StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
openhumanhelmforgeVerified publisher1.1.01 of 1See more

openhuman helmforge 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/tinyhumansai/openhuman-core:v0.64.15c694baccddb4
stdlib@go1.19.8
1.26.10

Open the chart page →

2,944
openreplayhelmforgeVerified publisher1.1.118 of 24See more

openreplay helmforge 1.1.1

18 of the 24 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/git:2.52.04a0e72d49596
stdlib@go1.25.10
1.26.10
library/caddy:2.10.2-alpine4c6e91c6ed0e
stdlib@go1.25.0
1.26.10
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/openreplay/minio:20258cada3c9458a
ca-certificates@20260413-r0
minio@0.20251015.172955-r10
stdlib@go1.26.3
20260909-r3
0.20260922.192518-r5
1.26.10
ghcr.io/openreplay/postgres:173b49780c0497
ca-certificates@20260413-r0
20260909-r3
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
public.ecr.aws/p1t3u8a3/api:v1.28.512aeda8dbac7
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/assets:v1.28.0fee63ead0e74
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/canvases:v1.28.08d2b3a947a14
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
public.ecr.aws/p1t3u8a3/db:v1.28.02c99078d7957
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/ender:v1.28.00f5806583626
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/frontend:v1.28.3bc4452ef9701
ca-certificates@20260909-r2
20260909-r3
public.ecr.aws/p1t3u8a3/http:v1.28.0cd0e4469cd02
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/images:v1.28.004fadd25a569
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/sink:v1.28.06b80fb10b443
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/spot:v1.28.00ba5cb666370
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/storage:v1.28.02f9784a385ce
stdlib@go1.26.8
1.26.10

Open the chart page →

15,720
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:9.0.4dc28ed5a9d0f
stdlib@go1.26.8
1.26.10

Open the chart page →

69,345
paperless-ngxhelmforgeVerified publisher1.1.12 of 4See more

paperless-ngx helmforge 1.1.1

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
rustls-webpki@0.103.14
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

8,142
paprahelmforgeVerified publisher1.0.21 of 1See more

papra helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
stdlib@go1.23.12
1.26.10

Open the chart page →

3,685
pimcorehelmforgeVerified publisher2.0.72 of 6See more

pimcore helmforge 2.0.7

2 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.2916834e49961
stdlib@go1.26.3
1.26.10
library/mariadb:13.0.20e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

3,677
pocket-idhelmforgeVerified publisher1.0.21 of 2See more

pocket-id helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.14.001540977dcf4
stdlib@go1.26.6
1.26.10

Open the chart page →

742
questdbhelmforgeVerified publisher1.2.01 of 1See more

questdb helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
questdb/questdb:10.0.167eaed863ebb
stdlib@go1.25.14
1.26.10

Open the chart page →

170
reactive-resumehelmforgeVerified publisher1.0.22 of 4See more

reactive-resume helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
stdlib@go1.26.4
1.26.10

Open the chart page →

4,028
ryothelmforgeVerified publisher1.0.22 of 2See more

ryot helmforge 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
stdlib@go1.23.1
1.26.10

Open the chart page →

7,267
siyuanhelmforgeVerified publisher1.0.41 of 1See more

siyuan helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
b3log/siyuan:v3.8.7aced5ce847dc
stdlib@go1.26.9
1.26.10

Open the chart page →

267
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

2,580
strava-statisticshelmforgeVerified publisher1.1.191 of 2See more

strava-statistics helmforge 1.1.19

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
stdlib@go1.26.3
1.26.10

Open the chart page →

1,256
supersethelmforgeVerified publisher1.4.23 of 5See more

superset helmforge 1.4.2

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
0.103.16
1.0.10
helmforge/kubectl:1.35.3c3f97e954c47
stdlib@go1.25.7
1.26.10
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

