StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56q
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
stdlib@go1.23.11
1.26.10

Open the chart page →

6,299
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
stdlib@go1.25.3
1.26.10

Open the chart page →

8,757
self-hostbitwarden2.5.210 of 11See more

self-host bitwarden 2.5.2

10 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bitwarden/admin:2026.9.2e82f37409cce
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/api:2026.9.272abdfb33c83
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/attachments:2026.9.2a3e09f120b64
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/events:2026.9.2818a1d907fc4
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/icons:2026.9.25e23eaab3976
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/identity:2026.9.263037d60f7d8
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/notifications:2026.9.2029f0d8a576f
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/sso:2026.9.23ef058df2039
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/web:2026.9.10d9b5f239cb8
stdlib@go1.26.5
1.26.10
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
stdlib@go1.23.1
1.26.10

Open the chart page →

8,490
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
stdlib@go1.21.6
1.26.10

Open the chart page →

3,604
boundaryboundary-chart0.3.121 of 1See more

boundary boundary-chart 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/boundary:0.15.3339b78b61750
stdlib@go1.21.8
1.26.10

Open the chart page →

2,310
syncthingbrandan-schmitz-helm-chartsVerified publisher2.1.01 of 1See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.1775c4aac4862
stdlib@go1.26.3
1.26.10

Open the chart page →

1,576
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
stdlib@go1.13.10
1.26.10

Open the chart page →

9,904
btrfs-nfs-csibtrfs-nfs-csi0.4.07 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
stdlib@go1.26.7
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
stdlib@go1.25.7
1.26.10

Open the chart page →

6,353
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
stdlib@go1.21.4
1.26.10

Open the chart page →

3,030
agentbuildkite0.6.41 of 1See more

agent buildkite 0.6.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
buildkite/agent:3.25.0aec38cfaae0e
stdlib@go1.14.7
1.26.10

Open the chart page →

3,970
buildkite-agent-metricsbuildkite-agent-metrics0.1.01 of 1See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
stdlib@go1.25.1
1.26.10

Open the chart page →

2,299
buildkit-fleetbuildkit-fleetVerified publisher0.1.21 of 1See more

buildkit-fleet buildkit-fleet 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
moby/buildkit:v0.33.0-rootless80b15f0735e8
stdlib@go1.26.8
1.26.10

Open the chart page →

1,402
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
rustls-webpki@0.103.13
stdlib@go1.26.5
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

2,885
argocd-source-trackercableship0.0.91 of 1See more

argocd-source-tracker cableship 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
stdlib@go1.24.2
1.26.10

Open the chart page →

2,327
chart-sentinelcableship0.0.121 of 1See more

chart-sentinel cableship 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
stdlib@go1.24.2
1.26.10

Open the chart page →

2,327
pgcagriekinVerified publisher2.5.01 of 2See more

pg cagriekin 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
stdlib@go1.24.4
1.26.10

Open the chart page →

2,260
pgvectorcagriekinVerified publisher2.5.02 of 3See more

pgvector cagriekin 2.5.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
stdlib@go1.24.4
1.26.10
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
stdlib@go1.24.6
1.26.10

Open the chart page →

4,692
camel-dashboard-operatorcamel-dashboardVerified publisher0.1.01 of 1See more

camel-dashboard-operator camel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/camel-tooling/camel-dashboard-operator:latest5e867d01846e
stdlib@go1.25.9
1.26.10

Open the chart page →

995
camel-monitor-operatorcamel-dashboardVerified publisher0.2.11 of 1See more

camel-monitor-operator camel-dashboard 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/camel-tooling/camel-monitor-operator:latestc644e786c5f9
stdlib@go1.27.2
1.26.10

Open the chart page →

5
camunda-operatorcamunda-operatorVerified publisher0.2.01 of 1See more

camunda-operator camunda-operator 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/konsole-is/camunda-operator:0.2.0c06f61af7b3c
stdlib@go1.27.2
1.26.10

Open the chart page →

75
capsulecapsuleOfficialVerified publisher0.15.12 of 2See more

capsule capsule 0.15.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/projectcapsule/capsule:v0.15.1fb1eed4437f8
stdlib@go1.27.1
1.26.10

