StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,728
of 18,208 indexed, latest versions
Container images
6,681
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,728 of 18,208 indexed charts deploy, on 6,681 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.106,438
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+17 more20260909-r3417
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16103
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1070
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1113
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,728 by stars
ChartLatestAffected imagesRadar Score
postgrescloudpirates-postgresVerified publisher0.21.21 of 1See more

postgres cloudpirates-postgres 0.21.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

1,748
vault-secrets-operatorhashicorpVerified publisher1.6.02 of 2See more

vault-secrets-operator hashicorp 1.6.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/vault-secrets-operator:1.6.002a79a046037
stdlib@go1.27.1
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
stdlib@go1.23.0
1.26.10

Open the chart page →

1,789
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
stdlib@go1.21.4
1.26.10

Open the chart page →

2,107
rocketchatrocketchat-server7.0.26 of 12See more

rocketchat rocketchat-server 7.0.2

6 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
stdlib@go1.20.7
1.26.10
library/nats:2.12-alpineb270f5e24283
stdlib@go1.25.12
1.26.10
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.10
natsio/nats-server-config-reloader:0.21.110ff229eaf52
stdlib@go1.25.5
1.26.10
natsio/prometheus-nats-exporter:0.18.002469dc907bc
stdlib@go1.24.6
1.26.10

Open the chart page →

17,033
valkeybitnamiVerified publisher6.3.41 of 1See more

valkey bitnami 6.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/valkey:latest9985c6b0fef4
stdlib@go1.26.9
1.26.10

Open the chart page →

4
trust-managercert-managerOfficialVerified publisher0.25.02 of 2See more

trust-manager cert-manager 0.25.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/trust-manager:v0.25.00521921c2a46
stdlib@go1.27.1
1.26.10
quay.io/jetstack/trust-pkg-debian-trixie:20250419.23093d4f6634f
stdlib@go1.27.1
1.26.10

Open the chart page →

391
gatekeepergatekeeperVerified publisher3.23.12 of 3See more

gatekeeper gatekeeper 3.23.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.23.1dfc6fc78753f
stdlib@go1.26.6
1.26.10
openpolicyagent/gatekeeper-crds:v3.23.1ab3620e6bec9
stdlib@go1.26.6
1.26.10

Open the chart page →

1,132
snapshot-controllerpiraeus-chartsVerified publisher5.4.01 of 1See more

snapshot-controller piraeus-charts 5.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.7.08511f417d007
stdlib@go1.26.9
1.26.10

Open the chart page →

81
zammadzammadOfficialVerified publisher19.2.01 of 5See more

zammad zammad 19.2.0

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.10

Open the chart page →

6,002
podinfopodinfo6.15.01 of 1See more

podinfo podinfo 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stefanprodan/podinfo:6.15.0ec73780a8425
stdlib@go1.27.0
1.26.10

Open the chart page →

532
victoria-metrics-clustervictoriametricsVerified publisher0.53.03 of 3See more

victoria-metrics-cluster victoriametrics 0.53.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/vminsert:v1.154.0-clusterd196c34f5392
stdlib@go1.27.2
1.26.10
victoriametrics/vmselect:v1.154.0-cluster49cb2d3e42c4
stdlib@go1.27.2
1.26.10
victoriametrics/vmstorage:v1.154.0-cluster91a0e2a70d45
stdlib@go1.27.2
1.26.10

Open the chart page →

51
solr-operatorapache-solrVerified publisher0.9.12 of 3See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/solr-operator:v0.9.14db34508137f
stdlib@go1.22.12
1.26.10
pravega/zookeeper-operator:0.2.15b2bc4042fdd8
stdlib@go1.19.7
1.26.10

Open the chart page →

4,340
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
stdlib@go1.21.3
1.26.10

Open the chart page →

2,933
k10kastenVerified publisher9.0.822 of 23See more

k10 kasten 9.0.8

22 of the 23 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/kasten-images/aggregatedapis:9.0.8086193ddd52d
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/auth:9.0.87f923711653d
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/bloblifecyclemanager:9.0.8878268b7e5ac
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/catalog:9.0.87d4d776140cc
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/configmap-reload:9.0.896cf500e332f
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/controllermanager:9.0.861e13b43fcc1
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/crypto:9.0.89bcd43f0b135
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/dashboardbff:9.0.8b39f7b4a32d3
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/events:9.0.89212dccdbd56
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/executor:9.0.898f092525110
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/garbagecollector:9.0.8d4d8bfc6ecb6
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/gateway:9.0.8dbac1fa54894
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/jobs:9.0.8c03dc755d95e
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/kanister:9.0.8b57ee7f25d73
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/kanister-tools:9.0.822efd199d94e
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/logging:9.0.8591e2750d95c
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/metering:9.0.88040f1224114
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/prometheus:9.0.83670eee10e91
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/repositories:9.0.856ac68b6039e
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/state:9.0.819226cf50938
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/upgrade:9.0.8765f930f330f
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/vbrintegrationapi:9.0.85eee71ec9f5a
stdlib@go1.27.2
1.26.10

