StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58GO-2026-6809CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
stdlib@go1.18.7
1.26.10

Open the chart page →

4,457
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.3211 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

11 of the 17 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
stdlib@go1.25.7
1.26.10
grafana/grafana:12.3.12175aaa91c96
stdlib@go1.25.5
1.26.10
grafana/loki:3.6.73c8fd3570dd9
stdlib@go1.24.13
1.26.10
grafana/loki-canary:3.6.70dac7d5cb383
stdlib@go1.24.13
1.26.10
grafana/tempo:2.9.065a578975943
stdlib@go1.25.1
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
stdlib@go1.25.6
1.26.10
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
stdlib@go1.25.7
1.26.10
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
quay.io/prometheus/prometheus:v3.10.07571a304e67f
stdlib@go1.26.0
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

19,098
stuck-pod-cleanerk8s-stuck-pod-cleanerVerified publisher0.1.01 of 1See more

stuck-pod-cleaner k8s-stuck-pod-cleaner 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/kubectl:latest599e67d36ff5
stdlib@go1.26.9
1.26.10

Open the chart page →

100
kafka-canarykafka-canaryVerified publisher0.9.01 of 1See more

kafka-canary kafka-canary 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/taekjaskyli/kafka-canary:0.9.016b91402a5ca
stdlib@go1.26.8
1.26.10

Open the chart page →

248
karpenterkarpenter-provider-gcpVerified publisher0.7.01 of 1See more

karpenter karpenter-provider-gcp 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudpilotai/gcp/karpenter:v0.7.01a907c29920f
ca-certificates@20260909-r2
stdlib@go1.27.0
20260909-r3
1.26.10

Open the chart page →

242
kconmon-ngkconmon-ngVerified publisher2.5.12 of 2See more

kconmon-ng kconmon-ng 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/esdmitrii/kconmon-ng-agent:2.5.10cbfd4f7a9f5
stdlib@go1.27.1
1.26.10
ghcr.io/esdmitrii/kconmon-ng-controller:2.5.1ae1eda37ec0f
stdlib@go1.27.1
1.26.10

Open the chart page →

456
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
stdlib@go1.24.7
1.26.10

Open the chart page →

9,142
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
stdlib@go1.24.4
1.26.10

Open the chart page →

6,818
keda-add-ons-httpkedacore0.16.03 of 3See more

keda-add-ons-http kedacore 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kedacore/http-add-on-interceptor:0.16.03a9a454b949e
stdlib@go1.27.1
1.26.10
ghcr.io/kedacore/http-add-on-operator:0.16.02ae0076d549f
stdlib@go1.27.1
1.26.10
ghcr.io/kedacore/http-add-on-scaler:0.16.0db5223b1a375
stdlib@go1.27.1
1.26.10

Open the chart page →

765
mongodb-operatorkeiailabVerified publisher1.16.101 of 1See more

mongodb-operator keiailab 1.16.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keiailab/mongodb-operator:v1.16.10fd3625695d18
stdlib@go1.26.8
1.26.10

Open the chart page →

232
valkey-operatorkeiailabVerified publisher1.5.41 of 1See more

valkey-operator keiailab 1.5.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keiailab/valkey-operator:1.5.42fd8f2768634
stdlib@go1.26.8
1.26.10

Open the chart page →

232
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
stdlib@go1.20.7
1.26.10

Open the chart page →

6,387
keycloakkeycloak1.14.11 of 2See more

keycloak keycloak 1.14.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/docker/keycloak-ppolicy:0.6.09895d6915075
ca-certificates@20260413-r0
stdlib@go1.25.7
20260909-r3
1.26.10

Open the chart page →

690
keycloak-client-operatorkeycloak-client-operator0.9.11 of 1See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
stdlib@go1.24.5
1.26.10

Open the chart page →

1,039
keydbkeydb-helmVerified publisher1.0.61 of 1See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
stdlib@go1.16.7
1.26.10

Open the chart page →

6,592
giteakeyporttech0.2.102 of 4See more

gitea keyporttech 0.2.10

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
stdlib@go1.14.8
1.26.10
library/postgres:115d2aa4a7b5f9
stdlib@go1.16.7
1.26.10

Open the chart page →

7,742
kikplatekikplateVerified publisher0.22.02 of 3See more

kikplate kikplate 0.22.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
ghcr.io/kikplate/kikplate-api:main2fbce0601a3c
stdlib@go1.25.11
1.26.10

Open the chart page →

3,483
kitekite0.16.01 of 1See more

kite kite 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kite-org/kite:v0.16.0951616cbaf9c
stdlib@go1.26.8
1.26.10

