StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56q
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score
m365-exportercloudeteer-helm-chartsVerified publisher1.7.21 of 1See more

m365-exporter cloudeteer-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudeteer/m365-exporter:3.9.4eb604f3fb313
stdlib@go1.27.2
1.26.10

Open the chart page →

75
openstack-cloud-controller-managercloud-provider-openstack2.37.11 of 1See more

openstack-cloud-controller-manager cloud-provider-openstack 2.37.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.37.15b1bf75c418e
stdlib@go1.26.5
1.26.10

Open the chart page →

384
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
stdlib@go1.14.4
1.26.10

Open the chart page →

5,460
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
stdlib@go1.21.9
1.26.10

Open the chart page →

8,190
dronecommunity-chartsVerified publisher0.1.52 of 2See more

drone community-charts 0.1.5

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
drone/drone:2.28.255897c8fb22d
stdlib@go1.24.13
1.26.10
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
stdlib@go1.16.15
1.26.10

Open the chart page →

4,316
convoyconvoyVerified publisher3.7.132 of 3See more

convoy convoy 3.7.13

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10
getconvoy/convoy:v26.7.6f4934cc05e31
stdlib@go1.26.2
1.26.10

Open the chart page →

7,367
cortexcortex3.5.02 of 4See more

cortex cortex 3.5.0

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/memcached-exporter:v0.17.0995c80e3ffbe
stdlib@go1.26.6
1.26.10
quay.io/cortexproject/cortex:v1.21.18577eb292a01
stdlib@go1.25.8
1.26.10

Open the chart page →

3,964
whoamicowboysysopVerified publisher6.1.01 of 1See more

whoami cowboysysop 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
traefik/whoami:v1.12.0c4717a8d1f01
stdlib@go1.26.5
1.26.10

Open the chart page →

387
doris-operatordorisVerified publisher25.8.01 of 1See more

doris-operator doris 25.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/doris:operator-latest3a4422656592
stdlib@go1.23.12
1.26.10

Open the chart page →

950
uptime-kumaduyet0.1.81 of 1See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
stdlib@go1.18.5
1.26.10

Open the chart page →

5,896
emqx-operatoremqx-operator3.0.01 of 1See more

emqx-operator emqx-operator 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/emqx/emqx-operator:3.0.02ce80aeb59d6
stdlib@go1.26.8
1.26.10

Open the chart page →

241
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
stdlib@go1.19.5
1.26.10

Open the chart page →

3,222
gethethereum-helm-chartsVerified publisher1.1.41 of 2See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ethereum/client-go:stable8fc513472bef
stdlib@go1.27.1
1.26.10

Open the chart page →

304
gotifygotifyVerified publisher0.9.01 of 1See more

gotify gotify 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/gotify/server:3.1.144fc5bbd1c06
stdlib@go1.26.0
1.26.10

Open the chart page →

764
hcloud-csihcloud2.24.06 of 6See more

hcloud-csi hcloud 2.24.0

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:v2.24.05b25f70ea9ac
stdlib@go1.27.1
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.13.0d1a26170efed
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.18.0b7fefd08651f
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.20.019f2cf2f40e1
stdlib@go1.26.6
1.26.10

Open the chart page →

2,089
docmosthelmforgeVerified publisher1.4.41 of 4See more

docmost helmforge 1.4.4

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

4,686
wordpresshelmforgeVerified publisher3.0.121 of 3See more

wordpress helmforge 3.0.12

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:26.7.0625f74ddf936
stdlib@go1.24.6
1.26.10

Open the chart page →

4,556
korkorVerified publisher0.2.161 of 1See more

kor kor 0.2.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
yonahdissen/kor:latest1a85158c82bb
stdlib@go1.26.0
1.26.10

Open the chart page →

625
kubelet-csr-approverkubelet-csr-approverOfficialVerified publisher1.2.151 of 1See more

kubelet-csr-approver kubelet-csr-approver 1.2.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/postfinance/kubelet-csr-approver:v1.2.156469ef517d2b
ca-certificates@20260611-r1
stdlib@go1.26.7
20260909-r3
1.26.10

Open the chart page →

350
logging-operatorkube-loggingVerified publisher4.2.31 of 1See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/logging-operator:4.2.20dd85dcb1f73
stdlib@go1.20.5
1.26.10

Open the chart page →

1,609
myipkuossOfficialVerified publisher0.2.21 of 1See more

myip kuoss 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kuoss/myip:v0.1.7760f5ccae493
stdlib@go1.23.8
1.26.10