Open the chart page →

1,761
mariadb-operatormariadb-operator26.10.11 of 1See more

mariadb-operator mariadb-operator 26.10.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/mariadb-operator/mariadb-operator:26.10.137714fb240a5
stdlib@go1.27.1
1.26.10

Open the chart page →

581
ceph-csi-cephfsceph-csiOfficialVerified publisher3.18.16 of 6See more

ceph-csi-cephfs ceph-csi 3.18.1

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.18.1a8c0653a9565
stdlib@go1.26.4
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.13.0d1a26170efed
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.18.0b7fefd08651f
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10

Open the chart page →

3,098
ceph-csi-rbdceph-csiOfficialVerified publisher3.18.16 of 6See more

ceph-csi-rbd ceph-csi 3.18.1

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.18.1a8c0653a9565
stdlib@go1.26.4
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.13.0d1a26170efed
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.18.0b7fefd08651f
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10

Open the chart page →

3,098
chaos-meshchaos-meshVerified publisher2.8.54 of 4See more

chaos-mesh chaos-mesh 2.8.5

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
stdlib@go1.25.5
1.26.10
ghcr.io/chaos-mesh/chaos-daemon:v2.8.5d794bf427ab1
stdlib@go1.25.11
1.26.10
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.5a6724412fe74
stdlib@go1.25.11
1.26.10
ghcr.io/chaos-mesh/chaos-mesh:v2.8.5942bff26d591
stdlib@go1.25.11
1.26.10

Open the chart page →

7,751
rabbitmqcloudpirates-rabbitmqVerified publisher0.21.311 of 2See more

rabbitmq cloudpirates-rabbitmq 0.21.31

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.6-management8dd6e3570dda
stdlib@go1.22.2
1.26.10

Open the chart page →

1,409
csi-driver-nfscsi-driver-nfsVerified publisher4.13.56 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.5

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/nfsplugin:v4.13.519162ec4fb3f
stdlib@go1.26.5
1.26.10

Open the chart page →

4,591
datahubdatahubVerified publisher1.1.73 of 4See more

datahub datahub 1.1.7

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
ca-certificates@20260611-r1
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
20260909-r3
0.103.16
1.0.10
acryldata/datahub-frontend-react:v1.7.0.199513cc1c45e
ca-certificates@20260611-r1
20260909-r3
acryldata/datahub-upgrade:v1.7.0.1c3db54d8fb94
ca-certificates@20260611-r1
20260909-r3

Open the chart page →

1,747
portainerportainer245.2.01 of 1See more

portainer portainer 245.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.45.203f94a406496
stdlib@go1.26.6
1.26.10

Open the chart page →

612
victoria-metrics-operatorvictoriametricsVerified publisher0.68.11 of 1See more

victoria-metrics-operator victoriametrics 0.68.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.10

Open the chart page →

231
atlantisatlantis6.16.11 of 1See more

atlantis atlantis 6.16.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.48.142bde40e38ec
stdlib@go1.26.6
1.26.10

Open the chart page →

919
codercoder-v2OfficialVerified publisher2.38.11 of 1See more

coder coder-v2 2.38.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.38.1fcddd64d5f08
stdlib@go1.26.8
1.26.10

Open the chart page →

192
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
stdlib@go1.19.4
1.26.10

Open the chart page →

3,422
milvusmilvus4.0.313 of 5See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.5-r2102aac62827b
stdlib@go1.18.2
1.26.10
milvusdb/milvus:v2.2.13a3a55e1c1497
stdlib@go1.18.3
1.26.10
milvusdb/milvus-config-tool:v0.1.12212dfb61401
stdlib@go1.16.15
1.26.10

Open the chart page →

174,044
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
stdlib@go1.25.5
1.26.10

Open the chart page →

3,574
flaggerflagger1.45.01 of 1See more

flagger flagger 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger:1.45.015b372d35012
stdlib@go1.26.7
1.26.10

Open the chart page →

523
grafana-agentgrafana0.44.22 of 2See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
stdlib@go1.22.11
1.26.10
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
stdlib@go1.21.1
1.26.10

Open the chart page →

4,939
tempografana-communityVerified publisher3.2.01 of 1See more

tempo grafana-community 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/tempo:3.1.03076b8dcdfb3
stdlib@go1.27.1
1.26.10

