StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,294
of 18,232 indexed, latest versions
Container images
6,212
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,104
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars
ChartLatestAffected imagesRadar Score
natz-operatornatz-operatorVerified publisher0.9.51 of 1See more

natz-operator natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/zeiss/natz-operator/operator:0.9.5187007974540
stdlib@go1.23.3
1.26.10

Open the chart page →

1,332
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

1,801
clowder2ncsaVerified publisher1.9.76 of 12See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
stdlib@go1.21.8
1.26.10
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
stdlib@go1.18.2
1.26.10
bitnamilegacy/minio:2023.12.230b60b6565ab2
stdlib@go1.20.13
1.26.10
bitnamilegacy/mongodb:5.0.103bb1deeaf9d0
stdlib@go1.18.4
1.26.10
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
stdlib@go1.21.7
1.26.10
bitnamilegacy/rabbitmq:3.10.88f7161d8ce19
stdlib@go1.16.7
1.26.10

Open the chart page →

121,685
netbox-operatornetboxOfficialVerified publisher1.2.1961 of 1See more

netbox-operator netbox 1.2.196

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox-operator:0.2.75d23e28ef483b
stdlib@go1.27.2
1.26.10

Open the chart page →

6
netobserv-operatornetobservOfficialVerified publisher2.0.11 of 1See more

netobserv-operator netobserv 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/netobserv/network-observability-operatordigest-pinnedc05814f8d633
stdlib@go1.26.8
1.26.10

Open the chart page →

303
cluster-issuersnginx-cert-charts0.3.04 of 4See more

cluster-issuers nginx-cert-charts 0.3.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.19.3eb1df56668b6
stdlib@go1.25.6
1.26.10
quay.io/jetstack/cert-manager-controller:v1.19.3a07125af5e83
stdlib@go1.25.6
1.26.10
quay.io/jetstack/cert-manager-startupapicheck:v1.19.3e51a06251338
stdlib@go1.25.6
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.19.32625754083d5
stdlib@go1.25.6
1.26.10

Open the chart page →

4,124
ngrok-operatorngrok-operator1.1.01 of 2See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
zufardhiyaulhaq/ngrok-operator:v1.3.07cf2ae3fb1fb
stdlib@go1.16.15
1.26.10

Open the chart page →

3,003
cloud9nicholaswildeVerified publisher1.0.01 of 1See more

cloud9 nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
linuxserver/cloud9:version-1.29.245c5fe102ff3
stdlib@go1.17.11
1.26.10

Open the chart page →

13,278
gotifynicholaswildeVerified publisher1.0.01 of 1See more

gotify nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gotify/server-arm7:2.0.23d91e302ad1d0
stdlib@go1.16
1.26.10

Open the chart page →

4,034
installernicholaswildeVerified publisher1.0.01 of 1See more

installer nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/installer:version-0.2.947d8ecd310a9
stdlib@go1.15.3
1.26.10

Open the chart page →

2,296
shiorinicholaswildeVerified publisher1.0.11 of 1See more

shiori nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/shiori:version-v1.5.0e0645abe6777
stdlib@go1.16.5
1.26.10

Open the chart page →

3,542
writefreelynicholaswildeVerified publisher1.0.01 of 1See more

writefreely nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/writefreely:version-0.13.1c3c8481b7e56
stdlib@go1.15.12
1.26.10

Open the chart page →

9,727
node-exporternode-exporterVerified publisher0.1.101 of 1See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/node-exporter:v1.6.0d2e48098c364
stdlib@go1.20.4
1.26.10

Open the chart page →

1,994
northscopenorthscopeVerified publisher1.2.01 of 1See more

northscope northscope 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/emircanagac/northscope:1.2.0e7477c2bea2a
stdlib@go1.27.2
1.26.10

Open the chart page →

6
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
stdlib@go1.16.7
1.26.10

Open the chart page →

16,238
nri-resource-policy-balloonsnri-pluginsOfficialVerified publisher0.15.01 of 1See more

nri-resource-policy-balloons nri-plugins 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0bacbef6f002f
stdlib@go1.26.0
1.26.10

Open the chart page →

565
nri-resource-policy-topology-awarenri-pluginsOfficialVerified publisher0.15.01 of 1See more

nri-resource-policy-topology-aware nri-plugins 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-topology-aware:v0.15.03e7d3aa02b73
stdlib@go1.26.0
1.26.10

Open the chart page →

565
nutanix-csi-snapshotnutanix-helm-releasesOfficialVerified publisher8.3.01 of 1See more

nutanix-csi-snapshot nutanix-helm-releases 8.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.3.012c2da094b02
stdlib@go1.24.2
1.26.10

