StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56q
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
stdlib@go1.18.7
1.26.10

Open the chart page →

4,457
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.3211 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

11 of the 17 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
stdlib@go1.25.7
1.26.10
grafana/grafana:12.3.12175aaa91c96
stdlib@go1.25.5
1.26.10
grafana/loki:3.6.73c8fd3570dd9
stdlib@go1.24.13
1.26.10
grafana/loki-canary:3.6.70dac7d5cb383
stdlib@go1.24.13
1.26.10
grafana/tempo:2.9.065a578975943
stdlib@go1.25.1
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
stdlib@go1.25.6
1.26.10
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
stdlib@go1.25.7
1.26.10
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
quay.io/prometheus/prometheus:v3.10.07571a304e67f
stdlib@go1.26.0
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

19,098
stuck-pod-cleanerk8s-stuck-pod-cleanerVerified publisher0.1.01 of 1See more

stuck-pod-cleaner k8s-stuck-pod-cleaner 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/kubectl:latest599e67d36ff5
stdlib@go1.26.9
1.26.10

Open the chart page →

100
kafka-canarykafka-canaryVerified publisher0.9.01 of 1See more

kafka-canary kafka-canary 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/taekjaskyli/kafka-canary:0.9.016b91402a5ca
stdlib@go1.26.8
1.26.10

Open the chart page →

248
karpenterkarpenter-provider-gcpVerified publisher0.7.01 of 1See more

karpenter karpenter-provider-gcp 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudpilotai/gcp/karpenter:v0.7.01a907c29920f
ca-certificates@20260909-r2
stdlib@go1.27.0
20260909-r3
1.26.10

Open the chart page →

242
kconmon-ngkconmon-ngVerified publisher2.5.12 of 2See more

kconmon-ng kconmon-ng 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/esdmitrii/kconmon-ng-agent:2.5.10cbfd4f7a9f5
stdlib@go1.27.1
1.26.10
ghcr.io/esdmitrii/kconmon-ng-controller:2.5.1ae1eda37ec0f
stdlib@go1.27.1
1.26.10

Open the chart page →

456
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
stdlib@go1.24.7
1.26.10

Open the chart page →

9,142
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
stdlib@go1.24.4
1.26.10

Open the chart page →

6,818
keda-add-ons-httpkedacore0.16.03 of 3See more

keda-add-ons-http kedacore 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kedacore/http-add-on-interceptor:0.16.03a9a454b949e
stdlib@go1.27.1
1.26.10
ghcr.io/kedacore/http-add-on-operator:0.16.02ae0076d549f
stdlib@go1.27.1
1.26.10
ghcr.io/kedacore/http-add-on-scaler:0.16.0db5223b1a375
stdlib@go1.27.1
1.26.10

Open the chart page →

765
mongodb-operatorkeiailabVerified publisher1.16.101 of 1See more

mongodb-operator keiailab 1.16.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keiailab/mongodb-operator:v1.16.10fd3625695d18
stdlib@go1.26.8
1.26.10

Open the chart page →

232
valkey-operatorkeiailabVerified publisher1.5.41 of 1See more

valkey-operator keiailab 1.5.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keiailab/valkey-operator:1.5.42fd8f2768634
stdlib@go1.26.8
1.26.10

Open the chart page →

232
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
stdlib@go1.20.7
1.26.10

Open the chart page →

6,387
keycloakkeycloak1.14.11 of 2See more

keycloak keycloak 1.14.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/docker/keycloak-ppolicy:0.6.09895d6915075
ca-certificates@20260413-r0
stdlib@go1.25.7
20260909-r3
1.26.10

Open the chart page →

690
keycloak-client-operatorkeycloak-client-operator0.9.11 of 1See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
stdlib@go1.24.5
1.26.10

Open the chart page →

1,039
keydbkeydb-helmVerified publisher1.0.61 of 1See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
stdlib@go1.16.7
1.26.10

Open the chart page →

6,592
giteakeyporttech0.2.102 of 4See more

gitea keyporttech 0.2.10

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
stdlib@go1.14.8
1.26.10
library/postgres:115d2aa4a7b5f9
stdlib@go1.16.7
1.26.10

Open the chart page →

7,742
kikplatekikplateVerified publisher0.22.02 of 3See more

kikplate kikplate 0.22.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
ghcr.io/kikplate/kikplate-api:main2fbce0601a3c
stdlib@go1.25.11
1.26.10