Open the chart page →

1,202
libredb-studiolibredb-studioOfficialVerified publisher0.1.1021See more

libredb-studio libredb-studio 0.1.102

1 container image this version deploys carries CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:1.0.00cb0177dd278
stdlib@go1.24.4
1.26.10

Open the chart page →

—
keptnlifecycle-toolkitOfficialVerified publisher0.11.03 of 3See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keptn/certificate-operator:v3.0.0b82064b0e339
stdlib@go1.23.3
1.26.10
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
stdlib@go1.23.3
1.26.10
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
stdlib@go1.23.3
1.26.10

Open the chart page →

3,668
lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher3.54.01 of 9See more

lightrun-helm-chart lightrun-helm-chart 3.54.0

1 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:8.4.108dbcf531a03a
stdlib@go1.24.6
1.26.10

Open the chart page →

908
mattermost-operatormattermostVerified publisher1.0.51 of 1See more

mattermost-operator mattermost 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mattermost/mattermost-operator:v1.25.4bac00a2bbd33
stdlib@go1.24.13
1.26.10

Open the chart page →

704
meshery-operatormesheryOfficialVerified publisher1.0.742 of 2See more

meshery-operator meshery 1.0.74

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
stdlib@go1.26.3
1.26.10
meshery/meshery-operator:1.0.61fdc6beb4dd1
stdlib@go1.27.1
1.26.10

Open the chart page →

3,548
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
stdlib@go1.16.2
1.26.10

Open the chart page →

3,714
tailscale-relaymvisonneau0.2.71 of 1See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mvisonneau/tailscale:v1.68.1fc45ad8abf10
stdlib@go1.22.4
1.26.10

Open the chart page →

1,971
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge9b13f0b831ab
stdlib@go1.27.2
1.26.10

Open the chart page →

1,126
system-upgrade-controllernimbolus0.7.01 of 1See more

system-upgrade-controller nimbolus 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.18.09813f85653c8
stdlib@go1.25.3
1.26.10

Open the chart page →

795
olmolmVerified publisher0.46.01 of 1See more

olm olm 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:v0.46.04404599eb7b7
stdlib@go1.26.3
1.26.10

Open the chart page →

598
opencostopencost-ociOfficialVerified publisher2.5.331 of 2See more

opencost opencost-oci 2.5.33

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.10

Open the chart page →

564
ketoory0.64.01 of 1See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/keto:v26.2.0bfdb8b9e283a
stdlib@go1.26.0
1.26.10

Open the chart page →

1,503
oathkeeperory0.64.01 of 1See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/oathkeeper:v26.2.0467329abde34
stdlib@go1.26.0
1.26.10

Open the chart page →

1,448
passboltpassbolt2.2.13 of 6See more

passbolt passbolt 2.2.1

3 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.10
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10
library/mariadb:latest0e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

13,424
capsuleprojectcapsuleOfficialVerified publisher0.15.12 of 2See more

capsule projectcapsule 0.15.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/projectcapsule/capsule:v0.15.1fb1eed4437f8
stdlib@go1.27.1
1.26.10

Open the chart page →

1,986
redis-enterprise-operatorredis-enterprise-operator-officialOfficialVerified publisher8.0.18-111 of 1See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
redislabs/operator:8.0.18-119078e713bb6a
stdlib@go1.26.1
1.26.10

Open the chart page →

1,483
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
stdlib@go1.26.7
1.26.10

Open the chart page →

2,188
selenium-gridselenium-grid0.62.13 of 4See more

selenium-grid selenium-grid 0.62.1

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
selenium/hub:4.51.0-202610104f94ce0ca99c
stdlib@go1.27.2
1.26.10
selenium/node-chrome:4.51.0-20261010b3f54a14452e
stdlib@go1.27.2
1.26.10
selenium/node-firefox:4.51.0-20261010e6a109a147cd
stdlib@go1.27.1
1.26.10

Open the chart page →

7,830
rekorsigstoreVerified publisher1.8.77 of 9See more

rekor sigstore 1.8.7

7 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redisdigest-pinned148bb5411c18
stdlib@go1.18.2
1.26.10
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
stdlib@go1.18.2
1.26.10
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
stdlib@go1.26.4
1.26.10
ghcr.io/sigstore/scaffolding/createdbdigest-pinned16673c1099a5
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createtreedigest-pinned4c845ced03d8
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned32ee491f4d00
stdlib@go1.27.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned3d0152303816
stdlib@go1.27.0
1.26.10

Open the chart page →

8,683
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latestcf8f0ab2ebe6
stdlib@go1.26.1
1.26.10

Open the chart page →

2,924
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
stdlib@go1.25.14
1.26.10

