CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,294; of 18,232 indexed, latest versions
Container images: 6,212; deployed by those charts
Fix available: 6 of 9; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+211 more	1.26.10	6,104
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more	20260909-r3	112
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	92
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	64
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more	0.26.11	12
golang-1.19deb	1.19.8-2	no fix listed	1
kineapk	0.17.2-r3	no fix listed	1
kubernetes-1.37apk	1.37.1-r3	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r5	1

OSV records: CGA-32jh-59ph-xj58 CGA-48x4-f6q2-2fc9 CGA-9w23-c7x9-6gcf CGA-pj7v-5f5f-w56q DEBIAN-CVE-2026-111943 GO-2026-6809 RUSTSEC-2026-0381 RUSTSEC-2026-0382 RUSTSEC-2026-0383
Also known as: CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending: Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars

Chart

Latest

Affected images

Radar Score

statefulsetappscode

0.0.1

2 of 3 See more

statefulset appscode 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/kube-rbac-proxy :v0.11.0	0df4ae70e3bd	stdlib@go1.15.14	1.26.10
ghcr.io/appscode/kubectl-nonroot :v1.24	8ee5bdd68977	stdlib@go1.20.7	1.26.10

Open the chart page →

4,501

storage-metrics-serverappscode

2026.7.8

1 of 1 See more

storage-metrics-server appscode 2026.7.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/storage-metrics-server :v0.1.0	9cb4acb742a9	stdlib@go1.25.12	1.26.10

Open the chart page →

1,009

supervisorappscode

2026.2.16

1 of 1 See more

supervisor appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/supervisor :v0.0.12	23affde10a92	stdlib@go1.25.12	1.26.10

Open the chart page →

560

taskqueueappscode

2026.2.16

1 of 1 See more

taskqueue appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/taskqueue :v0.0.3	6877c958a3c6	stdlib@go1.25.5	1.26.10

Open the chart page →

1,570

tenant-operatorappscode

2026.9.22

1 of 1 See more

tenant-operator appscode 2026.9.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/opnpulse/tenant-operator :v0.0.3	8fe9b4157ed2	stdlib@go1.25.14	1.26.10

Open the chart page →

462

thanos-operatorappscode

2026.6.2

1 of 1 See more

thanos-operator appscode 2026.6.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/opnpulse/thanos-operator :v2026.4.24	e05a3e701291	stdlib@go1.26.2	1.26.10

Open the chart page →

780

tricksterappscode

2026.1.15

1 of 1 See more

trickster appscode 2026.1.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/trickster :v2.0.0	cdbbed831f28	stdlib@go1.25.5	1.26.10

Open the chart page →

1,739

vcd-lb-gcappscode

2026.6.25

1 of 1 See more

vcd-lb-gc appscode 2026.6.25

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/vcd-lb-gc :v0.1.0	524c4045cd21	stdlib@go1.25.11	1.26.10

Open the chart page →

529

voyagerappscode

2026.3.23

1 of 1 See more

voyager appscode 2026.3.23

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/voyager :v17.5.0	4964ceaf9d35	stdlib@go1.25.8	1.26.10

Open the chart page →

1,193

voyager-gatewayappscode

2026.10.10

2 of 2 See more

voyager-gateway appscode 2026.10.10

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.4.0	4466bb77dc78	stdlib@go1.25.13	1.26.10
ghcr.io/voyagermesh/gateway :v1.8.2	4237fd16a3cb	stdlib@go1.26.4	1.26.10

Open the chart page →

2,090

haproxyappuio

2.7.2

1 of 1 See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	stdlib@go1.21.1	1.26.10

Open the chart page →

7,027

stardog-userrole-operatorappuio

0.4.0

1 of 1 See more

stardog-userrole-operator appuio 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/vshn/stardog-userrole-operator :v0.3.0	4774237c9e86	stdlib@go1.22.2	1.26.10

