CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,239; of 18,232 indexed, latest versions
Container images: 6,142; deployed by those charts
Fix available: 6 of 9; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+210 more	1.26.10	6,034
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more	20260909-r3	112
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	92
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	64
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more	0.26.11	12
golang-1.19deb	1.19.8-2	no fix listed	1
kineapk	0.17.2-r3	no fix listed	1
kubernetes-1.37apk	1.37.1-r3	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r5	1

OSV records: CGA-32jh-59ph-xj58 DEBIAN-CVE-2026-111943 GO-2026-6809 RUSTSEC-2026-0381 RUSTSEC-2026-0382 RUSTSEC-2026-0383 CGA-48x4-f6q2-2fc9 CGA-9w23-c7x9-6gcf CGA-pj7v-5f5f-w56q
Also known as: CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending: Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars

Chart

Latest

Affected images

Radar Score

kubetailkubetail

0.26.0

3 of 3 See more

kubetail kubetail 0.26.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kubetail-org/kubetail-cluster-agent :0.7.1	a5eee8cab215	stdlib@go1.24.2	1.26.10
ghcr.io/kubetail-org/kubetail-cluster-api :0.8.2	8e6acd0da9ac	stdlib@go1.25.8	1.26.10
ghcr.io/kubetail-org/kubetail-dashboard :0.17.0	8617f0a7f703	stdlib@go1.25.8	1.26.10

Open the chart page →

3,335

kubeuserkubeuser

0.1.2

1 of 1 See more

kubeuser kubeuser 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/openkube-hub/kubeuser-controller :0.1.2	27cc7b4dfa0a	stdlib@go1.26.8	1.26.10

Open the chart page →

234

kube-vault-controllerkube-vault-controller

1.2.0

1 of 1 See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kupnu4x/kube-vault-controller :1.2.0	3be59109f3d6	stdlib@go1.21.1	1.26.10

Open the chart page →

2,289

kube-vip-cloud-providerkube-vip

0.2.10

1 of 1 See more

kube-vip-cloud-provider kube-vip 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kubevip/kube-vip-cloud-provider :v0.0.12	f8f4e3401f76	stdlib@go1.24.2	1.26.10

Open the chart page →

1,368

admission-controllerkubewarden

6.1.0

2 of 2 See more

admission-controller kubewarden 6.1.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kubewarden/adm-controller/audit-scanner :v1.38.2	c3dda1e1149a	stdlib@go1.27.1	1.26.10
ghcr.io/kubewarden/adm-controller/controller :v1.38.2	383f71d05b44	stdlib@go1.27.1	1.26.10

Open the chart page →

468

runtime-enforcerkubewarden

0.2.1

3 of 3 See more

runtime-enforcer kubewarden 0.2.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.161.0	fd328de25524	stdlib@go1.26.8	1.26.10
ghcr.io/kubewarden/runtime-enforcer/agent :v0.10.1	dc463d8f7553	stdlib@go1.27.1	1.26.10
ghcr.io/kubewarden/runtime-enforcer/controller :v0.10.1	b005743f7868	stdlib@go1.27.1	1.26.10

Open the chart page →

716

kubiks-agentkubiks

0.4.0

3 of 3 See more

kubiks-agent kubiks 0.4.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/beyla :2.2.2	a9cf4560472e	stdlib@go1.24.1	1.26.10
otel/opentelemetry-collector-contrib :0.128.0	1ab0baba0ee3	stdlib@go1.24.4	1.26.10
ghcr.io/kubiks-inc/kubiks-k8s-agent :latest	8611f74b4b99	stdlib@go1.23.10	1.26.10

Open the chart page →

4,910

kubemodkubmod

0.5.2

2 of 2 See more

kubemod kubmod 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kubemod/kubemod :v0.19.1	1f8154f7e80c	stdlib@go1.18	1.26.10
kubemod/kubemod-crt :v1.3.0	028347c9fa77	stdlib@go1.18.1	1.26.10

Open the chart page →

6,708

kubeservice-cosign-webhookkubservice-charts

1.1.1

5 of 5 See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	stdlib@go1.19.12	1.26.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.26.10

Open the chart page →

10,839

kubeservice-cpupools-controllerkubservice-charts

0.1.1

2 of 2 See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	stdlib@go1.19.10	1.26.10
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	stdlib@go1.19.10	1.26.10

Open the chart page →

4,603

kubeservice-custom-limitrangekubservice-charts

1.3.0

5 of 5 See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kubeservice-stack/customlimitrange-manager :v1.3.0	d3ed97d142d4	stdlib@go1.24.1	1.26.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.26.10