Open the chart page →

276
netbirdkitstream-netbird0.7.21 of 3See more

netbird kitstream-netbird 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
netbirdio/netbird-server:0.81.3541ecef7e98a
stdlib@go1.26.7
1.26.10

Open the chart page →

1,128
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:latest0e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

4,874
kodboxkodboxVerified publisher0.10.22 of 5See more

kodbox kodbox 0.10.2

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:12.3.399c125f103f5
stdlib@go1.24.6
1.26.10
nextcloud/aio-imaginary:20260929_1054350e32abf8b219
stdlib@go1.27.1
1.26.10

Open the chart page →

2,695
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
stdlib@go1.23.5
1.26.10
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
stdlib@go1.23.0
1.26.10

Open the chart page →

13,372
komkomVerified publisher0.3.01 of 1See more

kom kom 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kkb0318/kom:0.3.04e77eff2d906
stdlib@go1.24.4
1.26.10

Open the chart page →

919
kronos-corekronos-coreVerified publisher0.4.11 of 2See more

kronos-core kronos-core 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kronosorg/kronos-core:v0.4.0301da21c59a5
stdlib@go1.21.10
1.26.10

Open the chart page →

1,149
kubeadaptkubeadaptVerified publisher1.0.81 of 1See more

kubeadapt kubeadapt 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent:v3.0.1d75b6da94913
stdlib@go1.26.2
1.26.10

Open the chart page →

619
kube-arguskube-argusOfficialVerified publisher0.0.1-s2z1 of 1See more

kube-argus kube-argus 0.0.1-s2z

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/manishchaudhary101/kube-argus:latest8e3869d31c70
stdlib@go1.26.5
1.26.10

Open the chart page →

815
cert-managerkubeblocksVerified publisher1.17.24 of 4See more

cert-manager kubeblocks 1.17.2

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.17.2ec56edb1161d
stdlib@go1.23.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
stdlib@go1.23.8
1.26.10
quay.io/jetstack/cert-manager-startupapicheck:v1.17.2e18989b4f912
stdlib@go1.23.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
stdlib@go1.23.8
1.26.10

Open the chart page →

5,138
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.009b7e8705673
stdlib@go1.20.6
1.26.10

Open the chart page →

22,981
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
stdlib@go1.20.12
1.26.10
kubesphere/kubectl:v1.27.1649b445b1b732
stdlib@go1.18.10
1.26.10

Open the chart page →

6,445
kubeboltkubeboltVerified publisher2.4.12 of 3See more

kubebolt kubebolt 2.4.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.154.0-scratch03d6215d8d86
stdlib@go1.27.2
1.26.10
ghcr.io/clm-cloud-solutions/kubebolt/api:2.4.19a93f8cce9cc
stdlib@go1.26.9
1.26.10

Open the chart page →

350
kubebrowsekubebrowse1.7.02 of 5See more

kubebrowse kubebrowse 1.7.0

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
stdlib@go1.24.3
1.26.10
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
stdlib@go1.25.0
1.26.10

Open the chart page →

4,114
elastikubeelastiOfficialVerified publisher0.1.302 of 2See more

elasti kubeelasti 0.1.30

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeelasti/elasti-operator:0.1.303b2a972a0284
stdlib@go1.26.5
1.26.10
ghcr.io/kubeelasti/elasti-resolver:0.1.30db3cd41d28ed
stdlib@go1.26.5
1.26.10

Open the chart page →

692
kubefedkubefed0.10.01 of 2See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
stdlib@go1.16.6
1.26.10

Open the chart page →

3,637
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
stdlib@go1.24.10
1.26.10

Open the chart page →

4,095
kubegems-localkubegemsOfficial1.24.102 of 2See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubegems/kubectl:latestc3b4be9a54f5
stdlib@go1.20
1.26.10
kubegems/kubegems:v1.24.10a730bcf9322a
stdlib@go1.24.10
1.26.10

Open the chart page →

7,628
monitoringkubegems44.3.41 of 1See more

monitoring kubegems 44.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubegems/alertproxy:v0.4.2eaee03055329
stdlib@go1.18.10
1.26.10

Open the chart page →

1,425
kube-monkeykubemonkey1.11.01 of 1See more

kube-monkey kubemonkey 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ayushsobti/kube-monkey:v0.7.0fc181870c60f
stdlib@go1.26.8
1.26.10

Open the chart page →

239
kubenursekubenurseVerified publisher1.15.41 of 1See more

kubenurse kubenurse 1.15.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
postfinance/kubenurse:v1.15.4f76ce08ab7b4
ca-certificates@20260413-r1
stdlib@go1.26.6
20260909-r3
1.26.10