Open the chart page →

1,845

chart-app-vidapp-vid-chart

0.0.7

1 of 2 See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/mongo :latest	dc28ed5a9d0f	stdlib@go1.26.8	1.26.10

Open the chart page →

9,192

appwriteappwrite-helm

1.3.2

4 of 8 See more

appwrite appwrite-helm 1.3.2

4 of the 8 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
appwrite/appwrite :1.9.0	1aaa70127114	stdlib@go1.25.7	1.26.10
bitnamilegacy/mariadb :10.6.12-debian-11-r13	15edb5643b73	stdlib@go1.19.7	1.26.10
bitnamilegacy/redis :7.0.10-debian-11-r0	59293f5206b7	stdlib@go1.19.7	1.26.10
openruntimes/executor :0.11.4	2228f186dcbb	stdlib@go1.21.10	1.26.10

Open the chart page →

13,735

harbor-scanner-trivyaqua-helm

0.17.0

1 of 1 See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	stdlib@go1.16.4	1.26.10

Open the chart page →

6,585

arcadearcade

1.11.3

1 of 10 See more

arcade arcade 1.11.3

1 of the 10 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	eee6c6e1b089	stdlib@go1.24.6	1.26.10

Open the chart page →

703

argocd-ecr-updaterargocd-aws-ecr-updater

0.3.39

1 of 1 See more

argocd-ecr-updater argocd-aws-ecr-updater 0.3.39

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/karlderkaefer/argocd-ecr-updater :1.4.6	ed5d4b74792c	stdlib@go1.26.5	1.26.10

Open the chart page →

388

argocd-bitbucket-proxyargocd-bitbucket-proxy

1.1.1

1 of 1 See more

argocd-bitbucket-proxy argocd-bitbucket-proxy 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/salemgolemugoo/argocd-bitbucket-proxy :latest	a72df069095b	stdlib@go1.26.1	1.26.10

Open the chart page →

499

argocdargo-helm-charts

1.0.0

3 of 3 See more

argocd argo-helm-charts 1.0.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	stdlib@go1.23.4	1.26.10
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.26.10
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	stdlib@go1.22.2	1.26.10

Open the chart page →

10,522

argo-workflowsargo-helm-charts

1.0.0

2 of 2 See more

argo-workflows argo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocli :v3.7.1	6efd1cb89dc1	stdlib@go1.24.6	1.26.10
quay.io/argoproj/workflow-controller :v3.7.1	66388d1b2f08	stdlib@go1.24.6	1.26.10

Open the chart page →

2,955

clickhouseargonaut-charts

0.6.8

2 of 3 See more

clickhouse argonaut-charts 0.6.8

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.16.1	db7dde971407	stdlib@go1.13.15	1.26.10
altinity/metrics-exporter :0.16.1	85b4fdbae053	stdlib@go1.13.15	1.26.10

Open the chart page →

11,928

istio-discoveryargonaut-charts

0.3.3

1 of 1 See more

istio-discovery argonaut-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.0	294ca55bd1cc	stdlib@go1.16.4	1.26.10

Open the chart page →

73,387

istio-ingressargonaut-charts

0.3.3

1 of 1 See more

istio-ingress argonaut-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.0	88c6c693e67a	stdlib@go1.16.4	1.26.10

Open the chart page →

73,332

argonix-apiargonix

0.6.5

1 of 4 See more

argonix-api argonix 0.6.5

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/argonix-io/argonix-api :0.6.5	431abcce7c1e	stdlib@go1.22.7	1.26.10

Open the chart page →

7,438

argo-zombiesargo-zombies

0.1.52

1 of 1 See more

argo-zombies argo-zombies 0.1.52

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/henrywhitaker3/argo-zombies :v0.4.4	316c397906c9	stdlib@go1.26.1	1.26.10