34,432
temporalhelmforgeVerified publisher1.1.14 of 4See more

temporal helmforge 1.1.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
temporalio/admin-tools:1.32.19ef0dc5b063b
stdlib@go1.26.8
1.26.10
temporalio/server:1.32.1acecbab5b0b8
stdlib@go1.26.8
1.26.10
temporalio/ui:2.56.066d55d383bfb
stdlib@go1.26.9
1.26.10

Open the chart page →

2,630
twentyhelmforgeVerified publisher1.0.91 of 5See more

twenty helmforge 1.0.9

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5486e8fb2069
stdlib@go1.24.6
1.26.10

Open the chart page →

2,792
wallabaghelmforgeVerified publisher1.3.112 of 3See more

wallabag helmforge 1.3.11

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.10

Open the chart page →

3,315
webodmhelmforgeVerified publisher1.1.21 of 4See more

webodm helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
postgis/postgis:17-3.501a6a70e41e6
stdlib@go1.18.2
1.26.10

Open the chart page →

13,271
zookeeperhelmforgeVerified publisher1.1.11 of 1See more

zookeeper helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/zookeeper:3.9.65bad433c7170
stdlib@go1.18.1
1.26.10

Open the chart page →

3,724
harborhelm-harborVerified publisher2.3.75 of 8See more

harbor helm-harbor 2.3.7

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.47d2ba5304a72
stdlib@go1.26.7
1.26.10
goharbor/harbor-jobservice:v2.15.4f143578ef30e
stdlib@go1.26.7
1.26.10
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
stdlib@go1.26.7
1.26.10
goharbor/registry-photon:v2.15.4dc0cb388a644
stdlib@go1.26.7
1.26.10
goharbor/trivy-adapter-photon:v2.15.4813ca81b4a4e
stdlib@go1.26.7
1.26.10

Open the chart page →

1,734
openaevhelm-openbasVerified publisher2.0.151 of 7See more

openaev helm-openbas 2.0.15

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
golang-1.19@1.19.8-2
stdlib@go1.19.8
no fix listed
1.26.10

Open the chart page →

79,005
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
golang-1.19@1.19.8-2
stdlib@go1.19.8
no fix listed
1.26.10

Open the chart page →

83,823
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
stdlib@go1.25.6
1.26.10

Open the chart page →

2,614
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.10

Open the chart page →

21,677
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
stdlib@go1.26.1
1.26.10

Open the chart page →

3,909
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
stdlib@go1.24.3
1.26.10

Open the chart page →

7,357
hermes-operatorhermes-agent-operatorVerified publisher0.2.01 of 1See more

hermes-operator hermes-agent-operator 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/paperclipinc/hermes-operator:v0.2.07a491ec9b0ff
stdlib@go1.27.1
1.26.10

Open the chart page →

257
postgres-backup-localheywood8-helm-chartsVerified publisher0.1.131 of 1See more

postgres-backup-local heywood8-helm-charts 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
stdlib@go1.16
1.26.10

Open the chart page →

3,504
kubefaashfoxy-helm-charts0.1.63 of 4See more

kubefaas hfoxy-helm-charts 0.1.6

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hfoxy4/kubefaas-builder:main-2afc7570bfb65aaad93
stdlib@go1.21.11
1.26.10
hfoxy4/kubefaas-controller:main-2afc7570761fe08f14c
stdlib@go1.22.4
1.26.10
library/docker:27.0.1-dind2416984b43dd
stdlib@go1.21.11
1.26.10

Open the chart page →

8,261
tapo-prometheus-exporterhfoxy-helm-charts0.1.111 of 1See more

tapo-prometheus-exporter hfoxy-helm-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hfoxy4/tapo-prometheus-exporter:v0.1.117e385eef6fc7
stdlib@go1.21.3
1.26.10

Open the chart page →

1,447
goshimmerhiveroad0.2.141 of 1See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
iotaledger/goshimmer:v0.8.6b02a8f77474f
stdlib@go1.17.2
1.26.10

Open the chart page →

3,859
cratedb-adapterhmdmph0.1.01 of 1See more

cratedb-adapter hmdmph 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crate/crate_adapter:latestb8d89fa5d19b
stdlib@go1.16.3
1.26.10

