StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,294
of 18,232 indexed, latest versions
Container images
6,212
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,104
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars
ChartLatestAffected imagesRadar Score
awx-operatorawx-operator-helm3.2.12 of 2See more

awx-operator awx-operator-helm 3.2.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
stdlib@go1.20.12
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
stdlib@go1.21.3
1.26.10

Open the chart page →

11,585
cert-manager-istio-csrcert-managerOfficialVerified publisher0.18.01 of 1See more

cert-manager-istio-csr cert-manager 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-istio-csr:v0.18.0495dcdad72a4
stdlib@go1.27.1
1.26.10

Open the chart page →

323
cadvisorckotzbauerVerified publisher2.4.31 of 1See more

cadvisor ckotzbauer 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
stdlib@go1.24.1
1.26.10

Open the chart page →

1,547
m365-exportercloudeteer-helm-chartsVerified publisher1.7.21 of 1See more

m365-exporter cloudeteer-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudeteer/m365-exporter:3.9.4eb604f3fb313
stdlib@go1.27.2
1.26.10

Open the chart page →

76
openstack-cloud-controller-managercloud-provider-openstack2.37.11 of 1See more

openstack-cloud-controller-manager cloud-provider-openstack 2.37.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/openstack-cloud-controller-manager:v1.37.15b1bf75c418e
stdlib@go1.26.5
1.26.10

Open the chart page →

384
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
stdlib@go1.14.4
1.26.10

Open the chart page →

5,461
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
stdlib@go1.21.9
1.26.10

Open the chart page →

8,213
dronecommunity-chartsVerified publisher0.1.52 of 2See more

drone community-charts 0.1.5

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
drone/drone:2.28.255897c8fb22d
stdlib@go1.24.13
1.26.10
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
stdlib@go1.16.15
1.26.10

Open the chart page →

4,347
convoyconvoyVerified publisher3.7.132 of 3See more

convoy convoy 3.7.13

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10
getconvoy/convoy:v26.7.6f4934cc05e31
stdlib@go1.26.2
1.26.10

Open the chart page →

7,497
cortexcortex3.5.02 of 4See more

cortex cortex 3.5.0

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/memcached-exporter:v0.17.0995c80e3ffbe
stdlib@go1.26.6
1.26.10
quay.io/cortexproject/cortex:v1.21.18577eb292a01
stdlib@go1.25.8
1.26.10

Open the chart page →

4,156
whoamicowboysysopVerified publisher6.1.01 of 1See more

whoami cowboysysop 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
traefik/whoami:v1.12.0c4717a8d1f01
stdlib@go1.26.5
1.26.10

Open the chart page →

387
doris-operatordorisVerified publisher25.8.01 of 1See more

doris-operator doris 25.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/doris:operator-latest3a4422656592
stdlib@go1.23.12
1.26.10

Open the chart page →

949
uptime-kumaduyet0.1.81 of 1See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
stdlib@go1.18.5
1.26.10

Open the chart page →

5,942
emqx-operatoremqx-operator3.0.01 of 1See more

emqx-operator emqx-operator 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/emqx/emqx-operator:3.0.02ce80aeb59d6
stdlib@go1.26.8
1.26.10

Open the chart page →

242
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
stdlib@go1.19.5
1.26.10

Open the chart page →

3,222
gethethereum-helm-chartsVerified publisher1.1.41 of 2See more

geth ethereum-helm-charts 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ethereum/client-go:stable8fc513472bef
stdlib@go1.27.1
1.26.10

Open the chart page →

304
gotifygotifyVerified publisher0.9.01 of 1See more

gotify gotify 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/gotify/server:3.1.144fc5bbd1c06
stdlib@go1.26.0
1.26.10

Open the chart page →

764
alloy-operatorgrafana0.9.31 of 1See more

alloy-operator grafana 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.14.39b6e52e6846c
stdlib@go1.26.4
1.26.10

Open the chart page →

931
hcloud-csihcloud2.24.06 of 6See more

hcloud-csi hcloud 2.24.0

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:v2.24.05b25f70ea9ac
stdlib@go1.27.1
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.13.0d1a26170efed
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.18.0b7fefd08651f
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.20.019f2cf2f40e1
stdlib@go1.26.6
1.26.10

