StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56q
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score
m365-exportercloudeteer-helm-chartsVerified publisher1.7.21 of 1See more

m365-exporter cloudeteer-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudeteer/m365-exporter:3.9.4eb604f3fb313
stdlib@go1.27.2
1.26.10

Open the chart page →

75
openstack-cloud-controller-managercloud-provider-openstack2.37.11 of 1See more

openstack-cloud-controller-manager cloud-provider-openstack 2.37.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.37.15b1bf75c418e
stdlib@go1.26.5
1.26.10

Open the chart page →

384
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
stdlib@go1.14.4
1.26.10

Open the chart page →

5,460
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
stdlib@go1.21.9
1.26.10

Open the chart page →

8,190
dronecommunity-chartsVerified publisher0.1.52 of 2See more

drone community-charts 0.1.5

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
drone/drone:2.28.255897c8fb22d
stdlib@go1.24.13
1.26.10
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
stdlib@go1.16.15
1.26.10

Open the chart page →

4,316
convoyconvoyVerified publisher3.7.132 of 3See more

convoy convoy 3.7.13

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10
getconvoy/convoy:v26.7.6f4934cc05e31
stdlib@go1.26.2
1.26.10

Open the chart page →

7,367
cortexcortex3.5.02 of 4See more

cortex cortex 3.5.0

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/memcached-exporter:v0.17.0995c80e3ffbe
stdlib@go1.26.6
1.26.10
quay.io/cortexproject/cortex:v1.21.18577eb292a01
stdlib@go1.25.8
1.26.10

Open the chart page →

3,964
whoamicowboysysopVerified publisher6.1.01 of 1See more

whoami cowboysysop 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
traefik/whoami:v1.12.0c4717a8d1f01
stdlib@go1.26.5
1.26.10

Open the chart page →

387
doris-operatordorisVerified publisher25.8.01 of 1See more

doris-operator doris 25.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/doris:operator-latest3a4422656592
stdlib@go1.23.12
1.26.10

Open the chart page →

950
uptime-kumaduyet0.1.81 of 1See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
stdlib@go1.18.5
1.26.10

Open the chart page →

5,896
emqx-operatoremqx-operator3.0.01 of 1See more

emqx-operator emqx-operator 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/emqx/emqx-operator:3.0.02ce80aeb59d6
stdlib@go1.26.8
1.26.10

Open the chart page →

241
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
stdlib@go1.19.5
1.26.10

Open the chart page →

3,222
gethethereum-helm-chartsVerified publisher1.1.41 of 2See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ethereum/client-go:stable8fc513472bef
stdlib@go1.27.1
1.26.10

Open the chart page →

304
gotifygotifyVerified publisher0.9.01 of 1See more

gotify gotify 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/gotify/server:3.1.144fc5bbd1c06
stdlib@go1.26.0
1.26.10

Open the chart page →

764
hcloud-csihcloud2.24.06 of 6See more

hcloud-csi hcloud 2.24.0

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:v2.24.05b25f70ea9ac
stdlib@go1.27.1
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.13.0d1a26170efed
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.18.0b7fefd08651f
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.20.019f2cf2f40e1
stdlib@go1.26.6
1.26.10

Open the chart page →

2,089
docmosthelmforgeVerified publisher1.4.41 of 4See more

docmost helmforge 1.4.4

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

4,686
wordpresshelmforgeVerified publisher3.0.121 of 3See more

wordpress helmforge 3.0.12

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:26.7.0625f74ddf936
stdlib@go1.24.6
1.26.10

Open the chart page →

4,556
korkorVerified publisher0.2.161 of 1See more

kor kor 0.2.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
yonahdissen/kor:latest1a85158c82bb
stdlib@go1.26.0
1.26.10

Open the chart page →

625
kubelet-csr-approverkubelet-csr-approverOfficialVerified publisher1.2.151 of 1See more

kubelet-csr-approver kubelet-csr-approver 1.2.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/postfinance/kubelet-csr-approver:v1.2.156469ef517d2b
ca-certificates@20260611-r1
stdlib@go1.26.7
20260909-r3
1.26.10

Open the chart page →

350
logging-operatorkube-loggingVerified publisher4.2.31 of 1See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/logging-operator:4.2.20dd85dcb1f73
stdlib@go1.20.5
1.26.10

Open the chart page →

1,609
myipkuossOfficialVerified publisher0.2.21 of 1See more

myip kuoss 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kuoss/myip:v0.1.7760f5ccae493
stdlib@go1.23.8
1.26.10