Open the chart page →

957
nvidia-gpu-exporternvidia-gpu-exporterVerified publisher2.15.11 of 1See more

nvidia-gpu-exporter nvidia-gpu-exporter 2.15.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
utkuozdemir/nvidia_gpu_exporter:1.15.17aee2d42836a
stdlib@go1.27.1
1.26.10

Open the chart page →

543
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.34 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats:2.11.9-alpine777787bbb4c7
stdlib@go1.24.7
1.26.10
natsio/nats-box:0.18.0abdc9f9f0120
stdlib@go1.24.3
1.26.10
natsio/nats-server-config-reloader:0.19.181edf32a3680
stdlib@go1.24.5
1.26.10
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
stdlib@go1.24.3
1.26.10

Open the chart page →

8,587
oadaoadaVerified publisher5.0.61 of 11See more

oada oada 5.0.6

1 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
stdlib@go1.19.3
1.26.10

Open the chart page →

15,569
opengistobeoneVerified publisher1.1.61 of 1See more

opengist obeone 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/thomiceli/opengist:1.15.1038d47937d3b
stdlib@go1.26.5
1.26.10

Open the chart page →

904
transfer.shobeoneVerified publisher1.0.51 of 1See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dutchcoders/transfer.sh:v1.6.1-noroot8db9ade72a0d
stdlib@go1.20.11
1.26.10

Open the chart page →

1,907
oci-native-ingress-controlleroci-native-ingress-controller1.0.01 of 1See more

oci-native-ingress-controller oci-native-ingress-controller 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amaanx86/oci-native-ingress-controller:masterd7206ac7a319
stdlib@go1.23.7
1.26.10

Open the chart page →

975
ociregistryociregistryVerified publisher1.20.01 of 1See more

ociregistry ociregistry 1.20.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/appzygy/ociregistry:1.20.052cfc157ed62
stdlib@go1.27.1
1.26.10

Open the chart page →

265
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.10

Open the chart page →

1,642
oom-oracleoom-oracleVerified publisher0.1.21 of 1See more

oom-oracle oom-oracle 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ethan-kane-ops/k8s-pod-oom-oracle:0.1.2538ed30a4c62
stdlib@go1.26.8
1.26.10

Open the chart page →

239
open5gs-hssopen5gs-hssVerified publisher2.3.31 of 2See more

open5gs-hss open5gs-hss 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mongodb:latest101ca7755158
stdlib@go1.26.8
1.26.10

Open the chart page →

418
open5gs-pcrfopen5gs-pcrfVerified publisher2.3.31 of 2See more

open5gs-pcrf open5gs-pcrf 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mongodb:latest101ca7755158
stdlib@go1.26.8
1.26.10

Open the chart page →

418
open5gs-scpopen5gs-scpVerified publisher2.3.41 of 2See more

open5gs-scp open5gs-scp 2.3.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mongodb:latest101ca7755158
stdlib@go1.26.8
1.26.10

Open the chart page →

418
open5gs-udropen5gs-udrVerified publisher2.3.41 of 2See more

open5gs-udr open5gs-udr 2.3.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mongodb:latest101ca7755158
stdlib@go1.26.8
1.26.10

Open the chart page →

418
open5gs-webuiopen5gs-webuiVerified publisher2.3.31 of 2See more

open5gs-webui open5gs-webui 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
stdlib@go1.15.1
1.26.10

Open the chart page →

7,188
openccuopenccuVerified publisher3.89.111 of 1See more

openccu openccu 3.89.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.11.202609193cfcb30e1921
stdlib@go1.26.6
1.26.10

Open the chart page →

1,963
kruiseopenkruise1.9.22 of 2See more

kruise openkruise 1.9.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openkruise/kruise-helm-hook:v0.1.0edc7cf9428fd
stdlib@go1.20.14
1.26.10
openkruise/kruise-manager:v1.9.29e3a866133b5
stdlib@go1.23.9
1.26.10

Open the chart page →

2,750
openobserveopenobserve1.0.35 of 6See more

openobserve openobserve 1.0.3

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats:2.14.2-alpine952d157e28d5
stdlib@go1.26.3
1.26.10
natsio/nats-box:0.19.7ffce8bd10338
stdlib@go1.26.3
1.26.10
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.10
natsio/prometheus-nats-exporter:0.20.14fbf6dacb847
stdlib@go1.26.3
1.26.10
openfga/openfga:latest9cf9a20af32a
ca-certificates@20260909-r2
stdlib@go1.26.8
20260909-r3
1.26.10

Open the chart page →

4,645
openrouter-botopenrouter-botVerified publisher0.2.01 of 1See more

openrouter-bot openrouter-bot 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lifailon/openrouter-bot:latestea37e4b6b952
stdlib@go1.25.0
1.26.10