Open the chart page →

3,483
kitekite0.16.01 of 1See more

kite kite 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kite-org/kite:v0.16.0951616cbaf9c
stdlib@go1.26.8
1.26.10

Open the chart page →

276
netbirdkitstream-netbird0.7.21 of 3See more

netbird kitstream-netbird 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
netbirdio/netbird-server:0.81.3541ecef7e98a
stdlib@go1.26.7
1.26.10

Open the chart page →

1,128
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:latest0e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

4,874
kodboxkodboxVerified publisher0.10.22 of 5See more

kodbox kodbox 0.10.2

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:12.3.399c125f103f5
stdlib@go1.24.6
1.26.10
nextcloud/aio-imaginary:20260929_1054350e32abf8b219
stdlib@go1.27.1
1.26.10

Open the chart page →

2,695
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
stdlib@go1.23.5
1.26.10
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
stdlib@go1.23.0
1.26.10

Open the chart page →

13,372
komkomVerified publisher0.3.01 of 1See more

kom kom 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kkb0318/kom:0.3.04e77eff2d906
stdlib@go1.24.4
1.26.10

Open the chart page →

919
kronos-corekronos-coreVerified publisher0.4.11 of 2See more

kronos-core kronos-core 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kronosorg/kronos-core:v0.4.0301da21c59a5
stdlib@go1.21.10
1.26.10

Open the chart page →

1,149
kubeadaptkubeadaptVerified publisher1.0.81 of 1See more

kubeadapt kubeadapt 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent:v3.0.1d75b6da94913
stdlib@go1.26.2
1.26.10

Open the chart page →

619
kube-arguskube-argusOfficialVerified publisher0.0.1-s2z1 of 1See more

kube-argus kube-argus 0.0.1-s2z

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/manishchaudhary101/kube-argus:latest8e3869d31c70
stdlib@go1.26.5
1.26.10

Open the chart page →

815
cert-managerkubeblocksVerified publisher1.17.24 of 4See more

cert-manager kubeblocks 1.17.2

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.17.2ec56edb1161d
stdlib@go1.23.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
stdlib@go1.23.8
1.26.10
quay.io/jetstack/cert-manager-startupapicheck:v1.17.2e18989b4f912
stdlib@go1.23.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
stdlib@go1.23.8
1.26.10

Open the chart page →

5,138
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.009b7e8705673
stdlib@go1.20.6
1.26.10

Open the chart page →

22,981
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
stdlib@go1.20.12
1.26.10
kubesphere/kubectl:v1.27.1649b445b1b732
stdlib@go1.18.10
1.26.10

Open the chart page →

6,445
kubeboltkubeboltVerified publisher2.4.12 of 3See more

kubebolt kubebolt 2.4.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.154.0-scratch03d6215d8d86
stdlib@go1.27.2
1.26.10
ghcr.io/clm-cloud-solutions/kubebolt/api:2.4.19a93f8cce9cc
stdlib@go1.26.9
1.26.10

Open the chart page →

350
kubebrowsekubebrowse1.7.02 of 5See more

kubebrowse kubebrowse 1.7.0

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
stdlib@go1.24.3
1.26.10
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
stdlib@go1.25.0
1.26.10

Open the chart page →

4,114
elastikubeelastiOfficialVerified publisher0.1.302 of 2See more

elasti kubeelasti 0.1.30

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeelasti/elasti-operator:0.1.303b2a972a0284
stdlib@go1.26.5
1.26.10
ghcr.io/kubeelasti/elasti-resolver:0.1.30db3cd41d28ed
stdlib@go1.26.5
1.26.10

Open the chart page →

692
kubefedkubefed0.10.01 of 2See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
stdlib@go1.16.6
1.26.10

Open the chart page →

3,637
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
stdlib@go1.24.10
1.26.10

Open the chart page →

4,095
kubegems-localkubegemsOfficial1.24.102 of 2See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubegems/kubectl:latestc3b4be9a54f5
stdlib@go1.20
1.26.10
kubegems/kubegems:v1.24.10a730bcf9322a
stdlib@go1.24.10
1.26.10

Open the chart page →

7,628
monitoringkubegems44.3.41 of 1See more

monitoring kubegems 44.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubegems/alertproxy:v0.4.2eaee03055329
stdlib@go1.18.10
1.26.10

Open the chart page →

1,425
kube-monkeykubemonkey1.11.01 of 1See more

kube-monkey kubemonkey 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ayushsobti/kube-monkey:v0.7.0fc181870c60f
stdlib@go1.26.8
1.26.10