Open the chart page →

1,202
libredb-studiolibredb-studioOfficialVerified publisher0.1.1021See more

libredb-studio libredb-studio 0.1.102

1 container image this version deploys carries CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:1.0.00cb0177dd278
stdlib@go1.24.4
1.26.10

Open the chart page →

—
keptnlifecycle-toolkitOfficialVerified publisher0.11.03 of 3See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keptn/certificate-operator:v3.0.0b82064b0e339
stdlib@go1.23.3
1.26.10
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
stdlib@go1.23.3
1.26.10
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
stdlib@go1.23.3
1.26.10

Open the chart page →

3,668
lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher3.54.01 of 9See more

lightrun-helm-chart lightrun-helm-chart 3.54.0

1 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:8.4.108dbcf531a03a
stdlib@go1.24.6
1.26.10

Open the chart page →

908
mattermost-operatormattermostVerified publisher1.0.51 of 1See more

mattermost-operator mattermost 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mattermost/mattermost-operator:v1.25.4bac00a2bbd33
stdlib@go1.24.13
1.26.10

Open the chart page →

704
meshery-operatormesheryOfficialVerified publisher1.0.742 of 2See more

meshery-operator meshery 1.0.74

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
stdlib@go1.26.3
1.26.10
meshery/meshery-operator:1.0.61fdc6beb4dd1
stdlib@go1.27.1
1.26.10

Open the chart page →

3,548
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
stdlib@go1.16.2
1.26.10

Open the chart page →

3,714
tailscale-relaymvisonneau0.2.71 of 1See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mvisonneau/tailscale:v1.68.1fc45ad8abf10
stdlib@go1.22.4
1.26.10

Open the chart page →

1,971
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge9b13f0b831ab
stdlib@go1.27.2
1.26.10

Open the chart page →

1,126
system-upgrade-controllernimbolus0.7.01 of 1See more

system-upgrade-controller nimbolus 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.18.09813f85653c8
stdlib@go1.25.3
1.26.10

Open the chart page →

795
olmolmVerified publisher0.46.01 of 1See more

olm olm 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:v0.46.04404599eb7b7
stdlib@go1.26.3
1.26.10

Open the chart page →

598
opencostopencost-ociOfficialVerified publisher2.5.331 of 2See more

opencost opencost-oci 2.5.33

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.10

Open the chart page →

564
ketoory0.64.01 of 1See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/keto:v26.2.0bfdb8b9e283a
stdlib@go1.26.0
1.26.10

Open the chart page →

1,503
oathkeeperory0.64.01 of 1See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/oathkeeper:v26.2.0467329abde34
stdlib@go1.26.0
1.26.10

Open the chart page →

1,448
passboltpassbolt2.2.13 of 6See more

passbolt passbolt 2.2.1

3 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.10
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10
library/mariadb:latest0e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

13,424
capsuleprojectcapsuleOfficialVerified publisher0.15.12 of 2See more

capsule projectcapsule 0.15.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/projectcapsule/capsule:v0.15.1fb1eed4437f8
stdlib@go1.27.1
1.26.10

Open the chart page →

1,986
redis-enterprise-operatorredis-enterprise-operator-officialOfficialVerified publisher8.0.18-111 of 1See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
redislabs/operator:8.0.18-119078e713bb6a
stdlib@go1.26.1
1.26.10

Open the chart page →

1,483
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
stdlib@go1.26.7
1.26.10

Open the chart page →

2,188
selenium-gridselenium-grid0.62.13 of 4See more

selenium-grid selenium-grid 0.62.1

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
selenium/hub:4.51.0-202610104f94ce0ca99c
stdlib@go1.27.2
1.26.10
selenium/node-chrome:4.51.0-20261010b3f54a14452e
stdlib@go1.27.2
1.26.10
selenium/node-firefox:4.51.0-20261010e6a109a147cd
stdlib@go1.27.1
1.26.10

Open the chart page →

7,830
rekorsigstoreVerified publisher1.8.77 of 9See more

rekor sigstore 1.8.7

7 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redisdigest-pinned148bb5411c18
stdlib@go1.18.2
1.26.10
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
stdlib@go1.18.2
1.26.10
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
stdlib@go1.26.4
1.26.10
ghcr.io/sigstore/scaffolding/createdbdigest-pinned16673c1099a5
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createtreedigest-pinned4c845ced03d8
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned32ee491f4d00
stdlib@go1.27.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned3d0152303816
stdlib@go1.27.0
1.26.10

Open the chart page →

8,683
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latestcf8f0ab2ebe6
stdlib@go1.26.1
1.26.10

