StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,294
of 18,232 indexed, latest versions
Container images
6,212
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,104
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars
ChartLatestAffected imagesRadar Score
schemaheroschemahero1.4.01 of 1See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
schemahero/schemahero-manager:0.22.11609e1a05cd3
stdlib@go1.24.6
1.26.10

Open the chart page →

2,966
scienceboxsciencebox0.0.72 of 17See more

sciencebox sciencebox 0.0.7

2 of the 17 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
stdlib@go1.17.3
1.26.10
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.26.10

Open the chart page →

9,805
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
stdlib@go1.20.4
1.26.10

Open the chart page →

5,009
seatsurfingseatsurfing0.1.21 of 1See more

seatsurfing seatsurfing 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
seatsurfing/backend:1.119.39952e80048b0
stdlib@go1.26.5
1.26.10

Open the chart page →

1,000
secrethorsecrethor1.1.21 of 1See more

secrethor secrethor 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bonovoo/secrethor:1.1.2bb93b68fcd17
stdlib@go1.24.2
1.26.10

Open the chart page →

1,068
secrets-store-csi-driver-provider-infisicalsecrets-store-csi-driver-provider-infisicalVerified publisher1.1.41 of 1See more

secrets-store-csi-driver-provider-infisical secrets-store-csi-driver-provider-infisical 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gidoichi/secrets-store-csi-driver-provider-infisical:v1.1.42dd5322a0610
stdlib@go1.26.5
1.26.10

Open the chart page →

612
securosecuroVerified publisher0.16.51 of 4See more

securo securo 0.16.5

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
pgvector/pgvector:pg167b822b0aac60
stdlib@go1.24.6
1.26.10

Open the chart page →

4,488
selenosis-deployselenosisVerified publisher2.1.44 of 4See more

selenosis-deploy selenosis 2.1.4

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alcounit/browser-controller:v1.0.1c64222f9e663
stdlib@go1.25.0
1.26.10
alcounit/browser-service:v0.0.94bd10defc324
stdlib@go1.25.0
1.26.10
alcounit/browser-ui:v1.0.0668e7aee5e5c
stdlib@go1.25.0
1.26.10
alcounit/selenosis:v2.1.2f0964cda6da6
stdlib@go1.25.0
1.26.10

Open the chart page →

3,677
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
stdlib@go1.23.10
1.26.10

Open the chart page →

6,484
sentry-k8ssentry-k8sVerified publisher1.4.13 of 11See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
library/redis:6.2.20-alpine77697a75da9f
stdlib@go1.18.2
1.26.10
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
stdlib@go1.19.8
1.26.10

Open the chart page →

55,145
sentry-operatorsentry-operator1.2.51 of 1See more

sentry-operator sentry-operator 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/agjmills/sentry-operator:v1.2.500389ef6a00e
stdlib@go1.24.2
1.26.10

Open the chart page →

1,009
helm64-toolboxserdigital64Verified publisher0.4.01 of 1See more

helm64-toolbox serdigital64 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox:latest7af2216c7b9e
rustls-webpki@0.103.13
stdlib@go1.26.4
webpki-root-certs@1.0.7
0.103.16
1.26.10
1.0.10

Open the chart page →

2,353
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
stdlib@go1.22.5
1.26.10
dserio83/velero-ui:0.3.1b4e1ec6664d3
stdlib@go1.23.7
1.26.10

Open the chart page →

14,037
session-manager-agentsession-manager-agent1.9.01 of 2See more

session-manager-agent session-manager-agent 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-agent:1.9.0b9f23db99051
stdlib@go1.23.11
1.26.10

Open the chart page →

1,007
session-manager-serversession-manager-server0.1.0-gfu-dev1 of 1See more

session-manager-server session-manager-server 0.1.0-gfu-dev

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server:0.1.0-gfu-devb9537499ff9e
stdlib@go1.23.7
1.26.10

Open the chart page →

1,372
k8s-appliershlomibendavidOfficialVerified publisher1.0.11 of 1See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
shlomibendavid/k8s-applier:0311240529a22ffbe0f04e
stdlib@go1.21.7
1.26.10

Open the chart page →

2,029
clickhousesignoz24.1.183 of 3See more

clickhouse signoz 24.1.18

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.21.2cd9252644ce0
stdlib@go1.19.10
1.26.10
altinity/metrics-exporter:0.21.2df3d57215356
stdlib@go1.19.10
1.26.10
signoz/zookeeper:3.7.1fcc4a3288154
stdlib@go1.21.2
1.26.10