Open the chart page →

683

otel-collectorarieotech

0.1.0

1 of 1 See more

otel-collector arieotech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.154.0	b3079f45e19b	stdlib@go1.26.4	1.26.10

Open the chart page →

788

arlas-aiasarlas-stack

28.10.0

6 of 22 See more

arlas-aias arlas-stack 28.10.0

6 of the 22 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	stdlib@go1.23.9	1.26.10
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	stdlib@go1.25.0	1.26.10
bitnamilegacy/minio :2024.12.18-debian-12-r1	c0ede65eb88e	stdlib@go1.22.11	1.26.10
bitnamilegacy/minio :2025.4.22-debian-12-r1	d7cd0e172c4c	stdlib@go1.24.2	1.26.10
bitnamilegacy/os-shell :12-debian-12-r43	9ba5d16f9c64	stdlib@go1.23.8	1.26.10
bitnamilegacy/redis :8.0.3-debian-12-r1	189aae381e7f	stdlib@go1.24.4	1.26.10

Open the chart page →

157,418

titilerarlas-stack

28.10.0

1 of 1 See more

titiler arlas-stack 28.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/developmentseed/titiler :latest	988cc5e4a600	ca-certificates@20260909-r2	20260909-r3

Open the chart page →

208

arma-reforgerarma-reforger

0.5.3

8 of 8 See more

arma-reforger arma-reforger 0.5.3

8 of the 8 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.5.1	28fe26c8b8b1	stdlib@go1.19.3	1.26.10
stakater/reloader :v1.0.15	f4b87a8e56d4	stdlib@go1.20.1	1.26.10
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	stdlib@go1.18.10	1.26.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.63.0	3f976422884e	stdlib@go1.19.5	1.26.10
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	stdlib@go1.19.4	1.26.10
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	stdlib@go1.19.3	1.26.10
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	stdlib@go1.19.4	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	stdlib@go1.19.4	1.26.10

Open the chart page →

31,223

articom-k8s-crdarticomio-helm-charts

2.0.5

2 of 2 See more

articom-k8s-crd articomio-helm-charts 2.0.5

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
articomio/articom-cx-operator :v2.0.5	03f3e1935d24	stdlib@go1.25.14	1.26.10
hashicorp/vault :1.18	750bb37c1638	stdlib@go1.23.6	1.26.10

Open the chart page →

3,060

cluster-autoscalerarzu

9.19.1

1 of 1 See more

cluster-autoscaler arzu 9.19.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
breton/cool :dev	41b1bb483aa2	stdlib@go1.19.2	1.26.10

Open the chart page →

2,690

itera-lmaarzu

1.34.60

4 of 6 See more

itera-lma arzu 1.34.60

4 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/grafana :9.0.1	a738d0744784	stdlib@go1.17.11	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.57.0	a2d502c204f9	stdlib@go1.17.10	1.26.10
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	stdlib@go1.17.3	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	stdlib@go1.18.3	1.26.10

Open the chart page →

13,086

authorizationassist-iot-authorisation

0.1.0

1 of 2 See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
assistiot/authorization_db :latest	c3adbab6a3e7	stdlib@go1.18.2	1.26.10

Open the chart page →

7,077

dltkvassist-iot-data-integrity-verification

0.2.0

5 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

5 of the 9 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
assistiot/data_integrity_verification :1.0.0	eb7f5d765ab6	stdlib@go1.17.13	1.26.10
hyperledger/fabric-ca :latest	a70b6ba64a08	stdlib@go1.26.4	1.26.10
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	stdlib@go1.18.10	1.26.10
hyperledger/fabric-peer :2.4	6ff36af21eb1	stdlib@go1.18.10	1.26.10
hyperledger/fabric-tools :2.4	b1194f509085	stdlib@go1.18.10	1.26.10