Open the chart page →

1,214
swo-k8s-collectorsolarwindsOfficialVerified publisher5.3.03 of 3See more

swo-k8s-collector solarwinds 5.3.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
stdlib@go1.26.4-X:boringcrypto
1.26.10
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.9.026f82b148dfe
stdlib@go1.25.9
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
stdlib@go1.26.2
1.26.10

Open the chart page →

3,735
sops-operatorsops-operatorVerified publisher0.10.12 of 2See more

sops-operator sops-operator 0.10.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10

Open the chart page →

2,176
thehivestrangebee-helmOfficialVerified publisher2.0.02 of 7See more

thehive strangebee-helm 2.0.0

2 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
stdlib@go1.24.6
1.26.10
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
stdlib@go1.25.0
1.26.10

Open the chart page →

68,000
truenas-csptruenas-cspVerified publisher1.2.410 of 11See more

truenas-csp truenas-csp 1.2.4

10 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
stdlib@go1.25.10
1.26.10
quay.io/hpestorage/csi-extensions:v1.2.1189146672a7ac
stdlib@go1.26.3
1.26.10
quay.io/hpestorage/volume-group-provisioner:v1.0.107bf9d8f16a5d
stdlib@go1.26.3
1.26.10
quay.io/hpestorage/volume-group-snapshotter:v1.0.10caeaaffe7e2b
stdlib@go1.26.3
1.26.10
quay.io/hpestorage/volume-mutator:v1.3.109e98b2e697bd
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
stdlib@go1.25.7
1.26.10

Open the chart page →

10,458
uffizzi-controlleruffizzi-controller2.4.68 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

8 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
stdlib@go1.20.14
1.26.10
uffizzi/uffizzi-cluster-operator:v1.6.55ca448a08783
stdlib@go1.19.13
1.26.10
quay.io/jetstack/cert-manager-cainjector:v1.14.54ffda7facb4d
stdlib@go1.21.9
1.26.10
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
stdlib@go1.21.9
1.26.10
quay.io/jetstack/cert-manager-startupapicheck:v1.14.50f5b104bdd1b
stdlib@go1.21.9
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.14.5ef419261a209
stdlib@go1.21.9
1.26.10
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
stdlib@go1.22.2
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.136d05b4077fb
stdlib@go1.22.2
1.26.10

Open the chart page →

94,846
filebrowserutkuozdemirVerified publisher1.0.01 of 1See more

filebrowser utkuozdemir 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.23.086e8449ff8ff
stdlib@go1.18.3
1.26.10

Open the chart page →

4,198
vault-operatorvault-operatorVerified publisher1.24.11 of 1See more

vault-operator vault-operator 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-operator:v1.24.1b5529976f0f6
stdlib@go1.27.1
1.26.10

Open the chart page →

281
vsphere-csivsphere-tmm3.8.17 of 7See more

vsphere-csi vsphere-tmm 3.8.1

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/csi-vsphere/driver:v3.5.04bb8350a5a62
stdlib@go1.24.4
1.26.10
registry.k8s.io/csi-vsphere/syncer:v3.5.0bb88468fff2a
stdlib@go1.24.4
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
stdlib@go1.21.5
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
stdlib@go1.23.1
1.26.10