Open the chart page →

239
kubenursekubenurseVerified publisher1.15.41 of 1See more

kubenurse kubenurse 1.15.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
postfinance/kubenurse:v1.15.4f76ce08ab7b4
ca-certificates@20260413-r1
stdlib@go1.26.6
20260909-r3
1.26.10

Open the chart page →

243
kubernetes-events-exporterkubernetes-events-exporter0.1.21 of 1See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
stdlib@go1.26.2
1.26.10

Open the chart page →

906
owncloudkubernetes-homelab-helm-chartsVerified publisher0.3.02 of 3See more

owncloud kubernetes-homelab-helm-charts 0.3.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:10.110d0945c57f75
stdlib@go1.24.6
1.26.10
owncloud/server:10.16.6879638cd818b
stdlib@go1.26.3
1.26.10

Open the chart page →

8,660
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
stdlib@go1.19.4
1.26.10

Open the chart page →

4,278
kubescoutkubescouteVerified publisher0.1.11 of 1See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
stdlib@go1.25.5
1.26.10

Open the chart page →

1,251
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
stdlib@go1.24.4
1.26.10

Open the chart page →

5,459
kubeseckubesecVerified publisher1.1.01 of 1See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesec/kubesec:latest6735b7f3d1c8
stdlib@go1.27.1
1.26.10

Open the chart page →

355
kube-site-followerkube-site-follower0.1.141 of 2See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
stdlib@go1.23.4
1.26.10

Open the chart page →

1,493
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
stdlib@go1.18.10
1.26.10

Open the chart page →

3,551
mesherykubesphere-stable0.5.012 of 13See more

meshery kubesphere-stable 0.5.0

12 of the 13 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
stdlib@go1.23.9
1.26.10
layer5/meshery-app-mesh:stable-latest77d59943b3d6
stdlib@go1.19.5
1.26.10
layer5/meshery-consul:stable-latest25a4cc38abcd
stdlib@go1.19.13
1.26.10
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
stdlib@go1.13.1
1.26.10
layer5/meshery-istio:stable-latestfde47c141ec6
stdlib@go1.23.9
1.26.10
layer5/meshery-kuma:stable-latest9d25f029a8a2
stdlib@go1.23.4
1.26.10
layer5/meshery-linkerd:stable-latestb99c73bac1f5
stdlib@go1.23.6
1.26.10
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
stdlib@go1.19.11
1.26.10
layer5/meshery-nsm:stable-latestebd6a8faf21f
stdlib@go1.15.12
1.26.10
layer5/meshery-operator:stable-latest6f58a28fe422
stdlib@go1.23.9
1.26.10
layer5/meshery-osm:stable-latestec898e5786c6
stdlib@go1.19.8
1.26.10
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
stdlib@go1.19.11
1.26.10

Open the chart page →

35,813
aws-efs-csi-driverkubesphere-testVerified publisher0.1.01 of 3See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
stdlib@go1.13.4
1.26.10

Open the chart page →

3,944
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:80f51e63e537a
stdlib@go1.24.6
1.26.10

Open the chart page →

8,729
kube-state-metricskubestar-state-metricsVerified publisher0.1.101 of 1See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.6.0bdab4e49d71d
stdlib@go1.18.5
1.26.10

