StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,294
of 18,232 indexed, latest versions
Container images
6,212
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,104
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars
ChartLatestAffected imagesRadar Score
kubedb-ui-serverappscodeVerified publisher2021.12.211 of 1See more

kubedb-ui-server appscode 2021.12.21

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubedb/kubedb-ui-server:v0.0.1_linux_amd647d27865514ee
stdlib@go1.17.8
1.26.10

Open the chart page →

3,154
kubedb-webhook-serverappscodeVerified publisher0.44.01 of 1See more

kubedb-webhook-server appscode 0.44.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-webhook-server:v0.44.02908cfb91761
stdlib@go1.27.2
1.26.10

Open the chart page →

363
kubeform-provider-awsappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
stdlib@go1.19.1
1.26.10

Open the chart page →

3,812
kubeform-provider-azureappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-azure appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
stdlib@go1.20.5
1.26.10

Open the chart page →

3,726
kubeform-provider-gcpappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-gcp appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
stdlib@go1.19.9
1.26.10

Open the chart page →

3,752
kubestashappscodeVerified publisher2026.10.122 of 2See more

kubestash appscode 2026.10.12

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubestash/kubestash:v0.30.04ff37f9863d5
stdlib@go1.25.5
1.26.10

Open the chart page →

1,880
kubestash-certifiedappscodeVerified publisher2026.7.102 of 2See more

kubestash-certified appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubestash/kubestash:v0.29.00686b2a40280
stdlib@go1.25.13
1.26.10

Open the chart page →

1,895
kubestash-operatorappscodeVerified publisher0.30.02 of 2See more

kubestash-operator appscode 0.30.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubestash/kubestash:v0.30.04ff37f9863d5
stdlib@go1.25.5
1.26.10

Open the chart page →

1,880
kube-ui-serverappscodeVerified publisher2026.11.301 of 1See more

kube-ui-server appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-ui-server:v0.9.0e93ec35a2b0c
stdlib@go1.27.2
1.26.10

Open the chart page →

383
kubevaultappscodeVerified publisher2026.10.123 of 3See more

kubevault appscode 2026.10.12

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubevault/kubevault-crd-manager:v0.2.088b9a05b49a3
stdlib@go1.27.2
1.26.10
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
stdlib@go1.27.2
1.26.10

Open the chart page →

1,344
kubevault-certifiedappscodeVerified publisher2026.2.271 of 1See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
stdlib@go1.25.9
1.26.10

Open the chart page →

1,669
kubevault-crd-managerappscodeVerified publisher2026.10.121 of 1See more

kubevault-crd-manager appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubevault/kubevault-crd-manager:v0.2.088b9a05b49a3
stdlib@go1.27.2
1.26.10

Open the chart page →

285
kubevault-operatorappscodeVerified publisher0.26.01 of 1See more

kubevault-operator appscode 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
stdlib@go1.27.2
1.26.10

Open the chart page →

322
kubevault-webhook-serverappscodeVerified publisher0.26.02 of 2See more

kubevault-webhook-server appscode 0.26.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
stdlib@go1.27.2
1.26.10

Open the chart page →

1,059
kubevirt-infra-csi-driverappscodeVerified publisher0.1.05 of 6See more

kubevirt-infra-csi-driver appscode 0.1.0

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-csi-driver:latest44c98353e613
stdlib@go1.24.13
1.26.10
quay.io/openshift/origin-csi-external-attacher:latestd984102dfcdb
stdlib@go1.24.11
1.26.10
quay.io/openshift/origin-csi-external-provisioner:latest250b9a4fce50
stdlib@go1.24.6
1.26.10
quay.io/openshift/origin-csi-livenessprobe:latesta6341950c413
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
stdlib@go1.23.1
1.26.10

Open the chart page →

6,139
kubevirt-tenant-csi-driverappscodeVerified publisher0.1.04 of 4See more

kubevirt-tenant-csi-driver appscode 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-csi-driver:latest44c98353e613
stdlib@go1.24.13
1.26.10
quay.io/openshift/origin-csi-livenessprobe:latesta6341950c413
stdlib@go1.24.6
1.26.10
quay.io/openshift/origin-csi-node-driver-registrar:latest5102b02862b8
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/snapshot-controller:v6.3.1ce6ca3c0e30b
stdlib@go1.20.5
1.26.10

Open the chart page →

4,778
license-proxyserverappscodeVerified publisher2026.9.181 of 1See more

license-proxyserver appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.1.28dfd7a44f362
stdlib@go1.25.13
1.26.10

Open the chart page →

345
license-proxyserver-addon-managerappscodeVerified publisher2024.2.251 of 1See more

license-proxyserver-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.0.8d6c2532ea386
stdlib@go1.22.1
1.26.10