Open the chart page →

1,986
capsule-proxycapsule-proxyOfficialVerified publisher0.15.22 of 2See more

capsule-proxy capsule-proxy 0.15.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/projectcapsule/capsule-proxy:v0.15.20f91cf29ebc9
ca-certificates@20260909-r2
stdlib@go1.27.1
20260909-r3
1.26.10

Open the chart page →

1,949
casdoorcasdoorVerified publisher4.23.01 of 1See more

casdoor casdoor 4.23.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
casbin/casdoor:4.23.0e13c9aada231
stdlib@go1.25.8
1.26.10

Open the chart page →

955
fluxcd-webuiccowleyVerified publisher0.0.21 of 2See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
adrianberger/fluxcd-webui:latest76848c0d2780
stdlib@go1.16.2
1.26.10

Open the chart page →

4,809
celestia-nodecelestia-node0.1.71 of 1See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
stdlib@go1.23.0
1.26.10

Open the chart page →

2,427
cert-estuarycert-estuaryVerified publisher0.2.11 of 1See more

cert-estuary cert-estuary 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/hsn723/cert-estuary:0.2.00c4b6132b0ad
stdlib@go1.26.2
1.26.10

Open the chart page →

664
cert-manager-approver-policycert-managerOfficialVerified publisher0.28.01 of 1See more

cert-manager-approver-policy cert-manager 0.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-approver-policy:v0.28.01a955b0a5c41
stdlib@go1.27.1
1.26.10

Open the chart page →

232
cert-manager-google-cas-issuercert-managerOfficialVerified publisher0.13.01 of 1See more

cert-manager-google-cas-issuer cert-manager 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-google-cas-issuer:v0.13.00d6a852d7c6a
stdlib@go1.27.1
1.26.10

Open the chart page →

232
finops-stackcert-managerVerified publisher0.0.57 of 12See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
stdlib@go1.22.4
1.26.10
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
stdlib@go1.21.12
1.26.10

Open the chart page →

17,599
cert-manager-webhook-arvancloudcert-manager-webhook-arvancloudVerified publisher0.1.11 of 1See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
stdlib@go1.24.4
1.26.10

Open the chart page →

1,663
cert-manager-webhook-gandicert-manager-webhook-gandi0.6.01 of 1See more

cert-manager-webhook-gandi cert-manager-webhook-gandi 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
stdlib@go1.22.0
1.26.10

Open the chart page →

1,738
cert-manager-webhook-ionos-cloudcert-manager-webhook-ionos-cloudVerified publisher0.3.41 of 1See more

cert-manager-webhook-ionos-cloud cert-manager-webhook-ionos-cloud 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ionos-cloud/cert-manager-webhook-ionos-cloud:v1.0.5b1b706e10d22
stdlib@go1.27.1
1.26.10

Open the chart page →

248
cert-manager-webhook-porkbuncert-manager-webhook-porkbunVerified publisher2.0.81 of 1See more

cert-manager-webhook-porkbun cert-manager-webhook-porkbun 2.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/octabits-io/cert-manager-webhook-porkbun:2.0.8c0c3231e459b
stdlib@go1.27.2
1.26.10

Open the chart page →

16
cert-vaultcert-vaultOfficialVerified publisher2.12.04 of 7See more

cert-vault cert-vault 2.12.0

4 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
stdlib@go1.23.7
1.26.10
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
stdlib@go1.23.7
1.26.10
bitnamilegacy/redis-exporter:1.69.0-debian-12-r1a006df1fd47e
stdlib@go1.23.7
1.26.10
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10

Open the chart page →

18,862
chatclichatcliVerified publisher1.224.01 of 2See more

chatcli chatcli 1.224.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
stdlib@go1.23.10
1.26.10

Open the chart page →

1,570
chatcli-operatorchatcli-operatorVerified publisher1.224.01 of 2See more

chatcli-operator chatcli-operator 1.224.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
stdlib@go1.23.10
1.26.10