Open the chart page →

190,670

dltflassist-iot-dlt-based-fl

0.2.0

5 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

5 of the 9 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
assistiot/dlt_based_fl :1.1.0	4bc3d92788ed	stdlib@go1.17.13	1.26.10
hyperledger/fabric-ca :latest	a70b6ba64a08	stdlib@go1.26.4	1.26.10
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	stdlib@go1.18.10	1.26.10
hyperledger/fabric-peer :2.4	6ff36af21eb1	stdlib@go1.18.10	1.26.10
hyperledger/fabric-tools :2.4	b1194f509085	stdlib@go1.18.10	1.26.10

Open the chart page →

190,670

fllocaloperationsassist-iot-fl-local-operations

1.1.0

1 of 3 See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	stdlib@go1.17.10	1.26.10

Open the chart page →

5,253

fl-orchestrator-guiassist-iot-fl-orchestrator

0.1.0

1 of 3 See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	stdlib@go1.17.10	1.26.10

Open the chart page →

10,964

flrepositorydbassist-iot-fl-repository

1.1.0

1 of 2 See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
assistiot/fl_repository_db :latest	ad8f72108636	stdlib@go1.17.10	1.26.10

Open the chart page →

6,158

idmassist-iot-identity-manager

0.1.0

1 of 2 See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
assistiot/identity-manager_db :latest	0d3e6d35f168	stdlib@go1.18.2	1.26.10

Open the chart page →

14,979

locationprocessingassist-iot-location-processing

1.0.0

1 of 3 See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.26.10

Open the chart page →

12,460

openapiassist-iot-open-api-management

0.2.2

2 of 6 See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
assistiot/open_api_backend :1.1.2	30812ba93555	stdlib@go1.18.6	1.26.10
kong/kubernetes-ingress-controller :2.3	5e66021b64a8	stdlib@go1.18	1.26.10

Open the chart page →

92,195

performanceandusagediagnosisassist-iot-pud

1.0.0

5 of 7 See more

performanceandusagediagnosis assist-iot-pud 1.0.0

5 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/grafana :9.1.1	9746858c20e6	stdlib@go1.17.12	1.26.10
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.10
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	stdlib@go1.20.6	1.26.10
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	stdlib@go1.18.3	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	stdlib@go1.18.5	1.26.10

Open the chart page →

13,432

resource-provisioningassist-iot-resource-provisioning

1.0.0

1 of 7 See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.10

Open the chart page →

9,750

smartorchestratorassist-iot-smart-orchestrator

4.0.0

5 of 14 See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

5 of the 14 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
assistiot/smart-orchestrator_helm :latest	9bb46ea14e8e	stdlib@go1.22.1	1.26.10
devopsfaith/krakend :latest	f8bdaa8a1a43	stdlib@go1.24.2	1.26.10
library/mongo :4.4.6	6efa05203990	stdlib@go1.16.3	1.26.10
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.10
quay.io/prometheus/prometheus :latest	efd719c99d83	stdlib@go1.27.1	1.26.10

Open the chart page →

278,561

videoaugmentationassist-iot-video-augmentation

0.1.0

1 of 3 See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bluenviron/mediamtx :latest-ffmpeg	c0feb4acc548	stdlib@go1.27.2	1.26.10

Open the chart page →

76,060

astrotrekastria

0.0.2

4 of 4 See more

astrotrek astria 0.0.2

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	stdlib@go1.19.1	1.26.10
ghcr.io/astriaorg/astria-indexer :0.1.0	5cf1e5709820	stdlib@go1.23.1	1.26.10
ghcr.io/astriaorg/astria-indexer-api :0.1.0	3490d9900af1	stdlib@go1.23.1	1.26.10
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	stdlib@go1.20.12	1.26.10

Open the chart page →

103,851

celestia-localastria

9.0.0

2 of 2 See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v6.1.0-rc0	a604aefa3fae	stdlib@go1.24.6	1.26.10
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	stdlib@go1.24.7	1.26.10