Open the chart page →

1,494
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
stdlib@go1.25.7
1.26.10

Open the chart page →

6,988
openstack-kamaji-clusteropenstack-kamaji-clusterVerified publisher0.2.41 of 1See more

openstack-kamaji-cluster openstack-kamaji-cluster 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
stdlib@go1.24.7
1.26.10

Open the chart page →

1,311
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.610 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.6

10 of the 34 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
stdlib@go1.26.7
1.26.10
jaegertracing/jaeger:2.20.046a886260e04
stdlib@go1.26.5
1.26.10
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.10
otel/opentelemetry-collector-contrib:0.160.0799dc6cf12c9
stdlib@go1.26.8
1.26.10
ghcr.io/open-feature/flagd:v0.16.032234e63c1d0
stdlib@go1.25.10
1.26.10
ghcr.io/open-telemetry/demo:3.1.0-cart17c881cf29af
stdlib@go1.26.8
1.26.10
ghcr.io/open-telemetry/demo:3.1.0-opamp-server3b6c6220bf9c
stdlib@go1.27.1
1.26.10
ghcr.io/open-telemetry/demo:3.1.0-product-catalog7578cbf65fa4
stdlib@go1.27.1
1.26.10
ghcr.io/open-telemetry/demo:3.1.0-checkoutd4448ff54129
stdlib@go1.26.8
1.26.10
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
stdlib@go1.26.6
1.26.10

Open the chart page →

29,432
openvaultopenvaultVerified publisher0.9.01 of 2See more

openvault openvault 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
stdlib@go1.23.7
1.26.10

Open the chart page →

62,631
openvox-operatoropenvox-operatorVerified publisher0.14.01 of 1See more

openvox-operator openvox-operator 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/slauger/openvox-operator:0.14.0178b6dab6c8c
stdlib@go1.27.1
1.26.10

Open the chart page →

296
opikopikOfficialVerified publisher2.2.1196 of 12See more

opik opik 2.2.119

6 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.0862d86046bbc
stdlib@go1.25.5
1.26.10
altinity/clickhouse-operator:0.27.1a802b3a19d20
stdlib@go1.26.3
1.26.10
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
stdlib@go1.25.7
1.26.10
library/mysql:8.4.2ac80b6e09e5b
stdlib@go1.18.2
1.26.10
library/zookeeper:3.9.4dfa9ba46d14b
stdlib@go1.18.1
1.26.10
ghcr.io/comet-ml/opik/opik-python-backend:2.2.11961bff3ce24e9
stdlib@go1.26.8
1.26.10

Open the chart page →

16,952
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest35575d4f2bfe
stdlib@go1.24.13
1.26.10
shaowenchen/ops-server:latest6bac5cebd125
stdlib@go1.24.9
1.26.10

Open the chart page →

97,816
orbitalregorbitalregVerified publisher0.4.23 of 5See more

orbitalreg orbitalreg 0.4.2

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.10
orbitalreg/orbitalreg-api:0.4.2e6e12f7e471a
stdlib@go1.25.14
1.26.10
orbitalreg/orbitalreg-scanner:0.4.27497639e8edd
stdlib@go1.26.4-X:jsonv2
1.26.10

Open the chart page →

5,933
kubernetes-dashboard-proxyosc0.7.23 of 4See more

kubernetes-dashboard-proxy osc 0.7.2

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.7.02e500d29e9d5
stdlib@go1.19
1.26.10
kubernetesui/metrics-scraper:v1.0.876049887f07a
stdlib@go1.18.2
1.26.10
quay.io/oauth2-proxy/oauth2-proxy:v7.1.3ecd26b74a01f
stdlib@go1.16
1.26.10

Open the chart page →

9,266
osc-bsu-csi-driverosc-bsu-csi-driverVerified publisher2.3.05 of 6See more

osc-bsu-csi-driver osc-bsu-csi-driver 2.3.0

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
stdlib@go1.24.2
1.26.10

Open the chart page →

4,784
httpbinowan-charts0.1.91 of 1See more

httpbin owan-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mccutchen/go-httpbin:latest873b4fdb27fe
stdlib@go1.27.2
1.26.10

Open the chart page →

6
hlf-caowkin2.1.02 of 2See more

hlf-ca owkin 2.1.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:1.5.1c7f3422ec1d5
stdlib@go1.15.7
1.26.10
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.10

Open the chart page →

5,155
hlf-ordowkin3.1.01 of 1See more

hlf-ord owkin 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:2.2.137294e05209b
stdlib@go1.14.4
1.26.10