Open the chart page →

9,691

kubeservice-ebpf-exporterkubservice-charts

1.2.1

1 of 1 See more

kubeservice-ebpf-exporter kubservice-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/cloudflare/ebpf_exporter :v2.3.0	75370b2ec2bb	stdlib@go1.21.5	1.26.10

Open the chart page →

1,068

kubeservice-namespace-node-affinitykubservice-charts

1.1.2

5 of 5 See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dongjiang1989/ns-node-affinity :latest	451f7823723c	stdlib@go1.18.5	1.26.10
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.26.10
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.26.10

Open the chart page →

10,779

kubeservice-scheduler-pluskubservice-charts

0.2.1

2 of 2 See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	stdlib@go1.19.9	1.26.10
dongjiang1989/node-metrics :latest	3f1f266190bb	stdlib@go1.26.7	1.26.10

Open the chart page →

2,828

ingress-annotatorkuoss

0.3.0

1 of 1 See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/ingress-annotator :v0.3.0	ae179f65d869	stdlib@go1.24.6	1.26.10

Open the chart page →

1,002

kitcaddykvalitetsit

1.5.11

1 of 2 See more

kitcaddy kvalitetsit 1.5.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kvalitetsit/kitcaddy :1.5.11	0e66907ea266	stdlib@go1.26.6	1.26.10

Open the chart page →

449

kube-fencingkvaps

2.4.1

2 of 2 See more

kube-fencing kvaps 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	stdlib@go1.18.8	1.26.10
ghcr.io/kvaps/kube-fencing-switcher :v2.4.0	f8c378e63b78	stdlib@go1.18.8	1.26.10

Open the chart page →

4,154

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	stdlib@go1.15.14	1.26.10
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	stdlib@go1.15.14	1.26.10
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	stdlib@go1.15.14	1.26.10
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	stdlib@go1.15.14	1.26.10

Open the chart page →

22,597

kymaroskymaros

0.6.9

1 of 1 See more

kymaros kymaros 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kymaroshq/kymaros :0.6.9	fb3b88633381	stdlib@go1.25.9	1.26.10

Open the chart page →

680

chibisafel4g

0.1.1

2 of 3 See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
chibisafe/chibisafe-server :latest	a3a8606cd9b5	stdlib@go1.20.12	1.26.10
library/caddy :2-alpine	d8542f48d34a	stdlib@go1.26.8	1.26.10

Open the chart page →

4,040

checkoutlabs64io-helm-charts

0.11.13

1 See more

checkout labs64io-helm-charts 0.11.13

1 container image this version deploys carries CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :18	edb0c08dc33b	stdlib@go1.24.6	1.26.10

Open the chart page →

—

payment-gatewaylabs64io-helm-charts

0.10.14

1 See more

payment-gateway labs64io-helm-charts 0.10.14

1 container image this version deploys carries CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :18	edb0c08dc33b	stdlib@go1.24.6	1.26.10

Open the chart page →

—

lagoon-remotelagoon-charts

0.107.0

1 of 1 See more

lagoon-remote lagoon-charts 0.107.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	stdlib@go1.24.3	1.26.10

Open the chart page →

3,428

lakilaki

1.11.0

1 of 2 See more

laki laki 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/laki-n/laki :v1.6.0	599a10c453a3	stdlib@go1.27.0	1.26.10

Open the chart page →

814

landelijketabellencataloguslandelijketabellencatalogus

1.0.0

1 of 3 See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	stdlib@go1.13.10	1.26.10

Open the chart page →

9,596

glancelbenicio-community

0.1.3

1 of 1 See more

glance lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
glanceapp/glance :latest	bc5a392672c1	stdlib@go1.27.1	1.26.10

Open the chart page →

402

lgtmlgtm

0.31.1

7 of 9 See more

lgtm lgtm 0.31.1

7 of the 9 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.3-distroless	202e5d5b3f84	stdlib@go1.26.7	1.26.10
grafana/loki :3.7.8	1107dd5274e0	stdlib@go1.26.6	1.26.10
grafana/pyroscope :2.4.0	b7e62699a274	stdlib@go1.26.9	1.26.10
grafana/tempo :3.1.0	3076b8dcdfb3	stdlib@go1.27.1	1.26.10
ghcr.io/jkroepke/kube-webhook-certgen :1.8.9	58e4ac2e15bf	stdlib@go1.27.1	1.26.10
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.160.0	5323a0df9508	stdlib@go1.26.8	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	stdlib@go1.26.8	1.26.10