Open the chart page →

4,672

celestia-nodeastria

0.7.1

1 of 1 See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	stdlib@go1.24.7	1.26.10

Open the chart page →

2,095

evm-faucetastria

0.1.5

1 of 1 See more

evm-faucet astria 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/ria-faucet :0.0.1	a06c8ebef427	stdlib@go1.17.13	1.26.10

Open the chart page →

2,557

evm-rollupastria

4.1.0

1 of 2 See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/astria-geth :latest	4249e403225a	stdlib@go1.22.12	1.26.10

Open the chart page →

4,879

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/mitos-run/mitos-forkd :v1.6.0	979b462ab7d6	stdlib@go1.26.4	1.26.10	1
ghcr.io/mitos-run/mitos-gateway :v1.6.0	017274a28204	stdlib@go1.26.4	1.26.10	1
ghcr.io/mitos-run/mitos-kvm-device-plugin :v1.6.0	63e2b78d03c4	stdlib@go1.26.4	1.26.10	1
ghcr.io/mkutlak/alluredeck-api :0.49.0	3368b34471a3	stdlib@go1.27.2	1.26.10	1
ghcr.io/mmontes11/echoperator :v0.0.4	a544a71c6e3b	stdlib@go1.18.3	1.26.10	1
ghcr.io/mogenius/mogenius-operator :2.32.0	4d50bcb86fec	stdlib@go1.27.2	1.26.10	1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud :latest	179bee5ef8b2	stdlib@go1.24.4	1.26.10	1
ghcr.io/mondu-ai/eks-pod-identity-webhook :latest	c2ac3bad857d	stdlib@go1.26.2	1.26.10	1
ghcr.io/mondu-ai/gar-credential-provider :latest	25090d37afa9	stdlib@go1.26.0	1.26.10	1
ghcr.io/mosn/htnn-controller :v0.3.1	c379e66246be	stdlib@go1.21.12	1.26.10	1
ghcr.io/movetokube/postgres-operator :2.4.0	def57d85a2da	stdlib@go1.25.5	1.26.10	1
ghcr.io/mrueg/netcupscp-exporter :v0.5.2	5b86c2c0b0e0	ca-certificates@20260413-r0 stdlib@go1.26.5	20260909-r3 1.26.10	1
ghcr.io/mschenck/ddns-kubernetes-controller :latest	590d55aab53c	stdlib@go1.19.8	1.26.10	1
ghcr.io/mskazemi/kubeintellect :2.6.0	1d2b74d49f63	stdlib@go1.23.6	1.26.10	1
ghcr.io/msueberkrueb/cloudflare-dyndns :1.0.0	e5c945a3b000	stdlib@go1.25.1	1.26.10	1
ghcr.io/muhmmadayan/fake-network-operator :0.1.0	3806b1fd4a4b	stdlib@go1.23.12	1.26.10	1
ghcr.io/music-assistant/server :2.10.6	45fdb050e069	rustls-webpki@0.103.14 stdlib@go1.25.5 webpki-root-certs@1.0.9	0.103.16 1.26.10 1.0.10	1
ghcr.io/music-assistant/server :2.8.7	eef3ee7810d0	rustls-webpki@0.103.13 stdlib@go1.25.7 webpki-root-certs@1.0.7	0.103.16 1.26.10 1.0.10	1
ghcr.io/mvisonneau/approuvez :v0.1.0	441da62e6cb3	stdlib@go1.15.6	1.26.10	1
ghcr.io/mydecisive/octant :0.1.86	ebbd44abae6c	stdlib@go1.25.14	1.26.10	1
ghcr.io/nabokihms/events_exporter :latest	68d44646e8b2	stdlib@go1.19.5	1.26.10	1
