StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score
yunikornyunikornVerified publisher1.10.03 of 3See more

yunikorn yunikorn 1.10.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/yunikorn:scheduler-1.10.049fc54894fdf
stdlib@go1.26.7
1.26.10
apache/yunikorn:web-1.10.090e6a62a578a
stdlib@go1.26.7
1.26.10
apache/yunikorn:admission-1.10.095c6b951f38a
stdlib@go1.26.7
1.26.10

Open the chart page →

655
zenmlzenml0.98.01 of 1See more

zenml zenml 0.98.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.98.06a03880ace49
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10

Open the chart page →

1,268
eshoponabpabp-charts1.0.02 of 15See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
stdlib@go1.18.2
1.26.10
library/postgres:14.13162a6ead070
stdlib@go1.16.7
1.26.10

Open the chart page →

24,360
moon2aerokube2.8.23 of 3See more

moon2 aerokube 2.8.2

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/aerokube/moon:2.8.2072f3c5592dc
stdlib@go1.27.1
1.26.10
quay.io/aerokube/moon-conf:2.8.235c465ab25d8
stdlib@go1.27.1
1.26.10
quay.io/aerokube/moon-ui:2.8.2f374d0b9953b
stdlib@go1.27.1
1.26.10

Open the chart page →

684
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.2.0-debian-11-r113e65a6b89e38
stdlib@go1.18.2
1.26.10

Open the chart page →

4,962
pod-gatewayangelnu7.1.11 of 2See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/angelnu/gateway-admision-controller:v3.12.06f6ab596afd5
stdlib@go1.24.2
1.26.10

Open the chart page →

1,897
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.10086c9d9ea1e37c4
stdlib@go1.27.1
1.26.10

Open the chart page →

1,110
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
stdlib@go1.16.3
1.26.10

Open the chart page →

5,135
aperture-controlleraperture2.34.03 of 5See more

aperture-controller aperture 2.34.0

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
fluxninja/aperture-operator:2.34.0356d7aa86632
stdlib@go1.21.5
1.26.10
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
quay.io/prometheus/prometheus:v2.33.591100b06e86d
stdlib@go1.17.8
1.26.10

Open the chart page →

7,633
k8upappuio2.0.51 of 1See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
stdlib@go1.18
1.26.10

Open the chart page →

4,460
limesurveyarea-42Verified publisher0.3.1011 of 2See more

limesurvey area-42 0.3.101

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.10

Open the chart page →

5,400
artifact-controllerartifact-controllerOfficialVerified publisher0.9.11 of 1See more

artifact-controller artifact-controller 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kargops/artifact-controller:v0.9.10b42a68e9e27
stdlib@go1.26.7
1.26.10

Open the chart page →

239
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
stdlib@go1.16.9
1.26.10

Open the chart page →

10,530
prometheusaveshaVerified publisher19.3.04 of 4See more

prometheus avesha 19.3.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.26.10
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.26.10
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
stdlib@go1.19.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.7.0a15ca437f230
stdlib@go1.19.3
1.26.10

Open the chart page →

8,860
aws-calicoaws0.3.111 of 1See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.20.1379efe0c2541
stdlib@go1.15.2
1.26.10

Open the chart page →

3,521
aws-node-termination-handleraws-node-termination-handler0.27.61 of 1See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
stdlib@go1.25.8
1.26.10

Open the chart page →

956
snapschedulerbackube-helm-chartsVerified publisher3.5.02 of 2See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/backube/snapscheduler:3.5.035ac95c51780
stdlib@go1.24.3
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.10

Open the chart page →

2,336
yataibentomlVerified publisher1.1.131 of 1See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
stdlib@go1.20.7
1.26.10

Open the chart page →

2,666
yatai-deploymentbentomlVerified publisher1.1.211 of 2See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
stdlib@go1.19.13
1.26.10

Open the chart page →

1,902
boundaryboundaryVerified publisher0.1.01 of 1See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/boundary:0.21.037bf86488b74
stdlib@go1.25.1
1.26.10

Open the chart page →

2,257
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
stdlib@go1.19.12
1.26.10

Open the chart page →

68,761
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
stdlib@go1.21.4
1.26.10

Open the chart page →

2,649
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
stdlib@go1.19.9
1.26.10