Open the chart page →

4,159
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
stdlib@go1.21.5
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10

Open the chart page →

13,200
imageproxyhmphuVerified publisher0.1.11 of 1See more

imageproxy hmphu 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
willnorris/imageproxy:latest21d0c90f4c31
stdlib@go1.16.8
1.26.10

Open the chart page →

3,353
holmesholmes0.1.01 of 1See more

holmes holmes 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:master39081bf0c4a9
stdlib@go1.19
1.26.10

Open the chart page →

2,957
homeboxhomebox-helmVerified publisher0.3.01 of 2See more

homebox homebox-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
sysadminsmedia/homebox:0.26.056e880b62309
stdlib@go1.26.4
1.26.10

Open the chart page →

1,188
homecharthomechartVerified publisher1.0.11 of 1See more

homechart homechart 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/candiddev/homechart:latest582a76ccdd9f
stdlib@go1.27.2
1.26.10

Open the chart page →

12
adguardhomeenterpriseinc0.12.01 of 1See more

adguard homeenterpriseinc 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.0-b.5a9668737b1d6
stdlib@go1.16.6
1.26.10

Open the chart page →

3,749
cert-managerhomeenterpriseinc1.10.13 of 3See more

cert-manager homeenterpriseinc 1.10.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.10.1b5657161d2c2
stdlib@go1.19.3
1.26.10
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
stdlib@go1.19.3
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.10.164121721c665
stdlib@go1.19.3
1.26.10

Open the chart page →

7,396
homeassistanthomeenterpriseinc0.3.01 of 1See more

homeassistant homeenterpriseinc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2022.3.5565751f33794
stdlib@go1.17.1
1.26.10

Open the chart page →

9,543
photoprismhomeenterpriseinc0.8.01 of 1See more

photoprism homeenterpriseinc 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
photoprism/photoprism:20211010f4687352985a
stdlib@go1.17.1
1.26.10

Open the chart page →

3,266
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
stdlib@go1.19.8
1.26.10

Open the chart page →

18,925
honeydipperhoneydipperVerified publisher0.1.111 of 2See more

honeydipper honeydipper 0.1.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redis:5fc5ecd863862
stdlib@go1.16.7
1.26.10

Open the chart page →

2,873
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
stdlib@go1.21.10
1.26.10

Open the chart page →

4,639
universal-web-apphotrungnhanVerified publisher0.2.61 of 2See more

universal-web-app hotrungnhan 0.2.6

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
traefik/whoami:latestc4717a8d1f01
stdlib@go1.26.5
1.26.10

Open the chart page →

387
hoverflyhoverflyVerified publisher0.2.01 of 1See more

hoverfly hoverfly 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
spectolabs/hoverfly:v1.12.13250986d58ed4
stdlib@go1.27.0
1.26.10

Open the chart page →

326
paperlesshpVerified publisher0.1.23 of 5See more

paperless hp 0.1.2

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
stdlib@go1.26.2
1.26.10
gotenberg/gotenberg:8.3467097317623a
stdlib@go1.26.2
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls-webpki@0.103.13
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

38,296
wallabaghpVerified publisher0.1.71 of 1See more

wallabag hp 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.10

Open the chart page →

1,573
hammerspace-csihscsi1.2.86 of 6See more

hammerspace-csi hscsi 1.2.8

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
stdlib@go1.24.4
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.0a399393ff5bd
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.0.25f051159c95f
stdlib@go1.22.5
1.26.10

Open the chart page →

8,009
eoloplanthttpd-eoloplant0.1.03 of 7See more

eoloplant httpd-eoloplant 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
stdlib@go1.18.10
1.26.10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.10
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.10