Open the chart page →

243
kubernetes-events-exporterkubernetes-events-exporter0.1.21 of 1See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
stdlib@go1.26.2
1.26.10

Open the chart page →

906
owncloudkubernetes-homelab-helm-chartsVerified publisher0.3.02 of 3See more

owncloud kubernetes-homelab-helm-charts 0.3.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:10.110d0945c57f75
stdlib@go1.24.6
1.26.10
owncloud/server:10.16.6879638cd818b
stdlib@go1.26.3
1.26.10

Open the chart page →

8,660
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
stdlib@go1.19.4
1.26.10

Open the chart page →

4,278
kubescoutkubescouteVerified publisher0.1.11 of 1See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
stdlib@go1.25.5
1.26.10

Open the chart page →

1,251
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
stdlib@go1.24.4
1.26.10

Open the chart page →

5,459
kubeseckubesecVerified publisher1.1.01 of 1See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesec/kubesec:latest6735b7f3d1c8
stdlib@go1.27.1
1.26.10

Open the chart page →

355
kube-site-followerkube-site-follower0.1.141 of 2See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
stdlib@go1.23.4
1.26.10

Open the chart page →

1,493
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
stdlib@go1.18.10
1.26.10

Open the chart page →

3,551
mesherykubesphere-stable0.5.012 of 13See more

meshery kubesphere-stable 0.5.0

12 of the 13 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
stdlib@go1.23.9
1.26.10
layer5/meshery-app-mesh:stable-latest77d59943b3d6
stdlib@go1.19.5
1.26.10
layer5/meshery-consul:stable-latest25a4cc38abcd
stdlib@go1.19.13
1.26.10
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
stdlib@go1.13.1
1.26.10
layer5/meshery-istio:stable-latestfde47c141ec6
stdlib@go1.23.9
1.26.10
layer5/meshery-kuma:stable-latest9d25f029a8a2
stdlib@go1.23.4
1.26.10
layer5/meshery-linkerd:stable-latestb99c73bac1f5
stdlib@go1.23.6
1.26.10
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
stdlib@go1.19.11
1.26.10
layer5/meshery-nsm:stable-latestebd6a8faf21f
stdlib@go1.15.12
1.26.10
layer5/meshery-operator:stable-latest6f58a28fe422
stdlib@go1.23.9
1.26.10
layer5/meshery-osm:stable-latestec898e5786c6
stdlib@go1.19.8
1.26.10
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
stdlib@go1.19.11
1.26.10

Open the chart page →

35,813
aws-efs-csi-driverkubesphere-testVerified publisher0.1.01 of 3See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
stdlib@go1.13.4
1.26.10

Open the chart page →

3,944
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:80f51e63e537a
stdlib@go1.24.6
1.26.10

Open the chart page →

8,729
kube-state-metricskubestar-state-metricsVerified publisher0.1.101 of 1See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.6.0bdab4e49d71d
stdlib@go1.18.5
1.26.10