Open the chart page →

2,473
geoservercloudcamptocamp23.0.27 of 7See more

geoservercloud camptocamp2 3.0.2

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.2244572a8e01d
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-gwc:3.0.25f81a737aff3
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-rest:3.0.2c14c7be99fd7
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wcs:3.0.254cfe408a3ef
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-webui:3.0.23d01d85dcff4
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wfs:3.0.267be5bf231e1
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wms:3.0.26243931b4cc7
stdlib@go1.27.1
1.26.10

Open the chart page →

5,733
version-checkercert-managerVerified publisher0.11.01 of 1See more

version-checker cert-manager 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.11.0eae9a374d22f
stdlib@go1.26.4
1.26.10

Open the chart page →

613
cert-managerchoerodon1.8.24 of 4See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
stdlib@go1.17.11
1.26.10

Open the chart page →

11,954
popeyechristianhuthVerified publisher2.4.31 of 1See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
stdlib@go1.23.5
1.26.10

Open the chart page →

1,991
sbom-operatorckotzbauerVerified publisher0.48.01 of 1See more

sbom-operator ckotzbauer 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/sbom-operator:0.47.02916a55055f1
stdlib@go1.26.9
1.26.10

Open the chart page →

9
hellocloudechoVerified publisher0.1.21 of 1See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudecho/hello:0.1.0f76ede067ab9
stdlib@go1.16.6
1.26.10

Open the chart page →

2,828
cloudflare-exportercloudflare-exporter0.2.31 of 1See more

cloudflare-exporter cloudflare-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/lablabs/cloudflare_exporter:0.0.1670d74ec46602
stdlib@go1.22.3
1.26.10

Open the chart page →

1,396
ghostcloudpirates-ghostVerified publisher0.20.323 of 3See more

ghost cloudpirates-ghost 0.20.32

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/ghost:6.72.0c0d83a8d4522
stdlib@go1.26.4
1.26.10
library/mariadb:13.0.20e4bb0f339fe
stdlib@go1.24.6
1.26.10
library/mariadb:12.0.25b6a1eac15b8
stdlib@go1.18.2
1.26.10

Open the chart page →

8,837
cloudprobercloudproberOfficialVerified publisher1.14.281 of 1See more

cloudprober cloudprober 1.14.28

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudprober/cloudprober:v0.14.60902d8adf871
stdlib@go1.26.6
1.26.10

Open the chart page →

281
openstack-manila-csicloud-provider-openstack2.37.15 of 5See more

openstack-manila-csi cloud-provider-openstack 2.37.1

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/manila-csi-plugin:v1.37.146373e7e6a4b
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
stdlib@go1.24.6
1.26.10

Open the chart page →

5,360
dumpscriptcloudscriptVerified publisher1.11.01 of 1See more

dumpscript cloudscript 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.45-alpine-edge99732098a0f3
stdlib@go1.27.1
1.26.10

Open the chart page →

257
clowardenclowarden0.2.32 of 4See more

clowarden clowarden 0.2.3

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
stdlib@go1.25.3
1.26.10

Open the chart page →

7,267
cluster-manager-servercluster-manager-server1.8.01 of 1See more

cluster-manager-server cluster-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server:1.8.0364b3ff0fcb7
stdlib@go1.24.5
1.26.10

Open the chart page →

1,293
cluster-registrycluster-registry-controller0.2.121 of 1See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cisco-open/cluster-registry-controller:v0.2.12937eff91df1e
stdlib@go1.18
1.26.10

Open the chart page →

2,793
coder-observabilitycoder-observabilityVerified publisher0.8.013 of 21See more

coder-observability coder-observability 0.8.0

13 of the 21 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
burningalchemist/sql_exporter:latest3dabcb7c74e9
stdlib@go1.26.9
1.26.10
grafana/alloy:v1.20.12aa2099af76c
stdlib@go1.26.7
1.26.10
grafana/grafana:10.4.19a9043254ba16
stdlib@go1.24.3
1.26.10
grafana/loki:3.1.0d947e68a84d9
stdlib@go1.22.2
1.26.10
grafana/loki-canary:3.1.039baf6d67f85
stdlib@go1.22.2
1.26.10
prom/memcached-exporter:v0.14.2d8a61419b841
stdlib@go1.21.5
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.93.00ccb22ca9f3f
stdlib@go1.26.5
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.0142a1f11df8d
stdlib@go1.26.8
1.26.10
quay.io/prometheus/alertmanager:v0.33.19e082985f56f
stdlib@go1.26.4
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
stdlib@go1.26.5
1.26.10
quay.io/prometheuscommunity/postgres-exporter:latestac5ec343104f
stdlib@go1.26.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.10