Open the chart page →

37,945

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
stdlib@go1.16.8
1.26.10
3
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.10
3
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.10
3
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.10
3
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.10
3
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
stdlib@go1.19.2
1.26.10
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
stdlib@go1.20.5
1.26.10
3
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.136d05b4077fb
stdlib@go1.22.2
1.26.10
3
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.5.2e8825994b7a2
stdlib@go1.24.1
1.26.10
3
registry.k8s.io/kubectl:v1.31.099b37df34bc4
stdlib@go1.22.5
1.26.10
3
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
stdlib@go1.24.6
1.26.10
3
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
stdlib@go1.26.2
1.26.10
3
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
stdlib@go1.20.3
1.26.10
3
registry.k8s.io/sig-storage/csi-attacher:v4.8.0a399393ff5bd
stdlib@go1.23.1
1.26.10
3
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.12.00d23a6fd60c4
stdlib@go1.22.5
1.26.10
3
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
stdlib@go1.24.2
1.26.10
3
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
3
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
stdlib@go1.23.1
1.26.10
3
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
stdlib@go1.20.3
1.26.10
3
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
stdlib@go1.23.1
1.26.10
3
registry.k8s.io/sig-storage/csi-resizer:v1.9.0f1f352df9787
stdlib@go1.20.5
1.26.10
3
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
stdlib@go1.24.6
1.26.10
3
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
stdlib@go1.25.7
1.26.10
3
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
stdlib@go1.20.3
1.26.10
3
registry.k8s.io/sig-storage/livenessprobe:v2.17.09b75b9ade162
stdlib@go1.24.6
1.26.10
3
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
stdlib@go1.25.7
1.26.10
3
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
stdlib@go1.16.2
1.26.10
3
registry.k8s.io/sig-storage/snapshot-controller:v8.6.081e79f205083
stdlib@go1.26.3
1.26.10
3
1password/scim:v2.3.129d0c6cb67eb
stdlib@go1.16.8
1.26.10
2
abutaha/aws-es-proxy:v1.1190ed2d1dfc8
stdlib@go1.14.1
1.26.10
2
alazidis/kube-netlag:1.1.00e8c84152201
stdlib@go1.24.13
1.26.10
2
alpine/git:latest:v2.54.0ce84fd6a057b
stdlib@go1.26.8
1.26.10
2
alpine/k8s:1.32.12048f8d9c8cc7
stdlib@go1.25.7
1.26.10
2
alpine/k8s:1.37.1712dc5385d1c
stdlib@go1.26.5
1.26.10
2
alpine/kubectl:1.35.49ccd82364762
stdlib@go1.25.9
1.26.10
2
alpine/kubectl:1.35.2ec8f734b0a10
stdlib@go1.25.7
1.26.10
2
altinity/clickhouse-operator:0.21.2cd9252644ce0
stdlib@go1.19.10
1.26.10
2
altinity/clickhouse-operator:0.16.1db7dde971407
stdlib@go1.13.15
1.26.10
2
altinity/metrics-exporter:0.16.185b4fdbae053
stdlib@go1.13.15
1.26.10
2
altinity/metrics-exporter:0.21.2df3d57215356
stdlib@go1.19.10
1.26.10
2
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
stdlib@go1.13.4
1.26.10
2
amazon/aws-fsx-csi-driver:latestc9b14856fd22
stdlib@go1.16.8
1.26.10
2
apache/doris:operator-latest3a4422656592
stdlib@go1.23.12
1.26.10
2
apache/skywalking-oap-server:8.1.0-es7641237e0299b
stdlib@go1.13.3
1.26.10
2
apache/skywalking-ui:8.1.067d50e4deff4
stdlib@go1.13.3
1.26.10
2
apache/superset:dockerizeafe59523a6c8
stdlib@go1.20.4
1.26.10
2
apecloud/apecloud-mcp:0.1.094041b080510
stdlib@go1.23.7
1.26.10
2
apecloud/servicemirror:0.5.38c8451abf728
stdlib@go1.25.14
1.26.10
2
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
stdlib@go1.21.7
1.26.10
2
assistiot/fl_repository_db:latestad8f72108636
stdlib@go1.17.10
1.26.10
2

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.