CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,239; of 18,232 indexed, latest versions
Container images: 6,142; deployed by those charts
Fix available: 6 of 9; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+210 more	1.26.10	6,034
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more	20260909-r3	112
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	92
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	64
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more	0.26.11	12
golang-1.19deb	1.19.8-2	no fix listed	1
kineapk	0.17.2-r3	no fix listed	1
kubernetes-1.37apk	1.37.1-r3	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r5	1

OSV records: CGA-32jh-59ph-xj58 GO-2026-6809 RUSTSEC-2026-0382 RUSTSEC-2026-0383 CGA-48x4-f6q2-2fc9 CGA-9w23-c7x9-6gcf CGA-pj7v-5f5f-w56q DEBIAN-CVE-2026-111943 RUSTSEC-2026-0381
Also known as: CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending: Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars

Chart

Latest

Affected images

Radar Score

kubetailkubetail

0.26.0

3 of 3 See more

kubetail kubetail 0.26.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kubetail-org/kubetail-cluster-agent :0.7.1	a5eee8cab215	stdlib@go1.24.2	1.26.10
ghcr.io/kubetail-org/kubetail-cluster-api :0.8.2	8e6acd0da9ac	stdlib@go1.25.8	1.26.10
ghcr.io/kubetail-org/kubetail-dashboard :0.17.0	8617f0a7f703	stdlib@go1.25.8	1.26.10

Open the chart page →

3,335

kubeuserkubeuser

0.1.2

1 of 1 See more

kubeuser kubeuser 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/openkube-hub/kubeuser-controller :0.1.2	27cc7b4dfa0a	stdlib@go1.26.8	1.26.10

Open the chart page →

234

kube-vault-controllerkube-vault-controller

1.2.0

1 of 1 See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kupnu4x/kube-vault-controller :1.2.0	3be59109f3d6	stdlib@go1.21.1	1.26.10

Open the chart page →

2,289

kube-vip-cloud-providerkube-vip

0.2.10

1 of 1 See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kubevip/kube-vip-cloud-provider :v0.0.12	f8f4e3401f76	stdlib@go1.24.2	1.26.10

Open the chart page →

1,368

admission-controllerkubewarden

6.1.0

2 of 2 See more

admission-controller kubewarden 6.1.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kubewarden/adm-controller/audit-scanner :v1.38.2	c3dda1e1149a	stdlib@go1.27.1	1.26.10
ghcr.io/kubewarden/adm-controller/controller :v1.38.2	383f71d05b44	stdlib@go1.27.1	1.26.10

Open the chart page →

468

runtime-enforcerkubewarden

0.2.1

3 of 3 See more

runtime-enforcer kubewarden 0.2.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.161.0	fd328de25524	stdlib@go1.26.8	1.26.10
ghcr.io/kubewarden/runtime-enforcer/agent :v0.10.1	dc463d8f7553	stdlib@go1.27.1	1.26.10
ghcr.io/kubewarden/runtime-enforcer/controller :v0.10.1	b005743f7868	stdlib@go1.27.1	1.26.10

Open the chart page →

716

kubiks-agentkubiks

0.4.0

3 of 3 See more

kubiks-agent kubiks 0.4.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/beyla :2.2.2	a9cf4560472e	stdlib@go1.24.1	1.26.10
otel/opentelemetry-collector-contrib :0.128.0	1ab0baba0ee3	stdlib@go1.24.4	1.26.10
ghcr.io/kubiks-inc/kubiks-k8s-agent :latest	8611f74b4b99	stdlib@go1.23.10	1.26.10

Open the chart page →

4,910

kubemodkubmod

0.5.2

2 of 2 See more

kubemod kubmod 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.19.1	1f8154f7e80c	stdlib@go1.18	1.26.10
kubemod/kubemod-crt :v1.3.0	028347c9fa77	stdlib@go1.18.1	1.26.10

Open the chart page →

6,708

kubeservice-cosign-webhookkubservice-charts

1.1.1

5 of 5 See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	stdlib@go1.19.12	1.26.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.26.10

Open the chart page →

10,839

kubeservice-cpupools-controllerkubservice-charts

0.1.1

2 of 2 See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	stdlib@go1.19.10	1.26.10
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	stdlib@go1.19.10	1.26.10

Open the chart page →

4,603

kubeservice-custom-limitrangekubservice-charts

1.3.0

5 of 5 See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kubeservice-stack/customlimitrange-manager :v1.3.0	d3ed97d142d4	stdlib@go1.24.1	1.26.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.26.10