Open the chart page →

4,665
hlf-peerowkin5.1.01 of 1See more

hlf-peer owkin 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hyperledger/fabric-peer:2.2.1bf4995c86af6
stdlib@go1.14.4
1.26.10

Open the chart page →

5,050

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
stdlib@go1.26.4
1.26.10
1
ghcr.io/stac-utils/pgstac-pypgstac:v0.9.12672faad776b5
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
0.103.16
1.0.10
1
ghcr.io/stac-utils/titiler-pgstac:3.2.09a35f907dc70
ca-certificates@20260611-r1
20260909-r3
1
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
stdlib@go1.24.13
1.26.10
1
ghcr.io/stakater/reloader:v1.4.190530cf462fa3
stdlib@go1.26.4
1.26.10
1
ghcr.io/stakater/reloader:v1.4.4a571c5b32c0f
stdlib@go1.24.4
1.26.10
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
stdlib@go1.25.3
1.26.10
1
ghcr.io/stashed/stash-crd-installer:v0.42.076f0a650e44b
stdlib@go1.25.3
1.26.10
1
ghcr.io/stashed/stash-crd-installer:v0.32.0c6f2a844b5dd
stdlib@go1.20.8
1.26.10
1
ghcr.io/stashed/stash-crd-installer:v0.42.1d6c9b7a1f7b8
stdlib@go1.25.5
1.26.10
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
stdlib@go1.25.5
1.26.10
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
stdlib@go1.20.7
1.26.10
1
ghcr.io/steadybit/extension-auto-registration-kubernetes:v1.0.19ad514d6e4679
stdlib@go1.27.2
1.26.10
1
ghcr.io/steadybit/extension-container:v1.9.14e34e4ffc672
stdlib@go1.25.12
1.26.10
1
ghcr.io/steadybit/extension-host:v1.9.13ebe300ed5bd
stdlib@go1.25.12
1.26.10
1
ghcr.io/steadybit/extension-http:v1.0.590c126cd27587
stdlib@go1.27.2
1.26.10
1
ghcr.io/steadybit/extension-kubernetes:v2.7.0a7940f89ef81
stdlib@go1.26.8
1.26.10
1
ghcr.io/steeltanuki/kubefacet:0.2.1994e9468b957
stdlib@go1.26.7
1.26.10
1
ghcr.io/stefanprodan/podinfo:6.15.0ec73780a8425
stdlib@go1.27.0
1.26.10
1
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
stdlib@go1.17.9
1.26.10
1
ghcr.io/stenic/k8status:0.17.093298e03089e
stdlib@go1.23.12
1.26.10
1
ghcr.io/stenic/sql-operator:1.13.2f4324baa2aad
stdlib@go1.17.13
1.26.10
1
ghcr.io/stenic/well-known:1.11.0ae85f257a10f
stdlib@go1.24.13
1.26.10
1
ghcr.io/storax/kubedoom:0.6.0851ba8c80b93
stdlib@go1.17.6
1.26.10
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
stdlib@go1.22.1
1.26.10
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
stdlib@go1.18.5
1.26.10
1
ghcr.io/streamingfast/firehose-core:v1.21.1d469a5a21011
stdlib@go1.27.2
1.26.10
1
ghcr.io/streamingfast/firehose-ethereum:v2.24.128d8867b9ce9
stdlib@go1.27.2
1.26.10
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
stdlib@go1.24.5
1.26.10
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
stdlib@go1.24.2
1.26.10
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
stdlib@go1.25.7
1.26.10
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
stdlib@go1.22.9
1.26.10
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
stdlib@go1.22.9
1.26.10
1
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
stdlib@go1.25.12
1.26.10
1
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
stdlib@go1.25.11
1.26.10
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
stdlib@go1.18.10
1.26.10
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
stdlib@go1.18.10
1.26.10
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
stdlib@go1.21.13
1.26.10
1
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
stdlib@go1.22.5
1.26.10
1
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
stdlib@go1.25.12
1.26.10
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
stdlib@go1.20.3
1.26.10
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
stdlib@go1.20.5
1.26.10
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
stdlib@go1.22.4
1.26.10
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
stdlib@go1.20.6
1.26.10
1
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
stdlib@go1.22.4
1.26.10
1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
stdlib@go1.20.3
1.26.10
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
stdlib@go1.22.4
1.26.10
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
stdlib@go1.20.14
1.26.10
1
ghcr.io/syself/hetzner-cloud-controller-manager:v2.0.77d4a5e29c387
stdlib@go1.24.5
1.26.10
1
ghcr.io/taekjaskyli/kafka-canary:0.9.016b91402a5ca
stdlib@go1.26.8
1.26.10
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.