Open the chart page →

2,924
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
stdlib@go1.25.14
1.26.10

Open the chart page →

1,214
swo-k8s-collectorsolarwindsOfficialVerified publisher5.3.03 of 3See more

swo-k8s-collector solarwinds 5.3.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
stdlib@go1.26.4-X:boringcrypto
1.26.10
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.9.026f82b148dfe
stdlib@go1.25.9
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
stdlib@go1.26.2
1.26.10

Open the chart page →

3,735
sops-operatorsops-operatorVerified publisher0.10.12 of 2See more

sops-operator sops-operator 0.10.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10

Open the chart page →

2,176
thehivestrangebee-helmOfficialVerified publisher2.0.02 of 7See more

thehive strangebee-helm 2.0.0

2 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
stdlib@go1.24.6
1.26.10
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
stdlib@go1.25.0
1.26.10

Open the chart page →

68,000
truenas-csptruenas-cspVerified publisher1.2.410 of 11See more

truenas-csp truenas-csp 1.2.4

10 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
stdlib@go1.25.10
1.26.10
quay.io/hpestorage/csi-extensions:v1.2.1189146672a7ac
stdlib@go1.26.3
1.26.10
quay.io/hpestorage/volume-group-provisioner:v1.0.107bf9d8f16a5d
stdlib@go1.26.3
1.26.10
quay.io/hpestorage/volume-group-snapshotter:v1.0.10caeaaffe7e2b
stdlib@go1.26.3
1.26.10
quay.io/hpestorage/volume-mutator:v1.3.109e98b2e697bd
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
stdlib@go1.25.7
1.26.10

Open the chart page →

10,458
uffizzi-controlleruffizzi-controller2.4.68 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

8 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
stdlib@go1.20.14
1.26.10
uffizzi/uffizzi-cluster-operator:v1.6.55ca448a08783
stdlib@go1.19.13
1.26.10
quay.io/jetstack/cert-manager-cainjector:v1.14.54ffda7facb4d
stdlib@go1.21.9
1.26.10
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
stdlib@go1.21.9
1.26.10
quay.io/jetstack/cert-manager-startupapicheck:v1.14.50f5b104bdd1b
stdlib@go1.21.9
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.14.5ef419261a209
stdlib@go1.21.9
1.26.10
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
stdlib@go1.22.2
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.136d05b4077fb
stdlib@go1.22.2
1.26.10

Open the chart page →

94,846
filebrowserutkuozdemirVerified publisher1.0.01 of 1See more

filebrowser utkuozdemir 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.23.086e8449ff8ff
stdlib@go1.18.3
1.26.10

Open the chart page →

4,198
vault-operatorvault-operatorVerified publisher1.24.11 of 1See more

vault-operator vault-operator 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-operator:v1.24.1b5529976f0f6
stdlib@go1.27.1
1.26.10

Open the chart page →

281
vsphere-csivsphere-tmm3.8.17 of 7See more

vsphere-csi vsphere-tmm 3.8.1

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/csi-vsphere/driver:v3.5.04bb8350a5a62
stdlib@go1.24.4
1.26.10
registry.k8s.io/csi-vsphere/syncer:v3.5.0bb88468fff2a
stdlib@go1.24.4
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
stdlib@go1.21.5
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
stdlib@go1.23.1
1.26.10