Open the chart page →

7,022
cosignedsigstoreVerified publisher0.1.232 of 2See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/projectsigstore/cosigneddigest-pinned784518ff3ee7
stdlib@go1.17.9
1.26.10
gcr.io/projectsigstore/policy-webhookdigest-pinned82940e8c3e0d
stdlib@go1.17.9
1.26.10

Open the chart page →

7,684
rekor-tilessigstoreVerified publisher1.3.01 of 1See more

rekor-tiles sigstore 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sigstore/rekor-tiles/gcp:v2.3.0e401cfe033c9
stdlib@go1.26.3
1.26.10

Open the chart page →

738
scaffoldsigstoreVerified publisher0.6.11711 of 15See more

scaffold sigstore 0.6.117

11 of the 15 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redisdigest-pinned148bb5411c18
stdlib@go1.18.2
1.26.10
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
stdlib@go1.18.2
1.26.10
ghcr.io/sigstore/fulcio:v1.9.02de0226c5f82
stdlib@go1.27.1
1.26.10
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
stdlib@go1.26.4
1.26.10
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned4d64dac937e2
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.33e591f98e3899
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createdbdigest-pinned16673c1099a5
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.334c845ced03d8
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3324293fa1ed50
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned32ee491f4d00
stdlib@go1.27.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned3d0152303816
stdlib@go1.27.0
1.26.10

Open the chart page →

12,499
octopusdeploysimcube1.0.211 of 2See more

octopusdeploy simcube 1.0.21

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/kubectl:latest599e67d36ff5
stdlib@go1.26.9
1.26.10

Open the chart page →

100
simply-dns-webhooksimply-dns-webhookVerified publisher1.10.01 of 1See more

simply-dns-webhook simply-dns-webhook 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/runnerm/simply-dns-webhook:v1.10.0fdfffa3984a5
stdlib@go1.26.4
1.26.10

Open the chart page →

799
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
stdlib@go1.23.8
1.26.10

Open the chart page →

5,713
postgresql-singlesinextraVerified publisher1.15.21 of 1See more

postgresql-single sinextra 1.15.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
stdlib@go1.24.6
1.26.10

Open the chart page →

6,521
registry-mirrorssinextraVerified publisher2.0.201 of 1See more

registry-mirrors sinextra 2.0.20

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/project-zot/zot:v2.1.2296cda11459ce
stdlib@go1.27.1
1.26.10

Open the chart page →

603
skippersinextraVerified publisher0.9.11 of 1See more

skipper sinextra 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/zalando/skipper:v0.28.398a50a01aea02
stdlib@go1.27.2
1.26.10

Open the chart page →

23
altinity-clickhouse-operatorslamdev0.1.22 of 2See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.20.08f0f582d41f0
stdlib@go1.17.13
1.26.10
altinity/metrics-exporter:0.20.01a46d104406d
stdlib@go1.17.13
1.26.10

Open the chart page →

8,462
docker-registry-uislamdev0.0.11 of 1See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quiq/docker-registry-ui:0.9.491281da47036
stdlib@go1.18
1.26.10

Open the chart page →

3,361
external-secrets-operatorslamdev0.0.151 of 1See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
slamdev/external-secrets-operator:0.0.8855f6625dda4
stdlib@go1.13.15
1.26.10

Open the chart page →

3,584
wg-easyslybase-wg-easyVerified publisher1.2.01 of 1See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:15.4.00e7bc9d34e86
stdlib@go1.26.3
1.26.10

Open the chart page →

1,366
wireguardslybase-wireguardVerified publisher2.0.111 of 1See more

wireguard slybase-wireguard 2.0.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
linuxserver/wireguard:1.0.20260223-r0-ls127e2f655e1956a
stdlib@go1.26.9
1.26.10

Open the chart page →

638
smallest-self-hostsmallest-self-hostVerified publisher0.2.27 of 12See more

smallest-self-host smallest-self-host 0.2.2

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/redis:latest33dbb7a4be39
stdlib@go1.26.9
1.26.10
grafana/grafana:11.0.00dc5a246ab16
stdlib@go1.21.10
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
stdlib@go1.22.3
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
stdlib@go1.21.8
1.26.10
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
stdlib@go1.22.8
1.26.10
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.10

Open the chart page →

12,024
smarter-edgesmarterOfficialVerified publisher0.0.151 of 1See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/smarter-device-manager:v1.20.12228f7f44594a
stdlib@go1.19.3
1.26.10

Open the chart page →

2,017
aws-otel-collectorsnowplow-devopsVerified publisher0.17.01 of 1See more

aws-otel-collector snowplow-devops 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.50.07968fb60db6a
stdlib@go1.26.7
1.26.10