Open the chart page →

1,732

lgtm-stacklgtm-stack

0.1.3

5 of 8 See more

lgtm-stack lgtm-stack 0.1.3

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.18.1	0f4434c92b3e	stdlib@go1.26.5	1.26.10
grafana/grafana :13.1.0	121a7a9ece6d	stdlib@go1.25.7	1.26.10
grafana/loki :3.7.6	efd47c67f9ba	stdlib@go1.26.5	1.26.10
grafana/mimir :3.2.0	736f7459913d	stdlib@go1.26.5	1.26.10
grafana/tempo :2.10.8	f0561deb1c68	stdlib@go1.26.5	1.26.10

Open the chart page →

4,622

keptn-cert-managerlifecycle-toolkit

0.3.0

1 of 1 See more

keptn-cert-manager lifecycle-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v3.0.0	b82064b0e339	stdlib@go1.23.3	1.26.10

Open the chart page →

1,066

keptn-lifecycle-operatorlifecycle-toolkit

0.6.0

1 of 1 See more

keptn-lifecycle-operator lifecycle-toolkit 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/lifecycle-operator :v2.0.0	866ced256a8c	stdlib@go1.23.3	1.26.10

Open the chart page →

1,183

keptn-metrics-operatorlifecycle-toolkit

0.5.0

1 of 1 See more

keptn-metrics-operator lifecycle-toolkit 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/metrics-operator :v2.1.0	dc48471c7cf8	stdlib@go1.23.3	1.26.10

Open the chart page →

1,419

life-dashboardlife-dashboard

1.2.0

1 of 2 See more

life-dashboard life-dashboard 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/owen282000/life-dashboard-grafana :1.2.0	5f4a5da032bf	stdlib@go1.26.9	1.26.10

Open the chart page →

334

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	stdlib@go1.13.8	1.26.10

Open the chart page →

5,950

linkerd-jaegerlinkerd2-edge

30.14.11-edge

2 of 4 See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	stdlib@go1.17.6	1.26.10
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	stdlib@go1.20.7	1.26.10

Open the chart page →

6,325

litellmlitellm-helm

0.2.0

1 of 1 See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/berriai/litellm-database :litellm_stable_release_branch-v1.75.5-stable	ab63d26a8a2c	ca-certificates@20250619-r5 rustls-webpki@0.103.4 webpki-roots@1.0.2	20260909-r3 0.103.16 0.26.11

Open the chart page →

5,350

halitesql

0.1.5

1 of 2 See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/litesql/ha :latest	992944f8e2b5	stdlib@go1.27.2	1.26.10

Open the chart page →

601

litlyxlitlyx

0.2.0

1 of 5 See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/mongo :8.0.11	dca8d11fe467	stdlib@go1.23.8	1.26.10

Open the chart page →

9,907

go-hello-worldloafoe

0.17.0

1 of 1 See more

go-hello-world loafoe 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/go-hello-world :v2.16.0	22d94845e317	ca-certificates@20260909-r2 stdlib@go1.26.0	20260909-r3 1.26.10

Open the chart page →

623

stackradarlockdep

0.2.0

4 of 4 See more

stackradar lockdep 0.2.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :18-alpine	77f585114c32	stdlib@go1.24.6	1.26.10
ghcr.io/lockdep/stackradar-client :0.2.0	1ef6c7132778	stdlib@go1.23.12	1.26.10
ghcr.io/lockdep/stackradar-scanner :0.7.0	45d82534d1d5	stdlib@go1.25.7	1.26.10
ghcr.io/lockdep/stackradar-server :0.2.0	46eed1f3046a	stdlib@go1.26.8	1.26.10

Open the chart page →

5,899

locust-k8s-operatorlocust-k8s-operator

2.3.1

1 of 1 See more

locust-k8s-operator locust-k8s-operator 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
lotest/locust-k8s-operator :2.3.1	859b0d36f371	ca-certificates@20260611-r0 stdlib@go1.26.7	20260909-r3 1.26.10

Open the chart page →

281

home-assistantloeken-at-home

2026.9.2

1 of 1 See more

home-assistant loeken-at-home 2026.9.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
loeken/home-assistant :2026.9.2	b1dff5b4c593	rustls-webpki@0.103.13 stdlib@go1.25.6 webpki-root-certs@1.0.9	0.103.16 1.26.10 1.0.10

Open the chart page →

2,936

jspolicyloft

0.2.2

1 of 1 See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
loftsh/jspolicy :0.2.2	25deb9bd2683	stdlib@go1.17.13	1.26.10

Open the chart page →

3,396

vcluster-eksloft

0.0.0-ci.3

3 of 4 See more

vcluster-eks loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	stdlib@go1.16.15	1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.26.10