Open the chart page →

7,921

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/podtato-head/right-arm:latest5f8f97a60558
stdlib@go1.19
1.26.10
1
ghcr.io/podtato-head/right-leg:latest03e125b9279e
stdlib@go1.19
1.26.10
1
ghcr.io/port-labs/ocean-gateway:latest452eccee99ba
stdlib@go1.25.14
1.26.10
1
ghcr.io/postfinance/kubelet-csr-approver:v1.2.156469ef517d2b
ca-certificates@20260611-r1
stdlib@go1.26.7
20260909-r3
1.26.10
1
ghcr.io/poweradmin/cert-manager-webhook-poweradmin:v0.2.177cfe924ad09e
stdlib@go1.26.9
1.26.10
1
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
stdlib@go1.23.5
1.26.10
1
ghcr.io/primedns/cert-manager-webhook-primedns:0.1.172c9886968e6
stdlib@go1.26.9
1.26.10
1
ghcr.io/privacyengineering/collector-go:main7217f1a4fa28
stdlib@go1.17.13
1.26.10
1
ghcr.io/privacyengineering/consumer:main73f59c032812
stdlib@go1.17.13
1.26.10
1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
stdlib@go1.20.11
1.26.10
1
ghcr.io/processone/ejabberd:latestec5cf7bc8562
stdlib@go1.25.14
1.26.10
1
ghcr.io/projectcapsule/capsule-addon-fluxcd:0.2.2e0baf564b706
ca-certificates@20241010-r2
stdlib@go1.23.4
20260909-r3
1.26.10
1
ghcr.io/projectcapsule/change-windows:0.1.4f9ba3451f60b
stdlib@go1.27.1
1.26.10
1
ghcr.io/projectcapsule/resource-permits:0.0.315e4dbbe8b5b
stdlib@go1.27.1
1.26.10
1
ghcr.io/projectcontour/contour:v1.30.0b12824d7eb58
stdlib@go1.22.5
1.26.10
1
ghcr.io/projectcontour/contour:v1.33.0cd6e13fa882d
stdlib@go1.25.1
1.26.10
1
ghcr.io/projectcontour/contour:v1.33.7d88264ed084a
stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64
1.26.10
1
ghcr.io/projecthelena/warden:v0.9.0a2df64f001f6
stdlib@go1.25.13
1.26.10
1
ghcr.io/projection-operator/projection:0.3.2d06374430a17
stdlib@go1.26.3
1.26.10
1
ghcr.io/project-zot/zot:v2.1.144183bd731bcc
stdlib@go1.25.6
1.26.10
1
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
stdlib@go1.26.4
1.26.10
1
ghcr.io/prymitive/karma:v0.13190a10c5c6793
stdlib@go1.26.3
1.26.10
1
ghcr.io/prymitive/karma:v0.85d06892218680
stdlib@go1.16.3
1.26.10
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
stdlib@go1.21.6
1.26.10
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
stdlib@go1.26.4
1.26.10
1
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
stdlib@go1.26.4
1.26.10
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
stdlib@go1.20.10
1.26.10
1
ghcr.io/pulumi-labs/pulumi-exporter:0.1.45415d5a46e7d
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
1
ghcr.io/pulumi/pulumi-esc-csi-provider:0.1.13fb058e93502
ca-certificates@20241010-r2
stdlib@go1.23.1
20260909-r3
1.26.10
1
ghcr.io/punchplatform/operator:8.1-dev2a9536c8cee2
stdlib@go1.22.0
1.26.10
1
ghcr.io/punchplatform/punch-board:8.1-latestb03168275d1c
stdlib@go1.21.3
1.26.10
1
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
stdlib@go1.23.3
1.26.10
1
ghcr.io/qaoru/mosquitto_exporter:2.0.02058ad337e19
stdlib@go1.25.14
1.26.10
1
ghcr.io/qatr-io/gatewai/gateway:v0.25.05147fc07f48f
stdlib@go1.25.14
1.26.10
1
ghcr.io/qjoly/pr-gitops-grafana-annotation:latest6a75c6b497ed
stdlib@go1.26.5
1.26.10
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
stdlib@go1.25.12
1.26.10
1
ghcr.io/quenchworks/images/cockroachdba1de8e5c5a1a
ca-certificates@20260909-r1
20260909-r3
1
ghcr.io/quenchworks/images/cosmian-kmsb6140387c95f
webpki-roots@1.0.9
0.26.11
1
ghcr.io/quenchworks/images/meilisearch02f71e56fb1e
webpki-roots@1.0.7
0.26.11
1
ghcr.io/quenchworks/images/mosquitto9f8164b2c60f
ca-certificates@20260909-r2
20260909-r3
1
ghcr.io/quenchworks/images/quickwit4e60c8471bf8
ca-certificates@20260909-r2
20260909-r3
1
ghcr.io/quenchworks/images/vclustere0f1be5cf217
kine@0.17.2-r3
no fix listed
1
ghcr.io/rabbitmq/cluster-operator:2.17.25d690e6cd856
stdlib@go1.25.4
1.26.10
1
ghcr.io/rabbitmq/cluster-operator:2.23.09236fb4f559b
stdlib@go1.27.1
1.26.10
1
ghcr.io/rabbitmq/cluster-operator:2.23.1a6794c391297
stdlib@go1.27.2
1.26.10
1
ghcr.io/rabbitmq/messaging-topology-operator:1.20.427988ec3a9f2
stdlib@go1.27.2
1.26.10
1
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
stdlib@go1.26.2
1.26.10
1
ghcr.io/raffis/mongodb-query-exporter:v5.1.0ca6ac8a5b329
stdlib@go1.20.5
1.26.10
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
stdlib@go1.20.7
1.26.10
1
ghcr.io/ravibagri5/platform-bom:1.2.0d0c171242aa5
stdlib@go1.27.2
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.