Open the chart page →

2,090
docmosthelmforgeVerified publisher1.4.41 of 4See more

docmost helmforge 1.4.4

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

4,969
wordpresshelmforgeVerified publisher3.0.121 of 3See more

wordpress helmforge 3.0.12

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:26.7.0625f74ddf936
stdlib@go1.24.6
1.26.10

Open the chart page →

4,959
korkorVerified publisher0.2.161 of 1See more

kor kor 0.2.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
yonahdissen/kor:latest1a85158c82bb
stdlib@go1.26.0
1.26.10

Open the chart page →

625
kubelet-csr-approverkubelet-csr-approverOfficialVerified publisher1.2.151 of 1See more

kubelet-csr-approver kubelet-csr-approver 1.2.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/postfinance/kubelet-csr-approver:v1.2.156469ef517d2b
ca-certificates@20260611-r1
stdlib@go1.26.7
20260909-r3
1.26.10

Open the chart page →

352
logging-operatorkube-loggingVerified publisher4.2.31 of 1See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/logging-operator:4.2.20dd85dcb1f73
stdlib@go1.20.5
1.26.10

Open the chart page →

1,610
myipkuossOfficialVerified publisher0.2.21 of 1See more

myip kuoss 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kuoss/myip:v0.1.7760f5ccae493
stdlib@go1.23.8
1.26.10

Open the chart page →

1,217
libredb-studiolibredb-studioOfficialVerified publisher0.1.1021 of 1See more

libredb-studio libredb-studio 0.1.102

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:1.0.00cb0177dd278
stdlib@go1.24.4
1.26.10

Open the chart page →

1,560
keptnlifecycle-toolkitOfficialVerified publisher0.11.03 of 3See more

keptn lifecycle-toolkit 0.11.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keptn/certificate-operator:v3.0.0b82064b0e339
stdlib@go1.23.3
1.26.10
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
stdlib@go1.23.3
1.26.10
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
stdlib@go1.23.3
1.26.10

Open the chart page →

3,685
lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher3.54.01 of 9See more

lightrun-helm-chart lightrun-helm-chart 3.54.0

1 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:8.4.108dbcf531a03a
stdlib@go1.24.6
1.26.10

Open the chart page →

908
mattermost-operatormattermostVerified publisher1.0.51 of 1See more

mattermost-operator mattermost 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mattermost/mattermost-operator:v1.25.4bac00a2bbd33
stdlib@go1.24.13
1.26.10

Open the chart page →

704
meshery-operatormesheryOfficialVerified publisher1.0.742 of 2See more

meshery-operator meshery 1.0.74

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
stdlib@go1.26.3
1.26.10
meshery/meshery-operator:1.0.61fdc6beb4dd1
stdlib@go1.27.1
1.26.10

Open the chart page →

3,579
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
stdlib@go1.16.2
1.26.10

Open the chart page →

3,714
tailscale-relaymvisonneau0.2.71 of 1See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mvisonneau/tailscale:v1.68.1fc45ad8abf10
stdlib@go1.22.4
1.26.10

Open the chart page →

1,987
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edge9b13f0b831ab
stdlib@go1.27.2
1.26.10

Open the chart page →

1,245
system-upgrade-controllernimbolus0.7.01 of 1See more

system-upgrade-controller nimbolus 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.18.09813f85653c8
stdlib@go1.25.3
1.26.10

Open the chart page →

795
olmolmVerified publisher0.46.01 of 1See more

olm olm 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:v0.46.04404599eb7b7
stdlib@go1.26.3
1.26.10

Open the chart page →

599
opencostopencost-ociOfficialVerified publisher2.5.331 of 2See more

opencost opencost-oci 2.5.33

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.10

Open the chart page →

580
ketoory0.64.01 of 1See more

keto ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/keto:v26.2.0bfdb8b9e283a
stdlib@go1.26.0
1.26.10

Open the chart page →

1,519
oathkeeperory0.64.01 of 1See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/oathkeeper:v26.2.0467329abde34
stdlib@go1.26.0
1.26.10

Open the chart page →

1,463
passboltpassbolt2.2.13 of 6See more

passbolt passbolt 2.2.1

3 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.10
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10
library/mariadb:latest0e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

