StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58GO-2026-6809CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
dexidp/dex:v2.39.1-distroless43655afd1a8f
stdlib@go1.21.6
1.26.10
2
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
stdlib@go1.16.2
1.26.10
2
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
stdlib@go1.16.15
1.26.10
2
dunglas/mercure:v0:v0.24.2916834e49961
stdlib@go1.26.3
1.26.10
2
envoyproxy/gateway:v1.9.29d67017c442a
stdlib@go1.26.8
1.26.10
2
eqalpha/keydb:latest6537505c4235
stdlib@go1.16.7
1.26.10
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
stdlib@go1.16.7
1.26.10
2
falcosecurity/falco-driver-loader:0.33.11fe583eee4af
stdlib@go1.18.6
1.26.10
2
falcosecurity/falco-no-driver:0.33.10d427b8d5fc6
stdlib@go1.18.6
1.26.10
2
filebrowser/filebrowser:v2.23.086e8449ff8ff
stdlib@go1.18.3
1.26.10
2
filebrowser/filebrowser:latest:v2.63.23a469ea076d4a
stdlib@go1.26.5
1.26.10
2
filebrowser/filebrowser:v2.13.0c5d0a75a0041
stdlib@go1.16.2
1.26.10
2
flashcatcloud/categraf:latest42e6ab16472e
stdlib@go1.25.14
1.26.10
2
foundationdb/fdb-kubernetes-operator:v2.3.07d7b6985291e
stdlib@go1.23.7
1.26.10
2
free5gc/amf:v3.4.31bc96ff5a2a6
stdlib@go1.21.8
1.26.10
2
free5gc/ausf:v3.4.3687ff4daf5da
stdlib@go1.21.8
1.26.10
2
free5gc/chf:v3.4.3e2a4dd98a4ed
stdlib@go1.21.8
1.26.10
2
free5gc/nrf:v3.4.399e46b860efb
stdlib@go1.21.8
1.26.10
2
free5gc/nssf:v3.4.3dfe8c68c04b4
stdlib@go1.21.8
1.26.10
2
free5gc/pcf:v3.4.3f712e8ecd927
stdlib@go1.21.8
1.26.10
2
free5gc/smf:v3.4.360e38baa4b10
stdlib@go1.21.8
1.26.10
2
free5gc/udm:v3.4.32f68df062a50
stdlib@go1.21.8
1.26.10
2
free5gc/udr:v3.4.3c0783bcdcbdc
stdlib@go1.21.8
1.26.10
2
free5gc/upf:v3.4.3b6b362a39fdd
stdlib@go1.21.8
1.26.10
2
free5gc/webui:v3.4.39adeb18492cb
stdlib@go1.21.8
1.26.10
2
friendsofgo/killgrave:0.4.139cfbecca342
stdlib@go1.16.3
1.26.10
2
frinx/krakend:7.0.0bf8edd4f52f3
stdlib@go1.22.7
1.26.10
2
frinx/resource-manager:6.1.09cd0147a09bd
stdlib@go1.21.7
1.26.10
2
frinx/schellar:6.1.04693dc627d32
stdlib@go1.21.11
1.26.10
2
garethgeorge/backrest:latest:v1.14.1b85297975428
stdlib@go1.26.0
1.26.10
2
garugaru/aws-cloudwatch-exporter:latest541852cafda5
stdlib@go1.16.15
1.26.10
2
githubexporter/github-exporter:v2.3.1a36fbedeedf8
stdlib@go1.26.4
1.26.10
2
glanceapp/glance:latest:v0.8.69dfb09470b20
stdlib@go1.27.1
1.26.10
2
goelankit/cortex-gateway:v1.1.00d9a82dcf026
stdlib@go1.18
1.26.10
2
gomods/athens:v0.11.0efb811df7844
stdlib@go1.13.10
1.26.10
2
gotenberg/gotenberg:8.38.1aa552cc115db
stdlib@go1.27.1
1.26.10
2
governify/dashboard:lateste83a17ba5038
stdlib@go1.17
1.26.10
2
grafana/agent-operator:v0.25.1a136c6208aa3
stdlib@go1.18
1.26.10
2
grafana/alloy:v1.8.17790f6f7fbd8
stdlib@go1.24.1
1.26.10
2
grafana/alloy:v1.19.2b8ec653c4423
stdlib@go1.26.7
1.26.10
2
grafana/grafana:9.2.4057896e23443
stdlib@go1.19.3
1.26.10
2
grafana/grafana:11.1.0079600c9517b
stdlib@go1.22.4
1.26.10
2
grafana/grafana:13.0.10f86bada30d6
stdlib@go1.26.0
1.26.10
2
grafana/grafana:12.3.12175aaa91c96
stdlib@go1.25.5
1.26.10
2
grafana/grafana:8.5.042d3e6bc1865
stdlib@go1.17.9
1.26.10
2
grafana/grafana:7.3.5511bc20bfcd1
stdlib@go1.15.5
1.26.10
2
grafana/grafana:11.1.4886b56d5534e
stdlib@go1.22.4
1.26.10
2
grafana/grafana:12.3.39e1e77ade304
stdlib@go1.25.7
1.26.10
2
grafana/grafana:11.4.0d8ea37798ccc
stdlib@go1.23.1
1.26.10
2
grafana/grafana:12.4.1e932bd6ed0e0
stdlib@go1.25.8
1.26.10
2

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.