Open the chart page →

361
yopasssoftizyVerified publisher1.0.11 of 2See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jhaals/yopass:11.4.69516e3b3e88c
stdlib@go1.19.1
1.26.10

Open the chart page →

2,363
artifact-hubsoftonic1.19.06 of 8See more

artifact-hub softonic 1.19.0

6 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
stdlib@go1.19.10
1.26.10
artifacthub/db-migrator:v1.19.02a746b289fcd
stdlib@go1.22.4
1.26.10
artifacthub/hub:v1.19.0111918d8c399
stdlib@go1.22.4
1.26.10
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
artifacthub/scanner:v1.19.0323d026e78c3
stdlib@go1.21.8
1.26.10
artifacthub/tracker:v1.19.06596c8c4d955
stdlib@go1.22.4
1.26.10

Open the chart page →

19,072
gcp-quota-exportersoftonic2.0.21 of 1See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mintel/gcp-quota-exporter:v0.3.20e0707b7732b
stdlib@go1.13.12
1.26.10

Open the chart page →

3,943
go-ratelimitsoftonic1.0.72 of 3See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:v1.4.071081616da3e
stdlib@go1.14
1.26.10
oliver006/redis_exporter:v1.9.04af75e9f16f6
stdlib@go1.14.4
1.26.10

Open the chart page →

7,919
node-policy-webhooksoftonic0.1.101 of 1See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
softonic/node-policy-webhook:0.1.2ab6098c04a53
stdlib@go1.14.6
1.26.10

Open the chart page →

4,154
redis-shardedsoftonic0.5.01 of 2See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.9.04af75e9f16f6
stdlib@go1.14.4
1.26.10

Open the chart page →

3,217
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
stdlib@go1.24.13
1.26.10

Open the chart page →

9,202
pubsubplussolaceVerified publisher3.10.01 of 1See more

pubsubplus solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest59f2a6d8eaba
stdlib@go1.26.8
1.26.10

Open the chart page →

490
pubsubplus-devsolaceVerified publisher3.10.01 of 1See more

pubsubplus-dev solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest59f2a6d8eaba
stdlib@go1.26.8
1.26.10

Open the chart page →

490
postgresql-ha-chartsoldevelo-postgresql-ha-chart16.3.41 of 2See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
stdlib@go1.25.4
1.26.10

Open the chart page →

5,552
rabbitmqsolidchartsVerified publisher0.8.01 of 2See more

rabbitmq solidcharts 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/rabbitmq:4.4.0-managementc200fd496482
stdlib@go1.25.0
1.26.10

Open the chart page →

1,125
thanossolidchartsVerified publisher0.12.21 of 1See more

thanos solidcharts 0.12.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
stdlib@go1.26.5
1.26.10

Open the chart page →

538
gloosolo-gloo-edge0.0.0-fork4 of 5See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/solo-io/certgen:0.0.0-forkb17a8c7d1f32
stdlib@go1.18.1
1.26.10
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
stdlib@go1.18.1
1.26.10
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
stdlib@go1.18.1
1.26.10
quay.io/solo-io/gloo-envoy-wrapper:0.0.0-fork26ae185e835a
stdlib@go1.18.1
1.26.10

Open the chart page →

13,636
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
stdlib@go1.20.5
1.26.10

Open the chart page →

2,830
sql-operatorsql-operatorOfficialVerified publisher0.11.21 of 1See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stenic/sql-operator:1.13.2f4324baa2aad
stdlib@go1.17.13
1.26.10

Open the chart page →

2,546
stackradar-scannerstackradarVerified publisher0.7.01 of 1See more

stackradar-scanner stackradar 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/lockdep/stackradar-scanner:0.7.045d82534d1d5
stdlib@go1.25.7
1.26.10