Open the chart page →

2,512

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/podtato-head/right-arm:latest5f8f97a60558
stdlib@go1.19
1.26.10
1
ghcr.io/podtato-head/right-leg:latest03e125b9279e
stdlib@go1.19
1.26.10
1
ghcr.io/port-labs/ocean-gateway:latest452eccee99ba
stdlib@go1.25.14
1.26.10
1
ghcr.io/postfinance/kubelet-csr-approver:v1.2.156469ef517d2b
ca-certificates@20260611-r1
stdlib@go1.26.7
20260909-r3
1.26.10
1
ghcr.io/poweradmin/cert-manager-webhook-poweradmin:v0.2.177cfe924ad09e
stdlib@go1.26.9
1.26.10
1
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
stdlib@go1.23.5
1.26.10
1
ghcr.io/primedns/cert-manager-webhook-primedns:0.1.172c9886968e6
stdlib@go1.26.9
1.26.10
1
ghcr.io/privacyengineering/collector-go:main7217f1a4fa28
stdlib@go1.17.13
1.26.10
1
ghcr.io/privacyengineering/consumer:main73f59c032812
stdlib@go1.17.13
1.26.10
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
stdlib@go1.20.11
1.26.10
1
ghcr.io/processone/ejabberd:latestec5cf7bc8562
stdlib@go1.25.14
1.26.10
1
ghcr.io/projectcapsule/capsule-addon-fluxcd:0.2.2e0baf564b706
ca-certificates@20241010-r2
stdlib@go1.23.4
20260909-r3
1.26.10
1
ghcr.io/projectcapsule/change-windows:0.1.4f9ba3451f60b
stdlib@go1.27.1
1.26.10
1
ghcr.io/projectcapsule/resource-permits:0.0.315e4dbbe8b5b
stdlib@go1.27.1
1.26.10
1
ghcr.io/projectcontour/contour:v1.30.0b12824d7eb58
stdlib@go1.22.5
1.26.10
1
ghcr.io/projectcontour/contour:v1.33.0cd6e13fa882d
stdlib@go1.25.1
1.26.10
1
ghcr.io/projectcontour/contour:v1.33.7d88264ed084a
stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64
1.26.10
1
ghcr.io/projecthelena/warden:v0.9.0a2df64f001f6
stdlib@go1.25.13
1.26.10
1
ghcr.io/projection-operator/projection:0.3.2d06374430a17
stdlib@go1.26.3
1.26.10
1
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
stdlib@go1.25.6
1.26.10
1
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
stdlib@go1.26.4
1.26.10
1
ghcr.io/prymitive/karma:v0.13190a10c5c6793
stdlib@go1.26.3
1.26.10
1
ghcr.io/prymitive/karma:v0.85d06892218680
stdlib@go1.16.3
1.26.10
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
stdlib@go1.21.6
1.26.10
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
stdlib@go1.26.4
1.26.10
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
stdlib@go1.26.4
1.26.10
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
stdlib@go1.20.10
1.26.10
1
ghcr.io/pulumi-labs/pulumi-exporter:0.1.45415d5a46e7d
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
1
ghcr.io/pulumi/pulumi-esc-csi-provider:0.1.13fb058e93502
ca-certificates@20241010-r2
stdlib@go1.23.1
20260909-r3
1.26.10
1
ghcr.io/punchplatform/operator:8.1-dev2a9536c8cee2
stdlib@go1.22.0
1.26.10
1
ghcr.io/punchplatform/punch-board:8.1-latestb03168275d1c
stdlib@go1.21.3
1.26.10
1
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
stdlib@go1.23.3
1.26.10
1
ghcr.io/qaoru/mosquitto_exporter:2.0.02058ad337e19
stdlib@go1.25.14
1.26.10
1
ghcr.io/qatr-io/gatewai/gateway:v0.25.05147fc07f48f
stdlib@go1.25.14
1.26.10
1
ghcr.io/qjoly/pr-gitops-grafana-annotation:latest6a75c6b497ed
stdlib@go1.26.5
1.26.10
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
stdlib@go1.25.12
1.26.10
1
ghcr.io/quenchworks/images/cockroachdba1de8e5c5a1a
ca-certificates@20260909-r1
20260909-r3
1
ghcr.io/quenchworks/images/cosmian-kmsb6140387c95f
webpki-roots@1.0.9
0.26.11
1
ghcr.io/quenchworks/images/meilisearch02f71e56fb1e
webpki-roots@1.0.7
0.26.11
1
ghcr.io/quenchworks/images/mosquitto9f8164b2c60f
ca-certificates@20260909-r2
20260909-r3
1
ghcr.io/quenchworks/images/quickwit4e60c8471bf8
ca-certificates@20260909-r2
20260909-r3
1
ghcr.io/quenchworks/images/vclustere0f1be5cf217
kine@0.17.2-r3
no fix listed
1
ghcr.io/rabbitmq/cluster-operator:2.17.25d690e6cd856
stdlib@go1.25.4
1.26.10
1
ghcr.io/rabbitmq/cluster-operator:2.23.09236fb4f559b
stdlib@go1.27.1
1.26.10
1
ghcr.io/rabbitmq/cluster-operator:2.23.1a6794c391297
stdlib@go1.27.2
1.26.10
1
ghcr.io/rabbitmq/messaging-topology-operator:1.20.427988ec3a9f2
stdlib@go1.27.2
1.26.10
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
stdlib@go1.26.2
1.26.10
1
ghcr.io/raffis/mongodb-query-exporter:v5.1.0ca6ac8a5b329
stdlib@go1.20.5
1.26.10
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
stdlib@go1.20.7
1.26.10
1
ghcr.io/ravibagri5/platform-bom:1.2.0d0c171242aa5
stdlib@go1.27.2
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.