Open the chart page →

7,921

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/razvanmacovei/x402-k8s-operator:0.1.0bf3407fad182
stdlib@go1.25.7
1.26.10
1
ghcr.io/recyclarr/recyclarr:8.8.0b1fbb929ba71
stdlib@go1.26.8
1.26.10
1
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
stdlib@go1.25.5
1.26.10
1
ghcr.io/retyc/retycfs-k8s-csi:v0.6.05e90b38ac0c9
stdlib@go1.26.9
1.26.10
1
ghcr.io/ricardozd/agentgateway-route-reconciler:0.3.1846f6e407c96
stdlib@go1.24.13
1.26.10
1
ghcr.io/riesinger/plausible-exporter:1.1.061112cda1be5
stdlib@go1.19.7
1.26.10
1
ghcr.io/riotkit-org/backup-maker-controller:v0.1.262370545ba3d
stdlib@go1.19.4
1.26.10
1
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
stdlib@go1.17.13
1.26.10
1
ghcr.io/riotkit-org/waf-proxy:snapshot683656fdace2
stdlib@go1.18.3
1.26.10
1
ghcr.io/riotkit-org/wordpress-hardened:v2.0edc6b69873be
stdlib@go1.17.9
1.26.10
1
ghcr.io/riverqueue/riverui:0.5.32dc54179b25a
stdlib@go1.23.0
1.26.10
1
ghcr.io/robot-head/crabka-operator:0.4.07a79c146bfa7
ca-certificates@20260413-r1
20260909-r3
1
ghcr.io/runatlantis/atlantis:v0.48.23dce75ec23cc
stdlib@go1.27.1
1.26.10
1
ghcr.io/runnerm/simply-dns-webhook:v1.10.0fdfffa3984a5
stdlib@go1.26.4
1.26.10
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.4914e75d9f445
stdlib@go1.25.5
1.26.10
1
ghcr.io/rvbsalgado/fencemaster:1.0.0-rc.207056a6aae439
stdlib@go1.25.8
1.26.10
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
stdlib@go1.20.7
1.26.10
1
ghcr.io/sagernet/sing-box:v1.12.03c1ee82d450d
stdlib@go1.24.5
1.26.10
1
ghcr.io/saidsef/faas-reverse-geocoding:latest5c97e4734d27
stdlib@go1.27.2
1.26.10
1
ghcr.io/sairam0424/ratecap-core:latest2f6c7157fa8e
stdlib@go1.27.1
1.26.10
1
ghcr.io/sairam0424/ratecap-sidecar:lateste7feca7ac7cc
stdlib@go1.27.1
1.26.10
1
ghcr.io/salaboy/fmtok8s-email-service:v0.2.0-nativeb52d5dbac2ca
stdlib@go1.17.11
1.26.10
1
ghcr.io/salaboy/fmtok8s-email-service:v0.1.0-nativecf28472bc460
stdlib@go1.17.11
1.26.10
1
ghcr.io/salemgolemugoo/argocd-bitbucket-proxy:latesta72df069095b
stdlib@go1.26.1
1.26.10
1
ghcr.io/salesforce/kubelet-summary-exporter:sha-c2bf90d377e09d2dd72
stdlib@go1.18.10
1.26.10
1
ghcr.io/salesforce/sloop:sha-2ce8bbe119e24f24b1d
stdlib@go1.16.15
1.26.10
1
ghcr.io/samr037/node-debug-dashboard:0.4.1447e847ed614
stdlib@go1.23.3
1.26.10
1
ghcr.io/sapcc/ntp_exporter:v2.9.079c40c65f5d4
stdlib@go1.24.6
1.26.10
1
ghcr.io/schaka/janitorr:native-stable7cfe1e0c41da
stdlib@go1.24.6
1.26.10
1
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
stdlib@go1.19.13
1.26.10
1
ghcr.io/seanmorley15/adventurelog-frontend:v0.13.051ee22428b41
ca-certificates@20260413-r0
stdlib@go1.23.12
20260909-r3
1.26.10
1
ghcr.io/sergelogvinov/hybrid-csi-provisioner:v0.3.1221e07794a8a
stdlib@go1.25.5
1.26.10
1
ghcr.io/sergelogvinov/karpenter-provider-proxmox:v0.13.0c529be73ddc3
stdlib@go1.27.1
1.26.10
1
ghcr.io/sergelogvinov/keydb:6.3.376a19ddc3626
stdlib@go1.18.10
1.26.10
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
stdlib@go1.23.8
1.26.10
1
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
stdlib@go1.23.8
1.26.10
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
stdlib@go1.24.4
1.26.10
1
ghcr.io/sergelogvinov/node-labels-exporter:v0.5.1dd6875a0a963
stdlib@go1.25.5
1.26.10
1
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
stdlib@go1.24.6
1.26.10
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
stdlib@go1.24.6
1.26.10
1
ghcr.io/sergelogvinov/proxmox-cloud-controller-manager:v0.16.1474dbfd3be5c
stdlib@go1.27.1
1.26.10
1
ghcr.io/sergelogvinov/proxmox-csi-controller:v0.21.08f344b70785f
stdlib@go1.27.2
1.26.10
1
ghcr.io/sergelogvinov/proxmox-csi-node:v0.21.03895d75356d5
stdlib@go1.27.2
1.26.10
1
ghcr.io/sergelogvinov/tailscale:1.102.5591864822ac1
stdlib@go1.26.6
1.26.10
1
ghcr.io/sergeyslonimsky/elara:0.5.2a410a7ed1ee8
stdlib@go1.27.0
1.26.10
1
ghcr.io/shaharia-lab/teredix:0.0.2ec727be4417a
stdlib@go1.21.5
1.26.10
1
ghcr.io/shift/domain_exporter:v0.1.1347e27690a816
stdlib@go1.17.8
1.26.10
1
ghcr.io/shini4i/argo-watcher:v1.4.20faab179997f
stdlib@go1.27.1
1.26.10
1
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
stdlib@go1.26.5
1.26.10
1
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
stdlib@go1.26.0
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.