Open the chart page →

1,873

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/opnpulse/tenant-operator:v0.0.38fe9b4157ed2
stdlib@go1.25.14
1.26.10
1
ghcr.io/opnpulse/thanos-operator:v2026.4.24e05a3e701291
stdlib@go1.26.2
1.26.10
1
ghcr.io/orkspace/orkestra:0.7.1863356a41fbef
stdlib@go1.26.6
1.26.10
1
ghcr.io/orkspace/orkestra-cc:0.7.18ebb9654ac4d2
stdlib@go1.26.6
1.26.10
1
ghcr.io/ot-container-kit/redis-operator/redis-operator:v0.18.090bfeb2e0d71
stdlib@go1.21.12
1.26.10
1
ghcr.io/owen282000/life-dashboard-grafana:1.2.05f4a5da032bf
stdlib@go1.26.9
1.26.10
1
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
stdlib@go1.26.2
1.26.10
1
ghcr.io/oxidecomputer/cluster-api-provider-oxide:0.2.37b05d3bbfbfa
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
1
ghcr.io/p10node/p10logs-agent:1.1.50f8bb407d9fc
stdlib@go1.26.9
1.26.10
1
ghcr.io/p10node/p10logs-hub:1.1.5af5bc61c0026
stdlib@go1.26.9
1.26.10
1
ghcr.io/paganuzzi/ngrokoperator:latest5a10cd095699
stdlib@go1.15.12
1.26.10
1
ghcr.io/pansalut/koffan:v2.13.12c4dfb1458e6
stdlib@go1.26.6
1.26.10
1
ghcr.io/paperclipinc/hermes-operator:v0.2.07a491ec9b0ff
stdlib@go1.27.1
1.26.10
1
ghcr.io/paperclipinc/openclaw-operator:v0.40.038e0da31c520
stdlib@go1.25.14
1.26.10
1
ghcr.io/paperclipinc/paperclip-operator:v0.19.10984b890eb38
stdlib@go1.25.0
1.26.10
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
stdlib@go1.19.8
1.26.10
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
stdlib@go1.24.4
1.26.10
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
stdlib@go1.24.4
1.26.10
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
stdlib@go1.24.4
1.26.10
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
stdlib@go1.19.8
1.26.10
1
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls-webpki@0.103.13
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
stdlib@go1.19.8
1.26.10
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
stdlib@go1.24.4
1.26.10
1
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
stdlib@go1.23.12
1.26.10
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
stdlib@go1.25.1
1.26.10
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
stdlib@go1.21.4
1.26.10
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
ca-certificates@20250619-r6
stdlib@go1.24.7
20260909-r3
1.26.10
1
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.1e58c98b4d28a
stdlib@go1.26.8
1.26.10
1
ghcr.io/patricklaabs/sample-application:0.0.1f0935fa2eee3
stdlib@go1.22.0
1.26.10
1
ghcr.io/pbufio/registry:v0.4.177a36c035b4b
stdlib@go1.25.5
1.26.10
1
ghcr.io/peak-scale/capsule-argo-addon:0.8.064b8c5389b33
ca-certificates@20260611-r1
stdlib@go1.27.1
20260909-r3
1.26.10
1
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
ca-certificates@20250619-r5
stdlib@go1.24.6
20260909-r3
1.26.10
1
ghcr.io/peak-scale/observability-tenancy/loki-proxy:0.4.1548e962d0061
ca-certificates@20250619-r5
stdlib@go1.24.6
20260909-r3
1.26.10
1
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
1
ghcr.io/peimanja/artifactory_exporter:v1.16.0d3e3929a3d2b
stdlib@go1.21.13
1.26.10
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
stdlib@go1.18.4
1.26.10
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
ca-certificates@20241121-r1
stdlib@go1.22.4
20260909-r3
1.26.10
1
ghcr.io/petersr/spiffile-operator:0.1.4411070249287
stdlib@go1.26.4
1.26.10
1
ghcr.io/pgdogdev/pgdog:v0.1.61611f2874dcf0
stdlib@go1.26.7
1.26.10
1
ghcr.io/phoeluga/synology-proxy-operator:0.0.9a0b74674d0e3
stdlib@go1.27.1
1.26.10
1
ghcr.io/pierinho13/github-platform-operator:v0.7.100c76ab7b4305
stdlib@go1.26.9
1.26.10
1
ghcr.io/pii-shield/pii-shield-operator:2.2.827ff8a831e55
stdlib@go1.27.2
1.26.10
1
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
stdlib@go1.14.6
1.26.10
1
ghcr.io/platform-mesh/platform-mesh/account-operator:v0.15.5fa4923226063
stdlib@go1.26.7
1.26.10
1
ghcr.io/platform-mesh/platform-mesh/extension-manager-operator:v0.10.09371fcf05f76
stdlib@go1.26.7
1.26.10
1
ghcr.io/platform-mesh/platform-mesh/kubernetes-graphql-gateway:v1.20.02e6c9c111893
stdlib@go1.26.7
1.26.10
1
ghcr.io/platform-mesh/platform-mesh/platform-mesh-operator:v0.89.13814939be25d
stdlib@go1.26.7
1.26.10
1
ghcr.io/platform-mesh/platform-mesh/rebac-authz-webhook:v0.12.0fbb6df9ad2af
stdlib@go1.26.7
1.26.10
1
ghcr.io/platform-mesh/platform-mesh/security-operator:v0.36.09b26032812fd
stdlib@go1.26.7
1.26.10
1
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces:v0.17.0bb2ee6241719
stdlib@go1.26.7
1.26.10
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.