Open the chart page →

9,691

kubeservice-ebpf-exporterkubservice-charts

1.2.1

1 of 1 See more

kubeservice-ebpf-exporter kubservice-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/cloudflare/ebpf_exporter :v2.3.0	75370b2ec2bb	stdlib@go1.21.5	1.26.10

Open the chart page →

1,068

kubeservice-namespace-node-affinitykubservice-charts

1.1.2

5 of 5 See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dongjiang1989/ns-node-affinity :latest	451f7823723c	stdlib@go1.18.5	1.26.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.26.10

Open the chart page →

10,779

kubeservice-scheduler-pluskubservice-charts

0.2.1

2 of 2 See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	stdlib@go1.19.9	1.26.10
dongjiang1989/node-metrics :latest	3f1f266190bb	stdlib@go1.26.7	1.26.10

Open the chart page →

2,828

ingress-annotatorkuoss

0.3.0

1 of 1 See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	stdlib@go1.24.6	1.26.10

Open the chart page →

1,002

kitcaddykvalitetsit

1.5.11

1 of 2 See more

kitcaddy kvalitetsit 1.5.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kvalitetsit/kitcaddy :1.5.11	0e66907ea266	stdlib@go1.26.6	1.26.10

Open the chart page →

449

kube-fencingkvaps

2.4.1

2 of 2 See more

kube-fencing kvaps 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	stdlib@go1.18.8	1.26.10
ghcr.io/kvaps/kube-fencing-switcher :v2.4.0	f8c378e63b78	stdlib@go1.18.8	1.26.10

Open the chart page →

4,154

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	stdlib@go1.15.14	1.26.10
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	stdlib@go1.15.14	1.26.10
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	stdlib@go1.15.14	1.26.10
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	stdlib@go1.15.14	1.26.10

Open the chart page →

22,597

kymaroskymaros

0.6.9

1 of 1 See more

kymaros kymaros 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kymaroshq/kymaros :0.6.9	fb3b88633381	stdlib@go1.25.9	1.26.10

Open the chart page →

680

chibisafel4g

0.1.1

2 of 3 See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
chibisafe/chibisafe-server :latest	a3a8606cd9b5	stdlib@go1.20.12	1.26.10
library/caddy :2-alpine	d8542f48d34a	stdlib@go1.26.8	1.26.10

Open the chart page →

4,040

checkoutlabs64io-helm-charts

0.11.13

1 See more

checkout labs64io-helm-charts 0.11.13

1 container image this version deploys carries CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :18	edb0c08dc33b	stdlib@go1.24.6	1.26.10

Open the chart page →

—

payment-gatewaylabs64io-helm-charts

0.10.14

1 See more

payment-gateway labs64io-helm-charts 0.10.14

1 container image this version deploys carries CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :18	edb0c08dc33b	stdlib@go1.24.6	1.26.10

Open the chart page →

—

lagoon-remotelagoon-charts

0.107.0

1 of 1 See more

lagoon-remote lagoon-charts 0.107.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	stdlib@go1.24.3	1.26.10

Open the chart page →

3,428

lakilaki

1.11.0

1 of 2 See more

laki laki 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/laki-n/laki :v1.6.0	599a10c453a3	stdlib@go1.27.0	1.26.10

Open the chart page →

814

landelijketabellencataloguslandelijketabellencatalogus

1.0.0

1 of 3 See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	stdlib@go1.13.10	1.26.10

Open the chart page →

9,596

glancelbenicio-community

0.1.3

1 of 1 See more

glance lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
glanceapp/glance :latest	bc5a392672c1	stdlib@go1.27.1	1.26.10

Open the chart page →

402

lgtmlgtm

0.31.1

7 of 9 See more

lgtm lgtm 0.31.1

7 of the 9 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.3-distroless	202e5d5b3f84	stdlib@go1.26.7	1.26.10
grafana/loki :3.7.8	1107dd5274e0	stdlib@go1.26.6	1.26.10
grafana/pyroscope :2.4.0	b7e62699a274	stdlib@go1.26.9	1.26.10
grafana/tempo :3.1.0	3076b8dcdfb3	stdlib@go1.27.1	1.26.10
ghcr.io/jkroepke/kube-webhook-certgen :1.8.9	58e4ac2e15bf	stdlib@go1.27.1	1.26.10
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.160.0	5323a0df9508	stdlib@go1.26.8	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	stdlib@go1.26.8	1.26.10