Open the chart page →

278
mesherymesheryOfficialVerified publisher1.0.711 of 1See more

meshery meshery 1.0.71

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
meshery/meshery:stable-latestb3816d0c691d
stdlib@go1.26.4
1.26.10

Open the chart page →

1,944
prometheus-mysql-exporterprometheus-communityVerified publisher2.15.01 of 1See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/mysqld-exporter:v0.20.0abed8dac117b
stdlib@go1.26.5
1.26.10

Open the chart page →

387
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10

Open the chart page →

12,160
tomcatbitnamiVerified publisher13.6.341 of 1See more

tomcat bitnami 13.6.34

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/tomcat:lateste73323c30d09
stdlib@go1.26.9
1.26.10

Open the chart page →

85
cockroachdbcockroachdbVerified publisher22.0.41 of 3See more

cockroachdb cockroachdb 22.0.4

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cockroachdb/cockroach-self-signer-cert:1.10b0fcc6c8147a
stdlib@go1.26.2
1.26.10

Open the chart page →

820
local-path-provisionercontainerooVerified publisher0.0.381 of 1See more

local-path-provisioner containeroo 0.0.38

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.37e757967a5ec3
stdlib@go1.26.5
1.26.10

Open the chart page →

357
mailpitjouveVerified publisher0.37.01 of 1See more

mailpit jouve 0.37.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
axllent/mailpit:v1.31.198b916bd3c8d
stdlib@go1.27.1
1.26.10

Open the chart page →

244
signozsignoz0.146.05 of 5See more

signoz signoz 0.146.0

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.21.2cd9252644ce0
stdlib@go1.19.10
1.26.10
altinity/metrics-exporter:0.21.2df3d57215356
stdlib@go1.19.10
1.26.10
signoz/signoz:v0.146.0cd3ca6950df3
stdlib@go1.25.7
1.26.10
signoz/signoz-otel-collector:v0.144.14b08671f56f31
stdlib@go1.25.0
1.26.10
signoz/zookeeper:3.7.1fcc4a3288154
stdlib@go1.21.2
1.26.10

Open the chart page →

10,851
weblateweblateOfficialVerified publisher0.5.432 of 3See more

weblate weblate 0.5.43

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:latest5927ff3702df
stdlib@go1.24.5
1.26.10
weblate/weblate:2026.10.1.1b0f200f38d70
rustls-webpki@0.103.14
stdlib@go1.26.7
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

7,734
postgresgroundhog2k1.6.81 of 1See more

postgres groundhog2k 1.6.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

1,748
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
stdlib@go1.19.8
1.26.10

Open the chart page →

5,684
keelkeel1.2.31 of 1See more

keel keel 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keel-hq/keel:0.22.409872633675d
stdlib@go1.26.5
1.26.10

Open the chart page →

1,196
community-operatormongodb-helm-charts0.13.01 of 1See more

community-operator mongodb-helm-charts 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.10

Open the chart page →

1,749
openfgaopenfgaOfficialVerified publisher0.3.161 of 1See more

openfga openfga 0.3.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openfga/openfga:v1.22.09cf9a20af32a
ca-certificates@20260909-r2
stdlib@go1.26.8
20260909-r3
1.26.10

Open the chart page →

231
prometheus-kafka-exporterprometheus-communityVerified publisher4.0.11 of 1See more

prometheus-kafka-exporter prometheus-community 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
danielqsj/kafka-exporter:v1.9.04150e46b2e96
stdlib@go1.24.0
1.26.10

Open the chart page →

1,284
prometheus-mongodb-exporterprometheus-communityVerified publisher3.22.01 of 1See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
percona/mongodb_exporter:0.53.00214e482b2cd
stdlib@go1.26.2
1.26.10

Open the chart page →

637
node-local-dnsdeliveryheroVerified publisher2.9.31 of 1See more

node-local-dns deliveryhero 2.9.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.27.16748acde83ac
stdlib@go1.26.8
1.26.10

Open the chart page →

1,657
dragonflydragonflyVerified publisher1.8.62 of 3See more

dragonfly dragonfly 1.8.6

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.59fe2a1d6206f
stdlib@go1.26.5
1.26.10
dragonflyoss/scheduler:v2.5.2d5dea9e662cd
stdlib@go1.25.5
1.26.10

Open the chart page →

5,509
fission-allfission-chartsOfficialVerified publisher1.27.03 of 3See more

fission-all fission-charts 1.27.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/fission/fission-bundle:v1.27.0d353720b037a
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
ghcr.io/fission/pre-upgrade-checks:v1.27.0b053fc3539b4
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
ghcr.io/fission/reporter:v1.27.0c77cc925debe
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10