Open the chart page →

14,967
convertigoconvertigoOfficialVerified publisher8.4.62 of 5See more

convertigo convertigo 8.4.6

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
stdlib@go1.21.5
1.26.10
timescale/timescaledb:latest-pg166f139d560429
stdlib@go1.26.2
1.26.10

Open the chart page →

78,071
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
stdlib@go1.16.6
1.26.10

Open the chart page →

4,348
cosmocosmo-platformOfficialVerified publisher0.22.16 of 10See more

cosmo cosmo-platform 0.22.1

6 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
stdlib@go1.24.6
1.26.10
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
stdlib@go1.21.10
1.26.10
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
stdlib@go1.22.3
1.26.10
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
stdlib@go1.23.6
1.26.10
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
stdlib@go1.23.6
1.26.10
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
stdlib@go1.20.7
1.26.10

Open the chart page →

93,166
cosmotech-apicosmotech-apiVerified publisher5.3.11 of 1See more

cosmotech-api cosmotech-api 5.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-api:5.3.12ad55850c106
ca-certificates@20260909-r2
20260909-r3

Open the chart page →

88
ocularcrashoverride-helm-chartsVerified publisher0.5.21 of 1See more

ocular crashoverride-helm-charts 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/crashappsec/ocular-controller:v0.4.122060cf61e0e
stdlib@go1.26.6
1.26.10

Open the chart page →

269
crossviewcrossviewOfficialVerified publisher4.6.02 of 2See more

crossview crossview 4.6.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/crossplane-contrib/crossview:v4.6.07b54c5ba60e5
stdlib@go1.25.14
1.26.10

Open the chart page →

2,164
dapr-dashboarddapr0.15.01 of 1See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
daprio/dashboard:0.15.04be696707bd1
stdlib@go1.21.13
1.26.10

Open the chart page →

1,993
db-operatordb-operator-ng3.17.01 of 1See more

db-operator db-operator-ng 3.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/db-operator/db-operator:2.44.04a789f7347d8
stdlib@go1.26.9
1.26.10

Open the chart page →

75
deepflowdeepflow6.2.2015 of 8See more

deepflow deepflow 6.2.201

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
stdlib@go1.18.3
1.26.10
deepflowce/deepflow-init-grafana:v6.2.27cd16719eb57
stdlib@go1.19.3
1.26.10
deepflowce/deepflow-server:v6.2.21477e7334d13
stdlib@go1.18.10
1.26.10
deepflowce/mysql:8.0.313d7ae561cf60
stdlib@go1.16.7
1.26.10
grafana/grafana:9.3.6e5a9655dabef
stdlib@go1.19.4
1.26.10

Open the chart page →

21,543
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
stdlib@go1.21.10
1.26.10

Open the chart page →

4,457
kube-benchdeliveryheroVerified publisher0.1.171 of 1See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
stdlib@go1.21.7
1.26.10

Open the chart page →

2,348
listmonkdeliveryheroVerified publisher0.1.121 of 1See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
listmonk/listmonk:v2.1.0d2eac77ddfad
stdlib@go1.17.6
1.26.10