Open the chart page →

2,112
license-proxyserver-managerappscodeVerified publisher2026.9.181 of 1See more

license-proxyserver-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.1.28dfd7a44f362
stdlib@go1.25.13
1.26.10

Open the chart page →

345
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
stdlib@go1.22.0
1.26.10

Open the chart page →

3,211
managed-serviceaccount-managerappscodeVerified publisher2026.2.161 of 1See more

managed-serviceaccount-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
stdlib@go1.25.8
1.26.10

Open the chart page →

1,467
marketplace-apiappscodeVerified publisher2026.11.301 of 1See more

marketplace-api appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
stdlib@go1.27.2
1.26.10

Open the chart page →

2,766
monitoring-operatorappscodeVerified publisher2026.6.121 of 1See more

monitoring-operator appscode 2026.6.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
stdlib@go1.25.13
1.26.10

Open the chart page →

687
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
stdlib@go1.21.8
1.26.10

Open the chart page →

3,380
multicluster-ingress-readerappscodeVerified publisher2024.7.101 of 1See more

multicluster-ingress-reader appscode 2024.7.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10

Open the chart page →

737
offline-license-serverappscodeVerified publisher2026.11.301 of 2See more

offline-license-server appscode 2026.11.30

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/offline-license-server:v0.0.76e4b66308d8f6
stdlib@go1.25.5
1.26.10

Open the chart page →

2,298
opentelemetry-kube-stackappscodeVerified publisher0.14.123 of 3See more

opentelemetry-kube-stack appscode 0.14.12

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/kubectl:v1.34.1090bef429ed1
stdlib@go1.24.6
1.26.10
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
stdlib@go1.25.6
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
stdlib@go1.25.1
1.26.10

Open the chart page →

3,440
operator-shard-managerappscodeVerified publisher2026.6.221 of 1See more

operator-shard-manager appscode 2026.6.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/operator-shard-manager:v0.0.64a16c6ccecb8
stdlib@go1.25.11
1.26.10

Open the chart page →

844
opscenter-configappscodeVerified publisher2022.6.141 of 2See more

opscenter-config appscode 2022.6.14

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/panopticon:v0.0.62cdae231ed8a
stdlib@go1.19.4
1.26.10

Open the chart page →

2,722
opscenter-coreappscodeVerified publisher2022.6.144 of 4See more

opscenter-core appscode 2022.6.14

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana-tools:v0.0.1f60324bca644
stdlib@go1.19.4
1.26.10
ghcr.io/appscode/kube-ui-server:v0.0.1340775d6850b5
stdlib@go1.19.5
1.26.10
ghcr.io/appscode/license-proxyserver:v0.0.372a5c874d854
stdlib@go1.19.6
1.26.10
ghcr.io/appscode/supervisor:v0.0.21a58f56724da
stdlib@go1.19.4
1.26.10

Open the chart page →

11,314
outbox-syncerappscodeVerified publisher2026.11.301 of 1See more

outbox-syncer appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/outboxsyncer:v0.6.0c52861c4669f
stdlib@go1.25.13
1.26.10

Open the chart page →

382
panopticonappscodeVerified publisher2026.9.182 of 2See more

panopticon appscode 2026.9.18

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/appscode/panopticon:v0.0.243ea0e226a86d
stdlib@go1.25.13
1.26.10

Open the chart page →

1,152
persesappscodeVerified publisher2026.6.22 of 2See more

perses appscode 2026.6.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode-images/postgres:18.3-bookworm8d320c6facbc
stdlib@go1.24.6
1.26.10
ghcr.io/opnpulse/perses:v2026.4.2460528178bb53
stdlib@go1.25.14
1.26.10

Open the chart page →

3,859
petsetappscodeVerified publisher2026.9.181 of 1See more

petset appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.2.0acf407bb57d7
stdlib@go1.25.13
1.26.10

Open the chart page →

779
pgoutboxappscodeVerified publisher2026.7.101 of 1See more

pgoutbox appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/pgoutbox:v0.0.4a96e06ec5e9f
stdlib@go1.25.12
1.26.10

Open the chart page →

1,319
platform-apiappscodeVerified publisher2026.11.302 of 3See more

platform-api appscode 2026.11.30

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
stdlib@go1.27.2
1.26.10
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
stdlib@go1.25.4
1.26.10

Open the chart page →

49,447
platform-linksappscodeVerified publisher2026.11.301 of 1See more

platform-links appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/fileserver:v0.0.2b1857871e06c
stdlib@go1.25.4
1.26.10

Open the chart page →

1,311
prom-label-proxyappscodeVerified publisher2026.9.221 of 1See more

prom-label-proxy appscode 2026.9.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/opnpulse/prom-label-proxy:v2026.9.22cf360f4b79b7
stdlib@go1.25.14
1.26.10