Open the chart page →

5,787

vcluster-k0sloft

0.0.0-ci.3

1 of 2 See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	stdlib@go1.19.4	1.26.10

Open the chart page →

4,141

log2rbac-operatorlog2rbac-operator

0.0.5

1 of 1 See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jkremser/log2rbac :v0.0.5	e35cf56ef183	stdlib@go1.17.6	1.26.10

Open the chart page →

3,066

logclilogcli

0.1.0

1 of 1 See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	stdlib@go1.16.2	1.26.10

Open the chart page →

4,209

lokxylokxy

0.2.0

1 of 1 See more

538

plexluiscajl

1.0.1

1 of 2 See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :latest	fc852e4c2135	stdlib@go1.27.1	1.26.10

Open the chart page →

793

lumenvoxlumenvox

8.0.0

11 of 11 See more

lumenvox lumenvox 8.0.0

11 of the 11 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
lumenvox/admin-portal :8.0	258583dde8a7	stdlib@go1.27.1	1.26.10
lumenvox/archive :8.0	4611915d66f6	stdlib@go1.27.1	1.26.10
lumenvox/cloud-init-tools :8.0	c01faf8d628d	stdlib@go1.27.1	1.26.10
lumenvox/configuration :8.0	7badfce0df13	stdlib@go1.27.1	1.26.10
lumenvox/deployment :8.0	dce4f18b4945	stdlib@go1.27.1	1.26.10
lumenvox/deployment-portal :8.0	4cf9bad0381d	stdlib@go1.27.1	1.26.10
lumenvox/file-store :8.0	8090031da992	stdlib@go1.27.1	1.26.10
lumenvox/license :8.0	1f985ca4d603	stdlib@go1.27.1	1.26.10
lumenvox/management-api :8.0	98fe71067039	stdlib@go1.27.1	1.26.10
lumenvox/resource :8.0	26edd01fa2ee	stdlib@go1.27.1	1.26.10
lumenvox/storage :8.0	57d15feb3603	stdlib@go1.27.1	1.26.10

Open the chart page →

2,671

voice-biometricslumenvox

2.0.1

8 of 26 See more

voice-biometrics lumenvox 2.0.1

8 of the 26 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.10
library/traefik :v2.5	7d5a6ae66572	stdlib@go1.17.6	1.26.10
lumenvox/cloud-init-tools :2.0.0	7ff037a71c50	stdlib@go1.17.3	1.26.10
lumenvox/cloud-license :2.0.0	9a69862e1248	stdlib@go1.17.3	1.26.10
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.26.10
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	stdlib@go1.14.4	1.26.10
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	stdlib@go1.15.8	1.26.10
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	stdlib@go1.16.2	1.26.10

