib@go1.18.2
1.26.10
library/mariadb:13.0.2f1bba652ba57
stdlib@go1.26.7
1.26.10

Open the chart page →

8,932
cloudprobercloudproberOfficialVerified publisher1.14.281 of 1See more

cloudprober cloudprober 1.14.28

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudprober/cloudprober:v0.14.60902d8adf871
stdlib@go1.26.6
1.26.10

Open the chart page →

280
openstack-manila-csicloud-provider-openstack2.37.15 of 5See more

openstack-manila-csi cloud-provider-openstack 2.37.1

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/manila-csi-plugin:v1.37.146373e7e6a4b
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
stdlib@go1.24.6
1.26.10

Open the chart page →

5,356
dumpscriptcloudscriptVerified publisher1.11.01 of 1See more

dumpscript cloudscript 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.45-alpine-edge99732098a0f3
stdlib@go1.27.1
1.26.10

Open the chart page →

256
clowardenclowarden0.2.32 of 4See more

clowarden clowarden 0.2.3

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
stdlib@go1.25.3
1.26.10

Open the chart page →

7,285
cluster-manager-servercluster-manager-server1.8.01 of 1See more

cluster-manager-server cluster-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server:1.8.0364b3ff0fcb7
stdlib@go1.24.5
1.26.10

Open the chart page →

1,293
cluster-registrycluster-registry-controller0.2.121 of 1See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cisco-open/cluster-registry-controller:v0.2.12937eff91df1e
stdlib@go1.18
1.26.10

Open the chart page →

2,793
coder-observabilitycoder-observabilityVerified publisher0.8.013 of 21See more

coder-observability coder-observability 0.8.0

13 of the 21 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
burningalchemist/sql_exporter:latest3dabcb7c74e9
stdlib@go1.26.9
1.26.10
grafana/alloy:v1.20.12aa2099af76c
stdlib@go1.26.7
1.26.10
grafana/grafana:10.4.19a9043254ba16
stdlib@go1.24.3
1.26.10
grafana/loki:3.1.0d947e68a84d9
stdlib@go1.22.2
1.26.10
grafana/loki-canary:3.1.039baf6d67f85
stdlib@go1.22.2
1.26.10
prom/memcached-exporter:v0.14.2d8a61419b841
stdlib@go1.21.5
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.93.00ccb22ca9f3f
stdlib@go1.26.5
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.0142a1f11df8d
stdlib@go1.26.8
1.26.10
quay.io/prometheus/alertmanager:v0.33.19e082985f56f
stdlib@go1.26.4
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
stdlib@go1.26.5
1.26.10
quay.io/prometheuscommunity/postgres-exporter:latestac5ec343104f
stdlib@go1.26.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.10

Open the chart page →

14,980
convertigoconvertigoOfficialVerified publisher8.4.62 of 5See more

convertigo convertigo 8.4.6

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
stdlib@go1.21.5
1.26.10
timescale/timescaledb:latest-pg166f139d560429
stdlib@go1.26.2
1.26.10

Open the chart page →

17,635
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
stdlib@go1.16.6
1.26.10

Open the chart page →

4,347
cosmocosmo-platformOfficialVerified publisher0.22.16 of 10See more

cosmo cosmo-platform 0.22.1

6 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
stdlib@go1.24.6
1.26.10
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
stdlib@go1.21.10
1.26.10
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
stdlib@go1.22.3
1.26.10
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
stdlib@go1.23.6
1.26.10
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
stdlib@go1.23.6
1.26.10
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
stdlib@go1.20.7
1.26.10

Open the chart page →

35,388
cosmotech-apicosmotech-apiVerified publisher5.3.11 of 1See more

cosmotech-api cosmotech-api 5.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-api:5.3.12ad55850c106
ca-certificates@20260909-r2
20260909-r3

Open the chart page →

88
ocularcrashoverride-helm-chartsVerified publisher0.5.21 of 1See more

ocular crashoverride-helm-charts 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/crashappsec/ocular-controller:v0.4.122060cf61e0e
stdlib@go1.26.6
1.26.10

Open the chart page →

268
crossviewcrossviewOfficialVerified publisher4.6.02 of 2See more

crossview crossview 4.6.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/crossplane-contrib/crossview:v4.6.07b54c5ba60e5
stdlib@go1.25.14
1.26.10

Open the chart page →

2,174
dapr-dashboarddapr0.15.01 of 1See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
daprio/dashboard:0.15.04be696707bd1
stdlib@go1.21.13
1.26.10

Open the chart page →

1,993
db-operatordb-operator-ng3.17.01 of 1See more

db-operator db-operator-ng 3.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/db-operator/db-operator:2.44.04a789f7347d8
stdlib@go1.26.9
1.26.10