ghcr.io/naval-group/butane-operator :v0.1.1-rc2	85818b510780	stdlib@go1.26.0	1.26.10	1
ghcr.io/ncsa/jupyterhub-metrics/collector :1.3.0	dcb8c731bb1b	stdlib@go1.25.6	1.26.10	1
ghcr.io/nefelim4ag/k8s-ondemand-proxy :0.0.2	078b25d48cf7	stdlib@go1.21.1	1.26.10	1
ghcr.io/nefelim4ag/k8s-ssh-bastion :0.5.0	4d337e14c80b	stdlib@go1.21.11	1.26.10	1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.32.0-alpha	71e24278a049	stdlib@go1.17.3	1.26.10	1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.61.2	f04925fe1fa6	stdlib@go1.22.4	1.26.10	1
ghcr.io/netbirdio/netbird-operator :v0.8.0	ae2c26cfc547	stdlib@go1.26.5	1.26.10	1
ghcr.io/netbox-community/netbox :v4.7.3	1d6e0b5fbd48	rustls-webpki@0.103.14 stdlib@go1.27.1 webpki-root-certs@1.0.9	0.103.16 1.26.10 1.0.10	1
ghcr.io/netbox-community/netbox-operator :0.2.75	d23e28ef483b	stdlib@go1.27.2	1.26.10	1
ghcr.io/netsoc/iamd :1.1.2	2fe6b69b20d7	stdlib@go1.16.6	1.26.10	1
ghcr.io/netsoc/shhd :0.1.6	0bb44992b62c	stdlib@go1.17	1.26.10	1
ghcr.io/netsoc/webspaced :0.5.1	edc238a538a0	stdlib@go1.16.8	1.26.10	1
ghcr.io/nginx/nginx-gateway-fabric :2.4.1	80f3a0a51af5	stdlib@go1.25.7	1.26.10	1
ghcr.io/nginx/nginx-gateway-fabric :2.6.6	c10f734589e9	stdlib@go1.26.4	1.26.10	1
ghcr.io/nginx/nginx-gateway-fabric :edge	e15ba2abf4e6	stdlib@go1.27.2	1.26.10	1
ghcr.io/nicholaswilde/golinks :version-154c581	8e67b26324c5	stdlib@go1.16.5	1.26.10	1
ghcr.io/nicholaswilde/installer :version-0.2.9	47d8ecd310a9	stdlib@go1.15.3	1.26.10	1
ghcr.io/nicholaswilde/notes :version-ee287b9	ab9bc16465bc	stdlib@go1.16.5	1.26.10	1
ghcr.io/nicholaswilde/olivetin :version-2021-07-19	e1d5c8a01008	stdlib@go1.16.5	1.26.10	1
ghcr.io/nicholaswilde/shiori :version-v1.5.0	e0645abe6777	stdlib@go1.16.5	1.26.10	1
ghcr.io/nicholaswilde/static :version-ee8a20c	d1d47c730bc4	stdlib@go1.16.5	1.26.10	1
ghcr.io/nicholaswilde/todo :941c0d3-ls1	d7ba1341a940	stdlib@go1.14.15	1.26.10	1
ghcr.io/nicholaswilde/twtxt :version-0.1.1	58736a73ca10	stdlib@go1.16.5	1.26.10	1
ghcr.io/nicholaswilde/wiki :version-900b76a	6c4f261d8f5e	stdlib@go1.16.5	1.26.10	1
ghcr.io/nicholaswilde/writefreely :version-0.13.1	c3c8481b7e56	stdlib@go1.15.12	1.26.10	1
ghcr.io/niklas-letz/cert-manager-webhook-solidserver :1.0.2	f19a306ce759	stdlib@go1.26.4	1.26.10	1
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent :0.1.0	e0c7cf2415f0	stdlib@go1.17.6	1.26.10	1
ghcr.io/nimbolus/terraform-backend :0.2.2	bf876252fbe1	stdlib@go1.24.13	1.26.10	1
ghcr.io/nlamirault/bbox_exporter :1.0.0	f5dd1f7794c6	stdlib@go1.18.3	1.26.10	1