Open the chart page →

84,260

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/oxidecomputer/cluster-api-provider-oxide :0.2.3	7b05d3bbfbfa	ca-certificates@20260413-r0 stdlib@go1.26.4	20260909-r3 1.26.10	1
ghcr.io/p10node/p10logs-agent :1.1.5	0f8bb407d9fc	stdlib@go1.26.9	1.26.10	1
ghcr.io/p10node/p10logs-hub :1.1.5	af5bc61c0026	stdlib@go1.26.9	1.26.10	1
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	stdlib@go1.15.12	1.26.10	1
ghcr.io/pansalut/koffan :v2.13.1	2c4dfb1458e6	stdlib@go1.26.6	1.26.10	1
ghcr.io/paperclipinc/hermes-operator :v0.2.0	7a491ec9b0ff	stdlib@go1.27.1	1.26.10	1
ghcr.io/paperclipinc/openclaw-operator :v0.40.0	38e0da31c520	stdlib@go1.25.14	1.26.10	1
ghcr.io/paperclipinc/paperclip-operator :v0.19.1	0984b890eb38	stdlib@go1.25.0	1.26.10	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	stdlib@go1.19.8	1.26.10	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	stdlib@go1.24.4	1.26.10	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	stdlib@go1.24.4	1.26.10	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	stdlib@go1.24.4	1.26.10	1
ghcr.io/paperless-ngx/paperless-ngx :2.10.1	a132c2ac7c57	stdlib@go1.19.8	1.26.10	1
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	rustls-webpki@0.103.13 stdlib@go1.24.4 webpki-root-certs@1.0.9	0.103.16 1.26.10 1.0.10	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	stdlib@go1.19.8	1.26.10	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	stdlib@go1.24.4	1.26.10	1
ghcr.io/papra-hq/papra :26.7.0-rootless	bf4a66e776d0	stdlib@go1.23.12	1.26.10	1
ghcr.io/parca-dev/parca :v0.24.2	3776500fde82	stdlib@go1.25.1	1.26.10	1
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	stdlib@go1.21.4	1.26.10	1
ghcr.io/parca-dev/parca-agent :v0.42.0	adc0eeb4dd05	ca-certificates@20250619-r6 stdlib@go1.24.7	20260909-r3 1.26.10	1
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.1	e58c98b4d28a	stdlib@go1.26.8	1.26.10	1
ghcr.io/patricklaabs/sample-application :0.0.1	f0935fa2eee3	stdlib@go1.22.0	1.26.10	1
ghcr.io/pbufio/registry :v0.4.1	77a36c035b4b	stdlib@go1.25.5	1.26.10	1
ghcr.io/peak-scale/capsule-argo-addon :0.8.0	64b8c5389b33	ca-certificates@20260611-r1 stdlib@go1.27.1	20260909-r3 1.26.10	1
ghcr.io/peak-scale/observability-tenancy/cortex-proxy :0.4.1	1838720c13b2	ca-certificates@20250619-r5 stdlib@go1.24.6	20260909-r3 1.26.10	1
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	ca-certificates@20250619-r5 stdlib@go1.24.6	20260909-r3 1.26.10	1
ghcr.io/peak-scale/sops-operator :0.10.1	1da9b716b792	ca-certificates@20260413-r0 stdlib@go1.26.4	20260909-r3 1.26.10	1
ghcr.io/peimanja/artifactory_exporter :v1.16.0	d3e3929a3d2b	stdlib@go1.21.13	1.26.10	1
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	stdlib@go1.18.4	1.26.10	1
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	ca-certificates@20241121-r1 stdlib@go1.22.4	20260909-r3 1.26.10	1
ghcr.io/petersr/spiffile-operator :0.1.4	411070249287	stdlib@go1.26.4	1.26.10	1
ghcr.io/pgdogdev/pgdog :v0.1.61	611f2874dcf0	stdlib@go1.26.7	1.26.10	1
ghcr.io/phoeluga/synology-proxy-operator :0.0.9	a0b74674d0e3	stdlib@go1.27.1	1.26.10	1
ghcr.io/pierinho13/github-platform-operator :v0.7.10	0c76ab7b4305	stdlib@go1.26.9	1.26.10	1
ghcr.io/pii-shield/pii-shield-operator :2.2.8	27ff8a831e55	stdlib@go1.27.2	1.26.10	1
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	stdlib@go1.14.6	1.26.10	1
ghcr.io/platform-mesh/platform-mesh/account-operator :v0.15.5	fa4923226063	stdlib@go1.26.7	1.26.10	1
ghcr.io/platform-mesh/platform-mesh/extension-manager-operator :v0.10.0	9371fcf05f76	stdlib@go1.26.7	1.26.10	1
ghcr.io/platform-mesh/platform-mesh/kubernetes-graphql-gateway :v1.20.0	2e6c9c111893	stdlib@go1.26.7	1.26.10	1
ghcr.io/platform-mesh/platform-mesh/platform-mesh-operator :v0.89.1	3814939be25d	stdlib@go1.26.7	1.26.10	1
ghcr.io/platform-mesh/platform-mesh/rebac-authz-webhook :v0.12.0	fbb6df9ad2af	stdlib@go1.26.7	1.26.10	1
ghcr.io/platform-mesh/platform-mesh/security-operator :v0.36.0	9b26032812fd	stdlib@go1.26.7	1.26.10	1
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces :v0.17.0	bb2ee6241719	stdlib@go1.26.7	1.26.10	1
ghcr.io/platformrelay/kollect :v0.21.0	a86edc5ec3a8	stdlib@go1.27.1	1.26.10	1
ghcr.io/pocket-id/pocket-id :v2.14.0	01540977dcf4	stdlib@go1.26.6	1.26.10	1
ghcr.io/pocket-id/pocket-id :v2.18.0	323e7ef5bfac	stdlib@go1.27.1	1.26.10	1
ghcr.io/podtato-head/entry :latest	c3d9d9c98be7	stdlib@go1.19	1.26.10	1
ghcr.io/podtato-head/hat :latest	de37ff39a4c0	stdlib@go1.19	1.26.10	1
ghcr.io/podtato-head/left-arm :latest	97596c95276a	stdlib@go1.19	1.26.10	1
ghcr.io/podtato-head/left-leg :latest	00bb31622b1e	stdlib@go1.19	1.26.10	1