Open the chart page →

75
deepflowdeepflow6.2.2015 of 8See more

deepflow deepflow 6.2.201

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
stdlib@go1.18.3
1.26.10
deepflowce/deepflow-init-grafana:v6.2.27cd16719eb57
stdlib@go1.19.3
1.26.10
deepflowce/deepflow-server:v6.2.21477e7334d13
stdlib@go1.18.10
1.26.10
deepflowce/mysql:8.0.313d7ae561cf60
stdlib@go1.16.7
1.26.10
grafana/grafana:9.3.6e5a9655dabef
stdlib@go1.19.4
1.26.10

Open the chart page →

21,564
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
stdlib@go1.21.10
1.26.10

Open the chart page →

4,448
kube-benchdeliveryheroVerified publisher0.1.171 of 1See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
stdlib@go1.21.7
1.26.10

Open the chart page →

2,346
listmonkdeliveryheroVerified publisher0.1.121 of 1See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
listmonk/listmonk:v2.1.0d2eac77ddfad
stdlib@go1.17.6
1.26.10

Open the chart page →

3,727

Container images carrying it

6,681 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
stdlib@go1.23.1
1.26.10
3
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
stdlib@go1.22.1
1.26.10
3
quay.io/prometheus/snmp-exporter:v0.30.1e5fd5e8b43ac
stdlib@go1.25.5
1.26.10
3
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
stdlib@go1.16.8
1.26.10
3
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.10
3
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.10
3
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.10
3
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.10
3
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
stdlib@go1.19.2
1.26.10
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
stdlib@go1.20.5
1.26.10
3
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.136d05b4077fb
stdlib@go1.22.2
1.26.10
3
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2e8825994b7a2
stdlib@go1.24.1
1.26.10
3
registry.k8s.io/kubectl:v1.31.099b37df34bc4
stdlib@go1.22.5
1.26.10
3
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
stdlib@go1.24.6
1.26.10
3
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
stdlib@go1.26.2
1.26.10
3
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
stdlib@go1.20.3
1.26.10
3
registry.k8s.io/sig-storage/csi-attacher:v4.8.0a399393ff5bd
stdlib@go1.23.1
1.26.10
3
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.12.00d23a6fd60c4
stdlib@go1.22.5
1.26.10
3
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
stdlib@go1.24.2
1.26.10
3
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
3
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
stdlib@go1.23.1
1.26.10
3
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
stdlib@go1.20.3
1.26.10
3
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
stdlib@go1.23.1
1.26.10
3
registry.k8s.io/sig-storage/csi-resizer:v1.9.0f1f352df9787
stdlib@go1.20.5
1.26.10
3
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
stdlib@go1.24.6
1.26.10
3
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
stdlib@go1.25.7
1.26.10
3
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
stdlib@go1.20.3
1.26.10
3
registry.k8s.io/sig-storage/livenessprobe:v2.17.09b75b9ade162
stdlib@go1.24.6
1.26.10
3
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
stdlib@go1.25.7
1.26.10
3
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
stdlib@go1.16.2
1.26.10
3
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
stdlib@go1.26.3
1.26.10
3
1password/scim:v2.3.129d0c6cb67eb
stdlib@go1.16.8
1.26.10
2
abutaha/aws-es-proxy:v1.1190ed2d1dfc8
stdlib@go1.14.1
1.26.10
2
alazidis/kube-netlag:1.1.00e8c84152201
stdlib@go1.24.13
1.26.10
2
alpine/git:latest03228d7ded48
stdlib@go1.26.8
1.26.10
2
alpine/git:latest:v2.54.0ce84fd6a057b
stdlib@go1.26.8
1.26.10
2
alpine/k8s:1.32.12048f8d9c8cc7
stdlib@go1.25.7
1.26.10
2
alpine/k8s:1.37.1712dc5385d1c
stdlib@go1.26.5
1.26.10
2
alpine/kubectl:1.35.49ccd82364762
stdlib@go1.25.9
1.26.10
2
alpine/kubectl:1.35.2ec8f734b0a10
stdlib@go1.25.7
1.26.10
2
altinity/clickhouse-operator:0.21.2cd9252644ce0
stdlib@go1.19.10
1.26.10
2
altinity/clickhouse-operator:0.16.1db7dde971407
stdlib@go1.13.15
1.26.10
2
altinity/metrics-exporter:0.16.185b4fdbae053
stdlib@go1.13.15
1.26.10
2
altinity/metrics-exporter:0.21.2df3d57215356
stdlib@go1.19.10
1.26.10
2
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
stdlib@go1.13.4
1.26.10
2
amazon/aws-fsx-csi-driver:latestc9b14856fd22
stdlib@go1.16.8
1.26.10
2
apache/doris:operator-latest3a4422656592
stdlib@go1.23.12
1.26.10
2
apache/skywalking-oap-server:8.1.0-es7641237e0299b
stdlib@go1.13.3
1.26.10
2
apache/skywalking-ui:8.1.067d50e4deff4
stdlib@go1.13.3
1.26.10
2
apache/superset:dockerizeafe59523a6c8
stdlib@go1.20.4
1.26.10
2

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.