Open the chart page →

1,318

Container images carrying it

6,681 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
apecloud/apecloud-mcp:0.1.094041b080510
stdlib@go1.23.7
1.26.10
2
apecloud/servicemirror:0.5.38c8451abf728
stdlib@go1.25.14
1.26.10
2
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
stdlib@go1.21.7
1.26.10
2
assistiot/fl_repository_db:latestad8f72108636
stdlib@go1.17.10
1.26.10
2
ayushsobti/kube-monkey:v0.5.24c94e8f8924e
stdlib@go1.18.9
1.26.10
2
binwiederhier/ntfy:v2.11.04a7d0f0adc6d
stdlib@go1.22.2
1.26.10
2
binwiederhier/ntfy:v2.32.059250e1d8be2
stdlib@go1.27.1
1.26.10
2
bitnami/kubectl:latestdbe04f493d36
stdlib@go1.26.9
1.26.10
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
stdlib@go1.24.6
1.26.10
2
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
stdlib@go1.19.6
1.26.10
2
bitnamilegacy/kubectl:1.26.4a0a972324d93
stdlib@go1.19.8
1.26.10
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
stdlib@go1.23.7
1.26.10
2
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
stdlib@go1.15.1
1.26.10
2
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
stdlib@go1.16.7
1.26.10
2
bitnamilegacy/redis:latest5927ff3702df
stdlib@go1.24.5
1.26.10
2
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
stdlib@go1.19.12
1.26.10
2
bitnami/mongodb:latestf8df711e4400
stdlib@go1.26.8
1.26.10
2
bitnamisecure/git72ae5bd9715f
stdlib@go1.24.6
1.26.10
2
bitpoke/mysql-operator:v0.6.3f44fa86ab27e
stdlib@go1.17.13
1.26.10
2
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
stdlib@go1.19.9
1.26.10
2
bloomberg/goldpinger:3.11.5f7c60d319150
stdlib@go1.27.1
1.26.10
2
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
stdlib@go1.24.4
1.26.10
2
casbin/casdoor:3.62.17729da148c61
stdlib@go1.25.8
1.26.10
2
cesanta/docker_auth:1.6.04d16885f3d4c
stdlib@go1.13.7
1.26.10
2
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
stdlib@go1.14.5
1.26.10
2
chrislusf/seaweedfs:2.92db095fe8a8d6
stdlib@go1.17.7
1.26.10
2
clickhouse/clickhouse-server:24.2ed9640bfff07
stdlib@go1.19.10
1.26.10
2
cloudflare/cloudflared:2026.9.3:latest072c067d25cc
stdlib@go1.26.8
1.26.10
2
cloudflare/cloudflared:2022.1.361f608cd1123
stdlib@go1.17.1
1.26.10
2
containersol/locust_exporter:v0.4.1a914972d19ad
stdlib@go1.15.8
1.26.10
2
coredns/coredns:1.14.7:v1.14.77efd3c635b03
stdlib@go1.26.6
1.26.10
2
coredns/coredns:1.13.19b9128672209
stdlib@go1.25.2
1.26.10
2
crate/crate_adapter:latestb8d89fa5d19b
stdlib@go1.16.3
1.26.10
2
cs3org/revad:v1.19.03b57a34a7dfd
stdlib@go1.17.3
1.26.10
2
cs3org/revad:v1.24.0e80a4d67b352
stdlib@go1.20.4
1.26.10
2
csiplugin/csi-neonsan:v1.2.21fa83d45417f
stdlib@go1.14.4
1.26.10
2
csiplugin/snapshot-controller:v4.0.000fcc441ea9f
stdlib@go1.15
1.26.10
2
dagster/user-code-example:1.13.265c98e09b2aeb
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
2
danielfm/aws-limits-exporter:0.6.07152b84e57cb
stdlib@go1.17.2
1.26.10
2
danielqsj/kafka-exporter:v1.9.04150e46b2e96
stdlib@go1.24.0
1.26.10
2
datawire/emissary:3.12.21f67a1292d2a
stdlib@go1.22.4
1.26.10
2
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
stdlib@go1.18.3
1.26.10
2
deepflowce/mysql:8.0.313d7ae561cf60
stdlib@go1.16.7
1.26.10
2
devopsfaith/krakend:latestf8bdaa8a1a43
stdlib@go1.24.2
1.26.10
2
dexidp/dex:v2.39.1-distroless43655afd1a8f
stdlib@go1.21.6
1.26.10
2
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
stdlib@go1.16.2
1.26.10
2
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
stdlib@go1.16.15
1.26.10
2
dunglas/mercure:v0:v0.24.2916834e49961
stdlib@go1.26.3
1.26.10
2
envoyproxy/gateway:v1.9.29d67017c442a
stdlib@go1.26.8
1.26.10
2
eqalpha/keydb:latest6537505c4235
stdlib@go1.16.7
1.26.10
2

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.