Open the chart page →

3,728

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/podtato-head/right-arm:latest5f8f97a60558
stdlib@go1.19
1.26.10
1
ghcr.io/podtato-head/right-leg:latest03e125b9279e
stdlib@go1.19
1.26.10
1
ghcr.io/port-labs/ocean-gateway:latest452eccee99ba
stdlib@go1.25.14
1.26.10
1
ghcr.io/postfinance/kubelet-csr-approver:v1.2.156469ef517d2b
ca-certificates@20260611-r1
stdlib@go1.26.7
20260909-r3
1.26.10
1
ghcr.io/poweradmin/cert-manager-webhook-poweradmin:v0.2.177cfe924ad09e
stdlib@go1.26.9
1.26.10
1
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
stdlib@go1.23.5
1.26.10
1
ghcr.io/primedns/cert-manager-webhook-primedns:0.1.172c9886968e6
stdlib@go1.26.9
1.26.10
1
ghcr.io/privacyengineering/collector-go:main7217f1a4fa28
stdlib@go1.17.13
1.26.10
1
ghcr.io/privacyengineering/consumer:main73f59c032812
stdlib@go1.17.13
1.26.10
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
stdlib@go1.20.11
1.26.10
1
ghcr.io/processone/ejabberd:latestec5cf7bc8562
stdlib@go1.25.14
1.26.10
1
ghcr.io/projectcapsule/capsule-addon-fluxcd:0.2.2e0baf564b706
ca-certificates@20241010-r2
stdlib@go1.23.4
20260909-r3
1.26.10
1
ghcr.io/projectcapsule/change-windows:0.1.4f9ba3451f60b
stdlib@go1.27.1
1.26.10
1
ghcr.io/projectcapsule/resource-permits:0.0.315e4dbbe8b5b
stdlib@go1.27.1
1.26.10
1
ghcr.io/projectcontour/contour:v1.30.0b12824d7eb58
stdlib@go1.22.5
1.26.10
1
ghcr.io/projectcontour/contour:v1.33.0cd6e13fa882d
stdlib@go1.25.1
1.26.10
1
ghcr.io/projectcontour/contour:v1.33.7d88264ed084a
stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64
1.26.10
1
ghcr.io/projecthelena/warden:v0.9.0a2df64f001f6
stdlib@go1.25.13
1.26.10
1
ghcr.io/projection-operator/projection:0.3.2d06374430a17
stdlib@go1.26.3
1.26.10
1
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
stdlib@go1.25.6
1.26.10
1
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
stdlib@go1.26.4
1.26.10
1
ghcr.io/prymitive/karma:v0.13190a10c5c6793
stdlib@go1.26.3
1.26.10
1
ghcr.io/prymitive/karma:v0.85d06892218680
stdlib@go1.16.3
1.26.10
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
stdlib@go1.21.6
1.26.10
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
stdlib@go1.26.4
1.26.10
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
stdlib@go1.26.4
1.26.10
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
stdlib@go1.20.10
1.26.10
1
ghcr.io/pulumi-labs/pulumi-exporter:0.1.45415d5a46e7d
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
1
ghcr.io/pulumi/pulumi-esc-csi-provider:0.1.13fb058e93502
ca-certificates@20241010-r2
stdlib@go1.23.1
20260909-r3
1.26.10
1
ghcr.io/punchplatform/operator:8.1-dev2a9536c8cee2
stdlib@go1.22.0
1.26.10
1
ghcr.io/punchplatform/punch-board:8.1-latestb03168275d1c
stdlib@go1.21.3
1.26.10
1
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
stdlib@go1.23.3
1.26.10
1
ghcr.io/qaoru/mosquitto_exporter:2.0.02058ad337e19
stdlib@go1.25.14
1.26.10
1
ghcr.io/qatr-io/gatewai/gateway:v0.25.05147fc07f48f
stdlib@go1.25.14
1.26.10
1
ghcr.io/qjoly/pr-gitops-grafana-annotation:latest6a75c6b497ed
stdlib@go1.26.5
1.26.10
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
stdlib@go1.25.12
1.26.10
1
ghcr.io/quenchworks/images/cockroachdba1de8e5c5a1a
ca-certificates@20260909-r1
20260909-r3
1
ghcr.io/quenchworks/images/cosmian-kmsb6140387c95f
webpki-roots@1.0.9
0.26.11
1
ghcr.io/quenchworks/images/meilisearch02f71e56fb1e
webpki-roots@1.0.7
0.26.11
1
ghcr.io/quenchworks/images/mosquitto9f8164b2c60f
ca-certificates@20260909-r2
20260909-r3
1
ghcr.io/quenchworks/images/quickwit4e60c8471bf8
ca-certificates@20260909-r2
20260909-r3
1
ghcr.io/quenchworks/images/vclustere0f1be5cf217
kine@0.17.2-r3
no fix listed
1
ghcr.io/rabbitmq/cluster-operator:2.17.25d690e6cd856
stdlib@go1.25.4
1.26.10
1
ghcr.io/rabbitmq/cluster-operator:2.23.09236fb4f559b
stdlib@go1.27.1
1.26.10
1
ghcr.io/rabbitmq/cluster-operator:2.23.1a6794c391297
stdlib@go1.27.2
1.26.10
1
ghcr.io/rabbitmq/messaging-topology-operator:1.20.427988ec3a9f2
stdlib@go1.27.2
1.26.10
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
stdlib@go1.26.2
1.26.10
1
ghcr.io/raffis/mongodb-query-exporter:v5.1.0ca6ac8a5b329
stdlib@go1.20.5
1.26.10
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
stdlib@go1.20.7
1.26.10
1
ghcr.io/ravibagri5/platform-bom:1.2.0d0c171242aa5
stdlib@go1.27.2
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.