Open the chart page →

1,563
squestchristianhuthVerified publisher7.0.41 of 4See more

squest christianhuth 7.0.4

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/rabbitmq:4.4.0-managementc200fd496482
stdlib@go1.25.0
1.26.10

Open the chart page →

5,257
typo3christianhuthVerified publisher8.0.11 of 1See more

typo3 christianhuth 8.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crinis/typo3:legacy-13.4.365636db17b924
stdlib@go1.24.4
1.26.10

Open the chart page →

4,718
challengerchronicleVerified publisher0.1.21 of 1See more

challenger chronicle 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/challenger-go:0.1.2c8d5a3c0e966
stdlib@go1.22.12
1.26.10

Open the chart page →

1,410
erpcchronicleVerified publisher0.7.11 of 1See more

erpc chronicle 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/erpc/erpc:0.1.18bfed3d49a08
stdlib@go1.26.4
1.26.10

Open the chart page →

715
spectrechronicleVerified publisher0.3.91 of 1See more

spectre chronicle 0.3.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/spectre:0.68.34e872bc016e8
stdlib@go1.25.5
1.26.10

Open the chart page →

2,105
validatorchronicleVerified publisher0.8.21 of 1See more

validator chronicle 0.8.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/ghost:0.81.0417b664eee72
stdlib@go1.27.1
1.26.10

Open the chart page →

697
access-managerckotzbauerVerified publisher0.14.31 of 1See more

access-manager ckotzbauer 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/access-managerdigest-pinneddd584fcda0ff
stdlib@go1.22.1
1.26.10

Open the chart page →

1,311
clairclair0.0.31 of 1See more

clair clair 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.7.28d38ffa8fad7
stdlib@go1.20.9
1.26.10

Open the chart page →

4,132
clamav-restclamav-rest-apiVerified publisher0.1.01 of 1See more

clamav-rest clamav-rest-api 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ajilaag/clamav-rest:latestad689c7b75b1
stdlib@go1.26.0
1.26.10

Open the chart page →

928
claude-code-hubclaude-code-hub0.1.01 of 4See more

claude-code-hub claude-code-hub 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.10

Open the chart page →

2,370
clickhouse-operator-helmclickhouse-operator0.0.81 of 1See more

clickhouse-operator-helm clickhouse-operator 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/clickhouse/clickhouse-operator:v0.0.880ff894a42fb
stdlib@go1.27.1
1.26.10

Open the chart page →

228
cloudbees-sidecar-injectorcloudbees2.3.32 of 2See more

cloudbees-sidecar-injector cloudbees 2.3.3

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudbees/cert-requester:2.3.31d44fb4f799b
stdlib@go1.20.1
1.26.10
cloudbees/sidecar-injector:2.3.38f102ef0383a
stdlib@go1.20.1
1.26.10

Open the chart page →

4,958
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220202 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

2 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
stdlib@go1.14.4
1.26.10
prom/prometheus:v2.21.0d43417c260e5
stdlib@go1.15.2
1.26.10

Open the chart page →

6,709
cnpg-sandboxcloudnative-pgVerified publisher0.6.13 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

3 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:8.3.5cd7cb4345aa7
stdlib@go1.17.6
1.26.10
ghcr.io/cloudnative-pg/cloudnative-pg:1.17.14dd365800b62
stdlib@go1.18.6
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
stdlib@go1.17.6
1.26.10