Open the chart page →

1,732

lgtm-stacklgtm-stack

0.1.3

5 of 8 See more

lgtm-stack lgtm-stack 0.1.3

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.18.1	0f4434c92b3e	stdlib@go1.26.5	1.26.10
grafana/grafana :13.1.0	121a7a9ece6d	stdlib@go1.25.7	1.26.10
grafana/loki :3.7.6	efd47c67f9ba	stdlib@go1.26.5	1.26.10
grafana/mimir :3.2.0	736f7459913d	stdlib@go1.26.5	1.26.10
grafana/tempo :2.10.8	f0561deb1c68	stdlib@go1.26.5	1.26.10

Open the chart page →

4,622

keptn-cert-managerlifecycle-toolkit

0.3.0

1 of 1 See more

keptn-cert-manager lifecycle-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	stdlib@go1.23.3	1.26.10

Open the chart page →

1,066

keptn-lifecycle-operatorlifecycle-toolkit

0.6.0

1 of 1 See more

keptn-lifecycle-operator lifecycle-toolkit 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	stdlib@go1.23.3	1.26.10

Open the chart page →

1,183

keptn-metrics-operatorlifecycle-toolkit

0.5.0

1 of 1 See more

keptn-metrics-operator lifecycle-toolkit 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	stdlib@go1.23.3	1.26.10

Open the chart page →

1,419

life-dashboardlife-dashboard

1.2.0

1 of 2 See more

life-dashboard life-dashboard 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/owen282000/life-dashboard-grafana :1.2.0	5f4a5da032bf	stdlib@go1.26.9	1.26.10

Open the chart page →

334

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	stdlib@go1.13.8	1.26.10

Open the chart page →

5,950

linkerd-jaegerlinkerd2-edge

30.14.11-edge

2 of 4 See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	stdlib@go1.17.6	1.26.10
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	stdlib@go1.20.7	1.26.10

Open the chart page →

6,325

litellmlitellm-helm

0.2.0

1 of 1 See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/berriai/litellm-database :litellm_stable_release_branch-v1.75.5-stable	ab63d26a8a2c	ca-certificates@20250619-r5 rustls-webpki@0.103.4 webpki-roots@1.0.2	20260909-r3 0.103.16 0.26.11

Open the chart page →

5,350

halitesql

0.1.5

1 of 2 See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/litesql/ha :latest	992944f8e2b5	stdlib@go1.27.2	1.26.10

Open the chart page →

601

litlyxlitlyx

0.2.0

1 of 5 See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/mongo :8.0.11	dca8d11fe467	stdlib@go1.23.8	1.26.10

Open the chart page →

9,907

go-hello-worldloafoe

0.17.0

1 of 1 See more

go-hello-world loafoe 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/go-hello-world :v2.16.0	22d94845e317	ca-certificates@20260909-r2 stdlib@go1.26.0	20260909-r3 1.26.10

Open the chart page →

623

stackradarlockdep

0.2.0

4 of 4 See more

stackradar lockdep 0.2.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :18-alpine	77f585114c32	stdlib@go1.24.6	1.26.10
ghcr.io/lockdep/stackradar-client :0.2.0	1ef6c7132778	stdlib@go1.23.12	1.26.10
ghcr.io/lockdep/stackradar-scanner :0.7.0	45d82534d1d5	stdlib@go1.25.7	1.26.10
ghcr.io/lockdep/stackradar-server :0.2.0	46eed1f3046a	stdlib@go1.26.8	1.26.10

Open the chart page →

5,899

locust-k8s-operatorlocust-k8s-operator

2.3.1

1 of 1 See more

locust-k8s-operator locust-k8s-operator 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
lotest/locust-k8s-operator :2.3.1	859b0d36f371	ca-certificates@20260611-r0 stdlib@go1.26.7	20260909-r3 1.26.10

Open the chart page →

281

home-assistantloeken-at-home

2026.9.2

1 of 1 See more

home-assistant loeken-at-home 2026.9.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
loeken/home-assistant :2026.9.2	b1dff5b4c593	rustls-webpki@0.103.13 stdlib@go1.25.6 webpki-root-certs@1.0.9	0.103.16 1.26.10 1.0.10

Open the chart page →

2,936

jspolicyloft

0.2.2

1 of 1 See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
loftsh/jspolicy :0.2.2	25deb9bd2683	stdlib@go1.17.13	1.26.10

Open the chart page →

3,396

vcluster-eksloft

0.0.0-ci.3

3 of 4 See more

vcluster-eks loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	stdlib@go1.16.15	1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.26.10

Open the chart page →

5,787

vcluster-k0sloft

0.0.0-ci.3

1 of 2 See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	stdlib@go1.19.4	1.26.10