Open the chart page →

380
prom-proxyappscodeVerified publisher2023.3.231 of 1See more

prom-proxy appscode 2023.3.23

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2023.03.235f5a40fc1702
stdlib@go1.20.2
1.26.10

Open the chart page →

3,608
regcacheappscodeVerified publisher2026.11.301 of 1See more

regcache appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/registry:3.1.11be55279f18a
stdlib@go1.25.9
1.26.10

Open the chart page →

1,121
secrets-store-csi-driver-provider-virtual-secretsappscodeVerified publisher2026.8.141 of 1See more

secrets-store-csi-driver-provider-virtual-secrets appscode 2026.8.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/secrets-store-csi-driver-provider-virtual-secrets:v0.2.07afb394f9f97
stdlib@go1.25.12
1.26.10

Open the chart page →

1,087
service-backendappscodeVerified publisher2026.11.301 of 1See more

service-backend appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
stdlib@go1.25.5
1.26.10

Open the chart page →

1,943
service-gatewayappscodeVerified publisher2026.11.303 of 3See more

service-gateway appscode 2026.11.30

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.4.04466bb77dc78
stdlib@go1.25.13
1.26.10
ghcr.io/voyagermesh/echoserver:v20221109fa56a9251de6
stdlib@go1.19
1.26.10
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
stdlib@go1.26.4
1.26.10

Open the chart page →

3,679
service-presetsappscodeVerified publisher2024.2.111 of 1See more

service-presets appscode 2024.2.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/echoserver:v20221109-7ee2f3efa56a9251de6
stdlib@go1.19
1.26.10

Open the chart page →

1,589
service-providerappscodeVerified publisher2026.11.302 of 2See more

service-provider appscode 2026.11.30

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.18.27de54b6dedc8
stdlib@go1.23.3
1.26.10
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
stdlib@go1.25.5
1.26.10

Open the chart page →

3,459
service-vaultappscodeVerified publisher2026.11.303 of 3See more

service-vault appscode 2026.11.30

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubevault/kubevault-crd-manager:v0.2.088b9a05b49a3
stdlib@go1.27.2
1.26.10
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
stdlib@go1.27.2
1.26.10

Open the chart page →

1,344
sidekickappscodeVerified publisher2026.7.101 of 1See more

sidekick appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/sidekick:v0.0.16d8d2a3c22ee7
stdlib@go1.25.12
1.26.10

Open the chart page →

672
stash-communityappscodeVerified publisher0.42.04 of 4See more

stash-community appscode 0.42.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.26.10
ghcr.io/appscode/kubectl-nonroot:1.3183d43cc41590
stdlib@go1.24.9
1.26.10
ghcr.io/stashed/stash:v0.42.03a98245a7667
stdlib@go1.25.3
1.26.10
ghcr.io/stashed/stash-crd-installer:v0.42.076f0a650e44b
stdlib@go1.25.3
1.26.10

Open the chart page →

6,419
stash-opscenterappscodeVerified publisher2025.10.171 of 1See more

stash-opscenter appscode 2025.10.17

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
stdlib@go1.25.3
1.26.10

Open the chart page →

1,197
stash-ui-serverappscodeVerified publisher0.23.01 of 1See more

stash-ui-server appscode 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
stdlib@go1.25.3
1.26.10