Open the chart page →

10,868

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
stdlib@go1.25.6
1.26.10
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
stdlib@go1.25.5
1.26.10
1
ghcr.io/voyagermesh/gateway:v0.0.1a8a144f14889
stdlib@go1.20.5
1.26.10
1
ghcr.io/voyagermesh/gateway-converter:v0.0.1b92123805584
stdlib@go1.23.1
1.26.10
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
stdlib@go1.25.8
1.26.10
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
stdlib@go1.21.1
1.26.10
1
ghcr.io/vshn/stardog-userrole-operator:v0.3.04774237c9e86
stdlib@go1.22.2
1.26.10
1
ghcr.io/vvanouytsel/jetspotter:1.49.0d6f9149a36db
stdlib@go1.23.12
1.26.10
1
ghcr.io/wachd/wachd:0.4.1805b05c56da94
stdlib@go1.25.10
1.26.10
1
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
stdlib@go1.20.2
1.26.10
1
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
stdlib@go1.23.10
1.26.10
1
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
stdlib@go1.25.4
1.26.10
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
stdlib@go1.20.12
1.26.10
1
ghcr.io/wenisch-tech/adapterfs:0.1.5ef2ff9849d9c
ca-certificates@20260909-r2
20260909-r3
1
ghcr.io/wenisch-tech/contextcrate:0.9.179a5f334e9f09
ca-certificates@20260909-r2
20260909-r3
1
ghcr.io/wenisch-tech/petri:0.21.005b363251c18
stdlib@go1.27.2
1.26.10
1
ghcr.io/wenisch-tech/proxera:0.12.205ac0e9f6b42f
ca-certificates@20260413-r0
20260909-r3
1
ghcr.io/wenisch-tech/smtp2x:0.5.5a7f0e02ba10c
ca-certificates@20260909-r2
20260909-r3
1
ghcr.io/wenkow/cert-manager-webhook-f5xc:0.6.172f9541b568c
stdlib@go1.27.2
1.26.10
1
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
stdlib@go1.23.7
1.26.10
1
ghcr.io/whitemug/eviction-guard:0.2.3b511e913c5c4
stdlib@go1.27.1
1.26.10
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
stdlib@go1.25.5
1.26.10
1
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
stdlib@go1.25.5
1.26.10
1
ghcr.io/wiremind/druid-tasks-exporter:v0.4.04755c3fcd5f0
stdlib@go1.21.4
1.26.10
1
ghcr.io/wiremind/koherence:v0.2.39c2afc45c55d
stdlib@go1.22.3
1.26.10
1
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
stdlib@go1.26.5
1.26.10
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
stdlib@go1.26.5
1.26.10
1
ghcr.io/wjentner/k8s-db-backup-retention:v1.1.08027bb46d1f4
stdlib@go1.23.5
1.26.10
1
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
stdlib@go1.21.9
1.26.10
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
stdlib@go1.22.3
1.26.10
1
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
stdlib@go1.23.6
1.26.10
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
stdlib@go1.23.6
1.26.10
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
stdlib@go1.23.12
1.26.10
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
stdlib@go1.20.7
1.26.10
1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
stdlib@go1.16.15
1.26.10
1
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones:0.1.5a7a846bba3e8
stdlib@go1.25.11
1.26.10
1
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
stdlib@go1.18.6
1.26.10
1
ghcr.io/yeonghoo2/crashloop-operator:0.0.6565d1115e6bd
stdlib@go1.24.9
1.26.10
1
ghcr.io/yetone/magpie:latest0916bb851298
stdlib@go1.26.9
1.26.10
1
ghcr.io/zak905/kube-ecr-secrets-operator/controller-manager:0.2.11d078e45bac70
stdlib@go1.26.6
1.26.10
1
ghcr.io/zalando/postgres-operator:v2.0.32d3a7ca3950f
stdlib@go1.26.8
1.26.10
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
stdlib@go1.23.4
1.26.10
1
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
stdlib@go1.22.3
1.26.10
1
ghcr.io/zalando/skipper:v0.28.398a50a01aea02
stdlib@go1.27.2
1.26.10
1
ghcr.io/zapier/kubechecks:latest74bc8499cc99
stdlib@go1.26.3
1.26.10
1
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
stdlib@go1.19.4
1.26.10
1
ghcr.io/zeiss/natz-operator/account-server:0.9.5b380b5f17c3f
stdlib@go1.23.3
1.26.10
1
ghcr.io/zeiss/natz-operator/operator:0.9.5187007974540
stdlib@go1.23.3
1.26.10
1
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
ca-certificates@20241121-r1
stdlib@go1.24.0
20260909-r3
1.26.10
1
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
ca-certificates@20241121-r1
stdlib@go1.24.0
20260909-r3
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.