Open the chart page →

4,141

log2rbac-operatorlog2rbac-operator

0.0.5

1 of 1 See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jkremser/log2rbac :v0.0.5	e35cf56ef183	stdlib@go1.17.6	1.26.10

Open the chart page →

3,066

logclilogcli

0.1.0

1 of 1 See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	stdlib@go1.16.2	1.26.10

Open the chart page →

4,209

lokxylokxy

0.2.0

1 of 1 See more

538

plexluiscajl

1.0.1

1 of 2 See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :latest	fc852e4c2135	stdlib@go1.27.1	1.26.10

Open the chart page →

793

lumenvoxlumenvox

8.0.0

11 of 11 See more

lumenvox lumenvox 8.0.0

11 of the 11 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
lumenvox/admin-portal :8.0	258583dde8a7	stdlib@go1.27.1	1.26.10
lumenvox/archive :8.0	4611915d66f6	stdlib@go1.27.1	1.26.10
lumenvox/cloud-init-tools :8.0	c01faf8d628d	stdlib@go1.27.1	1.26.10
lumenvox/configuration :8.0	7badfce0df13	stdlib@go1.27.1	1.26.10
lumenvox/deployment :8.0	dce4f18b4945	stdlib@go1.27.1	1.26.10
lumenvox/deployment-portal :8.0	4cf9bad0381d	stdlib@go1.27.1	1.26.10
lumenvox/file-store :8.0	8090031da992	stdlib@go1.27.1	1.26.10
lumenvox/license :8.0	1f985ca4d603	stdlib@go1.27.1	1.26.10
lumenvox/management-api :8.0	98fe71067039	stdlib@go1.27.1	1.26.10
lumenvox/resource :8.0	26edd01fa2ee	stdlib@go1.27.1	1.26.10
lumenvox/storage :8.0	57d15feb3603	stdlib@go1.27.1	1.26.10

Open the chart page →

2,671

voice-biometricslumenvox

2.0.1

8 of 26 See more

voice-biometrics lumenvox 2.0.1

8 of the 26 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.10
library/traefik :v2.5	7d5a6ae66572	stdlib@go1.17.6	1.26.10
lumenvox/cloud-init-tools :2.0.0	7ff037a71c50	stdlib@go1.17.3	1.26.10
lumenvox/cloud-license :2.0.0	9a69862e1248	stdlib@go1.17.3	1.26.10
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.26.10
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	stdlib@go1.14.4	1.26.10
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	stdlib@go1.15.8	1.26.10
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	stdlib@go1.16.2	1.26.10