Open the chart page →

1,197

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/mitos-run/mitos-forkd:v1.6.0979b462ab7d6
stdlib@go1.26.4
1.26.10
1
ghcr.io/mitos-run/mitos-gateway:v1.6.0017274a28204
stdlib@go1.26.4
1.26.10
1
ghcr.io/mitos-run/mitos-kvm-device-plugin:v1.6.063e2b78d03c4
stdlib@go1.26.4
1.26.10
1
ghcr.io/mkutlak/alluredeck-api:0.49.03368b34471a3
stdlib@go1.27.2
1.26.10
1
ghcr.io/mmontes11/echoperator:v0.0.4a544a71c6e3b
stdlib@go1.18.3
1.26.10
1
ghcr.io/mogenius/mogenius-operator:2.32.04d50bcb86fec
stdlib@go1.27.2
1.26.10
1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
stdlib@go1.24.4
1.26.10
1
ghcr.io/mondu-ai/eks-pod-identity-webhook:latestc2ac3bad857d
stdlib@go1.26.2
1.26.10
1
ghcr.io/mondu-ai/gar-credential-provider:latest25090d37afa9
stdlib@go1.26.0
1.26.10
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
stdlib@go1.21.12
1.26.10
1
ghcr.io/movetokube/postgres-operator:2.4.0def57d85a2da
stdlib@go1.25.5
1.26.10
1
ghcr.io/mrueg/netcupscp-exporter:v0.5.25b86c2c0b0e0
ca-certificates@20260413-r0
stdlib@go1.26.5
20260909-r3
1.26.10
1
ghcr.io/mschenck/ddns-kubernetes-controller:latest590d55aab53c
stdlib@go1.19.8
1.26.10
1
ghcr.io/mskazemi/kubeintellect:2.6.01d2b74d49f63
stdlib@go1.23.6
1.26.10
1
ghcr.io/msueberkrueb/cloudflare-dyndns:1.0.0e5c945a3b000
stdlib@go1.25.1
1.26.10
1
ghcr.io/muhmmadayan/fake-network-operator:0.1.03806b1fd4a4b
stdlib@go1.23.12
1.26.10
1
ghcr.io/music-assistant/server:2.10.645fdb050e069
rustls-webpki@0.103.14
stdlib@go1.25.5
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
rustls-webpki@0.103.13
stdlib@go1.25.7
webpki-root-certs@1.0.7
0.103.16
1.26.10
1.0.10
1
ghcr.io/mvisonneau/approuvez:v0.1.0441da62e6cb3
stdlib@go1.15.6
1.26.10
1
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
stdlib@go1.25.14
1.26.10
1
ghcr.io/nabokihms/events_exporter:latest68d44646e8b2
stdlib@go1.19.5
1.26.10
1
ghcr.io/naval-group/butane-operator:v0.1.1-rc285818b510780
stdlib@go1.26.0
1.26.10
1
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
stdlib@go1.25.6
1.26.10
1
ghcr.io/nefelim4ag/k8s-ondemand-proxy:0.0.2078b25d48cf7
stdlib@go1.21.1
1.26.10
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
stdlib@go1.21.11
1.26.10
1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.32.0-alpha71e24278a049
stdlib@go1.17.3
1.26.10
1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.61.2f04925fe1fa6
stdlib@go1.22.4
1.26.10
1
ghcr.io/netbirdio/netbird-operator:v0.8.0ae2c26cfc547
stdlib@go1.26.5
1.26.10
1
ghcr.io/netbox-community/netbox:v4.7.31d6e0b5fbd48
rustls-webpki@0.103.14
stdlib@go1.27.1
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
1
ghcr.io/netbox-community/netbox-operator:0.2.75d23e28ef483b
stdlib@go1.27.2
1.26.10
1
ghcr.io/netsoc/iamd:1.1.22fe6b69b20d7
stdlib@go1.16.6
1.26.10
1
ghcr.io/netsoc/shhd:0.1.60bb44992b62c
stdlib@go1.17
1.26.10
1
ghcr.io/netsoc/webspaced:0.5.1edc238a538a0
stdlib@go1.16.8
1.26.10
1
ghcr.io/nginx/nginx-gateway-fabric:2.4.180f3a0a51af5
stdlib@go1.25.7
1.26.10
1
ghcr.io/nginx/nginx-gateway-fabric:2.6.6c10f734589e9
stdlib@go1.26.4
1.26.10
1
ghcr.io/nginx/nginx-gateway-fabric:edgee15ba2abf4e6
stdlib@go1.27.2
1.26.10
1
ghcr.io/nicholaswilde/golinks:version-154c5818e67b26324c5
stdlib@go1.16.5
1.26.10
1
ghcr.io/nicholaswilde/installer:version-0.2.947d8ecd310a9
stdlib@go1.15.3
1.26.10
1
ghcr.io/nicholaswilde/notes:version-ee287b9ab9bc16465bc
stdlib@go1.16.5
1.26.10
1
ghcr.io/nicholaswilde/olivetin:version-2021-07-19e1d5c8a01008
stdlib@go1.16.5
1.26.10
1
ghcr.io/nicholaswilde/shiori:version-v1.5.0e0645abe6777
stdlib@go1.16.5
1.26.10
1
ghcr.io/nicholaswilde/static:version-ee8a20cd1d47c730bc4
stdlib@go1.16.5
1.26.10
1
ghcr.io/nicholaswilde/todo:941c0d3-ls1d7ba1341a940
stdlib@go1.14.15
1.26.10
1
ghcr.io/nicholaswilde/twtxt:version-0.1.158736a73ca10
stdlib@go1.16.5
1.26.10
1
ghcr.io/nicholaswilde/wiki:version-900b76a6c4f261d8f5e
stdlib@go1.16.5
1.26.10
1
ghcr.io/nicholaswilde/writefreely:version-0.13.1c3c8481b7e56
stdlib@go1.15.12
1.26.10
1
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
stdlib@go1.26.4
1.26.10
1
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent:0.1.0e0c7cf2415f0
stdlib@go1.17.6
1.26.10
1
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
stdlib@go1.24.13
1.26.10
1
ghcr.io/nlamirault/bbox_exporter:1.0.0f5dd1f7794c6
stdlib@go1.18.3
1.26.10
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.