13,934
capsuleprojectcapsuleOfficialVerified publisher0.15.12 of 2See more

capsule projectcapsule 0.15.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/projectcapsule/capsule:v0.15.1fb1eed4437f8
stdlib@go1.27.1
1.26.10

Open the chart page →

1,985
redis-enterprise-operatorredis-enterprise-operator-officialOfficialVerified publisher8.0.18-111 of 1See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
redislabs/operator:8.0.18-119078e713bb6a
stdlib@go1.26.1
1.26.10

Open the chart page →

1,500
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:lateste992092fcc9b
stdlib@go1.26.7
1.26.10

Open the chart page →

2,297
selenium-gridselenium-grid0.62.13 of 4See more

selenium-grid selenium-grid 0.62.1

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
selenium/hub:4.51.0-202610104f94ce0ca99c
stdlib@go1.27.2
1.26.10
selenium/node-chrome:4.51.0-20261010b3f54a14452e
stdlib@go1.27.2
1.26.10
selenium/node-firefox:4.51.0-20261010e6a109a147cd
stdlib@go1.27.1
1.26.10

Open the chart page →

9,001
rekorsigstoreVerified publisher1.8.77 of 9See more

rekor sigstore 1.8.7

7 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redisdigest-pinned148bb5411c18
stdlib@go1.18.2
1.26.10
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
stdlib@go1.18.2
1.26.10
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
stdlib@go1.26.4
1.26.10
ghcr.io/sigstore/scaffolding/createdbdigest-pinned16673c1099a5
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createtreedigest-pinned4c845ced03d8
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned32ee491f4d00
stdlib@go1.27.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned3d0152303816
stdlib@go1.27.0
1.26.10

Open the chart page →

8,692
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latestcf8f0ab2ebe6
stdlib@go1.26.1
1.26.10

Open the chart page →

2,978
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
stdlib@go1.25.14
1.26.10

Open the chart page →

1,215
swo-k8s-collectorsolarwindsOfficialVerified publisher5.3.03 of 3See more

swo-k8s-collector solarwinds 5.3.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
stdlib@go1.26.4-X:boringcrypto
1.26.10
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.9.026f82b148dfe
stdlib@go1.25.9
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
stdlib@go1.26.2
1.26.10

Open the chart page →

3,826
sops-operatorsops-operatorVerified publisher0.10.12 of 2See more

sops-operator sops-operator 0.10.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/peak-scale/sops-operator:0.10.11da9b716b792
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10

Open the chart page →

2,177
thehivestrangebee-helmOfficialVerified publisher2.0.02 of 7See more

thehive strangebee-helm 2.0.0

2 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
stdlib@go1.24.6
1.26.10
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
stdlib@go1.25.0
1.26.10

Open the chart page →

69,077
truenas-csptruenas-cspVerified publisher1.2.410 of 11See more

truenas-csp truenas-csp 1.2.4

10 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
stdlib@go1.25.10
1.26.10
quay.io/hpestorage/csi-extensions:v1.2.1189146672a7ac
stdlib@go1.26.3
1.26.10
quay.io/hpestorage/volume-group-provisioner:v1.0.107bf9d8f16a5d
stdlib@go1.26.3
1.26.10
quay.io/hpestorage/volume-group-snapshotter:v1.0.10caeaaffe7e2b
stdlib@go1.26.3
1.26.10
quay.io/hpestorage/volume-mutator:v1.3.109e98b2e697bd
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
stdlib@go1.25.7
1.26.10