Open the chart page →

84,260

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/nowakeai/svc-lb-mux :0.1.3	7d8fb8e996b6	rustls-webpki@0.103.9 webpki-roots@1.0.6	0.103.16 0.26.11	1
ghcr.io/nutanix-cloud-native/ndb-operator/controller :v0.5.8	b3927d7b72b9	ca-certificates@20260611-r1 stdlib@go1.26.6	20260909-r3 1.26.10	1
ghcr.io/o0th/cert-manager-webhook-bunny :1.0.2	fe7ce555a12d	stdlib@go1.23.5	1.26.10	1
ghcr.io/obeone/parcelapp-mcp :0.2.1	7073131db60b	rustls-webpki@0.103.13 webpki-root-certs@1.0.9	0.103.16 1.0.10	1
ghcr.io/octabits-io/cert-manager-webhook-porkbun :2.0.8	c0c3231e459b	stdlib@go1.27.2	1.26.10	1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	stdlib@go1.24.6	1.26.10	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	stdlib@go1.24.7	1.26.10	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	stdlib@go1.24.4	1.26.10	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe :latest	a16ab5ca10a7	stdlib@go1.26.1	1.26.10	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	stdlib@go1.26.1	1.26.10	1
ghcr.io/okteto/backend :0.0.0-2026-09-28	620932869db4	stdlib@go1.26.7	1.26.10	1
ghcr.io/okteto/buildkit :0.0.0-2026-08-03 :0.0.0-2026-08-17 :0.0.0-2026-08-24 :0.0.0-2026-08-31 :0.0.0-2026-09-21 :0.0.0-2026-09-28	14527ca5d2a9	stdlib@go1.25.7	1.26.10	1
ghcr.io/okteto/daemon :0.0.0-2026-09-21 :0.0.0-2026-09-28	a5ca067cb895	stdlib@go1.26.6	1.26.10	1
ghcr.io/okteto/ingress-nginx-chroot :0.0.0-2026-08-31 :0.0.0-2026-09-21 :0.0.0-2026-09-28	d6730eb9831b	stdlib@go1.26.6	1.26.10	1
ghcr.io/okteto/okteto :3.23.1	be99de7f8139	stdlib@go1.26.5	1.26.10	1
ghcr.io/okteto/registry :0.0.0-2026-08-17 :0.0.0-2026-08-24 :0.0.0-2026-08-31 :0.0.0-2026-09-21 :0.0.0-2026-09-28	69131511501f	stdlib@go1.26.5	1.26.10	1
ghcr.io/okteto/reloader :0.0.0-2026-08-03 :0.0.0-2026-08-17 :0.0.0-2026-08-24 :0.0.0-2026-08-31 :0.0.0-2026-09-21 :0.0.0-2026-09-28	04a3fce657c4	stdlib@go1.26.4	1.26.10	1
ghcr.io/oliverbaehler/cloudflare-tunnel-ingress-controller :0.2.3	0aec31e36d95	ca-certificates@20241121-r2 stdlib@go1.23.7	20260909-r3 1.26.10	1
ghcr.io/olivetin/olivetin :2025.2.19	a89958921526	stdlib@go1.22.0	1.26.10	1
ghcr.io/omkar-shelke25/admission-webhook-no-latest :sha-3316545	5976a1d3236a	stdlib@go1.26.3	1.26.10	1
ghcr.io/onedr0p/exportarr :v1.6.1	60cf3d44aa0b	stdlib@go1.21.6	1.26.10	1
ghcr.io/openappsec/smartsync :latest	580d68c50cc7	stdlib@go1.18.10	1.26.10	1
ghcr.io/openappsec/smartsync-shared-files :latest	30c1daa0b33e	stdlib@go1.18.10	1.26.10	1
ghcr.io/openccu/openccu :3.89.11.20260919	3cfcb30e1921	stdlib@go1.26.6	1.26.10	1
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	stdlib@go1.20.4	1.26.10	1
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	stdlib@go1.21.6	1.26.10	1
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	stdlib@go1.21.6	1.26.10	1
ghcr.io/openconfig/gnmic :0.45.0	d422a9ebd4a2	stdlib@go1.24.12	1.26.10	1
ghcr.io/opendatacube/explorer :3.2.1 :latest	7c25578068cd	stdlib@go1.25.0	1.26.10	1
ghcr.io/opendatacube/ows :1.9.17	de29324e9801	stdlib@go1.26.5	1.26.10	1
ghcr.io/openeverest/openeverest-helmtools :0.0.1	b077d661969d	stdlib@go1.24.6	1.26.10	1
ghcr.io/openfaas/cron-connector :0.7.0	982498e8a41e	stdlib@go1.23.5	1.26.10	1
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	stdlib@go1.23.4	1.26.10	1
ghcr.io/openfaas/faas-netes :0.18.17	6cfe35401d25	stdlib@go1.26.3	1.26.10	1
ghcr.io/openfaas/gateway :0.27.13	82b15393116e	stdlib@go1.24.6	1.26.10	1
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	stdlib@go1.24.13	1.26.10	1
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	stdlib@go1.21.5	1.26.10	1
ghcr.io/openfaasltd/gcp-pubsub-connector :0.0.1	8df071f5b719	stdlib@go1.23.8	1.26.10	1
ghcr.io/openfaasltd/headroom-controller :v0.0.4	67d587cc2c39	stdlib@go1.26.4	1.26.10	1
ghcr.io/openfaasltd/jetstream-queue-worker :0.3.37	d96366e208b1	stdlib@go1.22.1	1.26.10	1
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	stdlib@go1.23.5	1.26.10	1
ghcr.io/openfaasltd/pro-builder :0.6.0	6c17297f9098	stdlib@go1.24.4	1.26.10	1
ghcr.io/openfaasltd/rabbitmq-connector :0.1.2	349f7dca95ec	stdlib@go1.23.5	1.26.10	1
ghcr.io/openfaasltd/sns-connector :0.2.0	e9ab76a4ec77	stdlib@go1.21.7	1.26.10	1
ghcr.io/openfaasltd/sqs-connector :0.3.4	d44ed3b3128c	stdlib@go1.23.5	1.26.10	1
ghcr.io/openfaas/mqtt-connector :0.4.3	3311a30b8fe6	stdlib@go1.18.5	1.26.10	1
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	stdlib@go1.18.5	1.26.10	1
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.26.10	1
ghcr.io/open-feature/flagd :v0.16.0	32234e63c1d0	stdlib@go1.25.10	1.26.10	1
ghcr.io/open-feature/flagd :v0.11.1	a7ea52f87446	stdlib@go1.22.5	1.26.10	1