Open the chart page →

2,512

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
rustls-webpki@0.103.9
webpki-roots@1.0.6
0.103.16
0.26.11
1
ghcr.io/nutanix-cloud-native/ndb-operator/controller:v0.5.8b3927d7b72b9
ca-certificates@20260611-r1
stdlib@go1.26.6
20260909-r3
1.26.10
1
ghcr.io/o0th/cert-manager-webhook-bunny:1.0.2fe7ce555a12d
stdlib@go1.23.5
1.26.10
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
0.103.16
1.0.10
1
ghcr.io/octabits-io/cert-manager-webhook-porkbun:2.0.8c0c3231e459b
stdlib@go1.27.2
1.26.10
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
stdlib@go1.24.6
1.26.10
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
stdlib@go1.24.7
1.26.10
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
stdlib@go1.24.4
1.26.10
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
stdlib@go1.26.1
1.26.10
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
stdlib@go1.26.1
1.26.10
1
ghcr.io/okteto/backend:0.0.0-2026-09-28620932869db4
stdlib@go1.26.7
1.26.10
1
ghcr.io/okteto/buildkit:0.0.0-2026-08-03:0.0.0-2026-08-17:0.0.0-2026-08-24:0.0.0-2026-08-31:0.0.0-2026-09-21:0.0.0-2026-09-2814527ca5d2a9
stdlib@go1.25.7
1.26.10
1
ghcr.io/okteto/daemon:0.0.0-2026-09-21:0.0.0-2026-09-28a5ca067cb895
stdlib@go1.26.6
1.26.10
1
ghcr.io/okteto/ingress-nginx-chroot:0.0.0-2026-08-31:0.0.0-2026-09-21:0.0.0-2026-09-28d6730eb9831b
stdlib@go1.26.6
1.26.10
1
ghcr.io/okteto/okteto:3.23.1be99de7f8139
stdlib@go1.26.5
1.26.10
1
ghcr.io/okteto/registry:0.0.0-2026-08-17:0.0.0-2026-08-24:0.0.0-2026-08-31:0.0.0-2026-09-21:0.0.0-2026-09-2869131511501f
stdlib@go1.26.5
1.26.10
1
ghcr.io/okteto/reloader:0.0.0-2026-08-03:0.0.0-2026-08-17:0.0.0-2026-08-24:0.0.0-2026-08-31:0.0.0-2026-09-21:0.0.0-2026-09-2804a3fce657c4
stdlib@go1.26.4
1.26.10
1
ghcr.io/oliverbaehler/cloudflare-tunnel-ingress-controller:0.2.30aec31e36d95
ca-certificates@20241121-r2
stdlib@go1.23.7
20260909-r3
1.26.10
1
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
stdlib@go1.22.0
1.26.10
1
ghcr.io/omkar-shelke25/admission-webhook-no-latest:sha-33165455976a1d3236a
stdlib@go1.26.3
1.26.10
1
ghcr.io/onedr0p/exportarr:v1.6.160cf3d44aa0b
stdlib@go1.21.6
1.26.10
1
ghcr.io/openappsec/smartsync:latest580d68c50cc7
stdlib@go1.18.10
1.26.10
1
ghcr.io/openappsec/smartsync-shared-files:latest30c1daa0b33e
stdlib@go1.18.10
1.26.10
1
ghcr.io/openccu/openccu:3.89.11.202609193cfcb30e1921
stdlib@go1.26.6
1.26.10
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
stdlib@go1.20.4
1.26.10
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
stdlib@go1.21.6
1.26.10
1
ghcr.io/openclarity/kubeclarity-sbom-db:v2.23.3cef2b88bfc76
stdlib@go1.21.6
1.26.10
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
stdlib@go1.24.12
1.26.10
1
ghcr.io/opendatacube/explorer:3.2.1:latest7c25578068cd
stdlib@go1.25.0
1.26.10
1
ghcr.io/opendatacube/ows:1.9.17de29324e9801
stdlib@go1.26.5
1.26.10
1
ghcr.io/openeverest/openeverest-helmtools:0.0.1b077d661969d
stdlib@go1.24.6
1.26.10
1
ghcr.io/openfaas/cron-connector:0.7.0982498e8a41e
stdlib@go1.23.5
1.26.10
1
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
stdlib@go1.23.4
1.26.10
1
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
stdlib@go1.26.3
1.26.10
1
ghcr.io/openfaas/gateway:0.27.1382b15393116e
stdlib@go1.24.6
1.26.10
1
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
stdlib@go1.24.13
1.26.10
1
ghcr.io/openfaasltd/federated-gateway:0.2.39066d7b3e6a1
stdlib@go1.21.5
1.26.10
1
ghcr.io/openfaasltd/gcp-pubsub-connector:0.0.18df071f5b719
stdlib@go1.23.8
1.26.10
1
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
stdlib@go1.26.4
1.26.10
1
ghcr.io/openfaasltd/jetstream-queue-worker:0.3.37d96366e208b1
stdlib@go1.22.1
1.26.10
1
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
stdlib@go1.23.5
1.26.10
1
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
stdlib@go1.24.4
1.26.10
1
ghcr.io/openfaasltd/rabbitmq-connector:0.1.2349f7dca95ec
stdlib@go1.23.5
1.26.10
1
ghcr.io/openfaasltd/sns-connector:0.2.0e9ab76a4ec77
stdlib@go1.21.7
1.26.10
1
ghcr.io/openfaasltd/sqs-connector:0.3.4d44ed3b3128c
stdlib@go1.23.5
1.26.10
1
ghcr.io/openfaas/mqtt-connector:0.4.33311a30b8fe6
stdlib@go1.18.5
1.26.10
1
ghcr.io/openfaas/nats-connector:0.3.0315e57c0a8d8
stdlib@go1.18.5
1.26.10
1
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
stdlib@go1.23.4
1.26.10
1
ghcr.io/open-feature/flagd:v0.16.032234e63c1d0
stdlib@go1.25.10
1.26.10
1
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
stdlib@go1.22.5
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.