Open the chart page →

10,586

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/sredevopsorg/ghost-on-kubernetes:main305999dea18a
stdlib@go1.26.4
1.26.10
1
ghcr.io/stac-utils/pgstac-pypgstac:v0.9.12672faad776b5
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
0.103.16
1.0.10
1
ghcr.io/stac-utils/titiler-pgstac:3.2.09a35f907dc70
ca-certificates@20260611-r1
20260909-r3
1
ghcr.io/stakater/ingressmonitorcontroller:v2.2.133301afb61c10
stdlib@go1.24.13
1.26.10
1
ghcr.io/stakater/reloader:v1.4.190530cf462fa3
stdlib@go1.26.4
1.26.10
1
ghcr.io/stakater/reloader:v1.4.4a571c5b32c0f
stdlib@go1.24.4
1.26.10
1
ghcr.io/stashed/stash:v0.42.03a98245a7667
stdlib@go1.25.3
1.26.10
1
ghcr.io/stashed/stash-crd-installer:v0.42.076f0a650e44b
stdlib@go1.25.3
1.26.10
1
ghcr.io/stashed/stash-crd-installer:v0.32.0c6f2a844b5dd
stdlib@go1.20.8
1.26.10
1
ghcr.io/stashed/stash-crd-installer:v0.42.1d6c9b7a1f7b8
stdlib@go1.25.5
1.26.10
1
ghcr.io/stashed/stash-enterprise:v0.42.1759f3850eda9
stdlib@go1.25.5
1.26.10
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
stdlib@go1.20.7
1.26.10
1
ghcr.io/steadybit/extension-auto-registration-kubernetes:v1.0.19ad514d6e4679
stdlib@go1.27.2
1.26.10
1
ghcr.io/steadybit/extension-container:v1.9.14e34e4ffc672
stdlib@go1.25.12
1.26.10
1
ghcr.io/steadybit/extension-host:v1.9.13ebe300ed5bd
stdlib@go1.25.12
1.26.10
1
ghcr.io/steadybit/extension-http:v1.0.590c126cd27587
stdlib@go1.27.2
1.26.10
1
ghcr.io/steadybit/extension-kubernetes:v2.7.0a7940f89ef81
stdlib@go1.26.8
1.26.10
1
ghcr.io/steeltanuki/kubefacet:0.2.1994e9468b957
stdlib@go1.26.7
1.26.10
1
ghcr.io/stefanprodan/podinfo:6.15.0ec73780a8425
stdlib@go1.27.0
1.26.10
1
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
stdlib@go1.17.9
1.26.10
1
ghcr.io/stenic/k8status:0.17.093298e03089e
stdlib@go1.23.12
1.26.10
1
ghcr.io/stenic/sql-operator:1.13.2f4324baa2aad
stdlib@go1.17.13
1.26.10
1
ghcr.io/stenic/well-known:1.11.0ae85f257a10f
stdlib@go1.24.13
1.26.10
1
ghcr.io/storax/kubedoom:0.6.0851ba8c80b93
stdlib@go1.17.6
1.26.10
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
stdlib@go1.22.1
1.26.10
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
stdlib@go1.18.5
1.26.10
1
ghcr.io/streamingfast/firehose-core:v1.21.1d469a5a21011
stdlib@go1.27.2
1.26.10
1
ghcr.io/streamingfast/firehose-ethereum:v2.24.128d8867b9ce9
stdlib@go1.27.2
1.26.10
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
stdlib@go1.24.5
1.26.10
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
stdlib@go1.24.2
1.26.10
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
stdlib@go1.25.7
1.26.10
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
stdlib@go1.22.9
1.26.10
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
stdlib@go1.22.9
1.26.10
1
ghcr.io/strrl/supabase-operator:2026.7.2587d083ab8980
stdlib@go1.25.12
1.26.10
1
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
stdlib@go1.25.11
1.26.10
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
stdlib@go1.18.10
1.26.10
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
stdlib@go1.18.10
1.26.10
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
stdlib@go1.21.13
1.26.10
1
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
stdlib@go1.22.5
1.26.10
1
ghcr.io/supabase-community/supabase-operator:v0.1.3253a6dcbf4f0
stdlib@go1.25.12
1.26.10
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
stdlib@go1.20.3
1.26.10
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
stdlib@go1.20.5
1.26.10
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
stdlib@go1.22.4
1.26.10
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
stdlib@go1.20.6
1.26.10
1
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
stdlib@go1.22.4
1.26.10
1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
stdlib@go1.20.3
1.26.10
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
stdlib@go1.22.4
1.26.10
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
stdlib@go1.20.14
1.26.10
1
ghcr.io/syself/hetzner-cloud-controller-manager:v2.0.77d4a5e29c387
stdlib@go1.24.5
1.26.10
1
ghcr.io/taekjaskyli/kafka-canary:0.9.016b91402a5ca
stdlib@go1.26.8
1.26.10
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.