StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,294
of 18,232 indexed, latest versions
Container images
6,212
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,104
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars
ChartLatestAffected imagesRadar Score
vault-secrets-webhookvault-secrets-webhookVerified publisher1.23.11 of 1See more

vault-secrets-webhook vault-secrets-webhook 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-secrets-webhook:v1.23.198baf045a1c9
stdlib@go1.26.4
1.26.10

Open the chart page →

888
athens-proxyvolker-raschekVerified publisher2.1.01 of 1See more

athens-proxy volker-raschek 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gomods/athens:v0.17.10f61d1e62359
stdlib@go1.25.9
1.26.10

Open the chart page →

2,930
wg-easywg-easyVerified publisher0.1.61 of 1See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:150e7bc9d34e86
stdlib@go1.26.3
1.26.10

Open the chart page →

1,366
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
stdlib@go1.13.10
1.26.10

Open the chart page →

15,242
nfs-server-provisionerwso21.1.01 of 1See more

nfs-server-provisioner wso2 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.26.10

Open the chart page →

4,163
yunikornyunikornVerified publisher1.10.03 of 3See more

yunikorn yunikorn 1.10.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/yunikorn:scheduler-1.10.049fc54894fdf
stdlib@go1.26.7
1.26.10
apache/yunikorn:web-1.10.090e6a62a578a
stdlib@go1.26.7
1.26.10
apache/yunikorn:admission-1.10.095c6b951f38a
stdlib@go1.26.7
1.26.10

Open the chart page →

656
matrixzekker6Verified publisher3.34.01 of 4See more

matrix zekker6 3.34.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.163.141d8a4edfdc6
stdlib@go1.24.4
1.26.10

Open the chart page →

6,555
zenmlzenml0.98.01 of 1See more

zenml zenml 0.98.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.98.06a03880ace49
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10

Open the chart page →

1,390
eshoponabpabp-charts1.0.02 of 15See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
stdlib@go1.18.2
1.26.10
library/postgres:14.13162a6ead070
stdlib@go1.16.7
1.26.10

Open the chart page →

24,395
moon2aerokube2.8.23 of 3See more

moon2 aerokube 2.8.2

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/aerokube/moon:2.8.2072f3c5592dc
stdlib@go1.27.1
1.26.10
quay.io/aerokube/moon-conf:2.8.235c465ab25d8
stdlib@go1.27.1
1.26.10
quay.io/aerokube/moon-ui:2.8.2f374d0b9953b
stdlib@go1.27.1
1.26.10

Open the chart page →

684
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.2.0-debian-11-r113e65a6b89e38
stdlib@go1.18.2
1.26.10

Open the chart page →

5,022
pod-gatewayangelnu7.1.11 of 2See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/angelnu/gateway-admision-controller:v3.12.06f6ab596afd5
stdlib@go1.24.2
1.26.10

Open the chart page →

1,897
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.10086c9d9ea1e37c4
stdlib@go1.27.1
1.26.10

Open the chart page →

1,135
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
stdlib@go1.16.3
1.26.10

Open the chart page →

5,151
aperture-controlleraperture2.34.03 of 5See more

aperture-controller aperture 2.34.0

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
fluxninja/aperture-operator:2.34.0356d7aa86632
stdlib@go1.21.5
1.26.10
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
quay.io/prometheus/prometheus:v2.33.591100b06e86d
stdlib@go1.17.8
1.26.10

Open the chart page →

7,664
k8upappuio2.0.51 of 1See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
stdlib@go1.18
1.26.10

Open the chart page →

4,474
limesurveyarea-42Verified publisher0.3.1011 of 2See more

limesurvey area-42 0.3.101

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.10

Open the chart page →

5,669
artifact-controllerartifact-controllerOfficialVerified publisher0.9.11 of 1See more

artifact-controller artifact-controller 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kargops/artifact-controller:v0.9.10b42a68e9e27
stdlib@go1.26.7
1.26.10

Open the chart page →

239
athens-proxyathens-chartsOfficialVerified publisher0.19.01 of 1See more

athens-proxy athens-charts 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gomods/athens:v0.20.03620ce7230c7
stdlib@go1.26.9
1.26.10

Open the chart page →

793
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
stdlib@go1.16.9
1.26.10

Open the chart page →

10,545
prometheusaveshaVerified publisher19.3.04 of 4See more

prometheus avesha 19.3.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.26.10
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.26.10
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
stdlib@go1.19.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.7.0a15ca437f230
stdlib@go1.19.3
1.26.10

Open the chart page →

8,909
aws-calicoaws0.3.111 of 1See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.20.1379efe0c2541
stdlib@go1.15.2
1.26.10

Open the chart page →

3,537
aws-node-termination-handleraws-node-termination-handler0.27.61 of 1See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
stdlib@go1.25.8
1.26.10

Open the chart page →

971
snapschedulerbackube-helm-chartsVerified publisher3.5.02 of 2See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/backube/snapscheduler:3.5.035ac95c51780
stdlib@go1.24.3
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.10

Open the chart page →

2,351
yataibentomlVerified publisher1.1.131 of 1See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
stdlib@go1.20.7
1.26.10

Open the chart page →

2,681
yatai-deploymentbentomlVerified publisher1.1.211 of 2See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
stdlib@go1.19.13
1.26.10

Open the chart page →

1,918
boundaryboundaryVerified publisher0.1.01 of 1See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/boundary:0.21.037bf86488b74
stdlib@go1.25.1
1.26.10

Open the chart page →

2,272
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
stdlib@go1.19.12
1.26.10

Open the chart page →

68,421
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
stdlib@go1.21.4
1.26.10

Open the chart page →

2,664
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
stdlib@go1.19.9
1.26.10

Open the chart page →

2,488
geoservercloudcamptocamp23.0.27 of 7See more

geoservercloud camptocamp2 3.0.2

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.2244572a8e01d
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-gwc:3.0.25f81a737aff3
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-rest:3.0.2c14c7be99fd7
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wcs:3.0.254cfe408a3ef
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-webui:3.0.23d01d85dcff4
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wfs:3.0.267be5bf231e1
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wms:3.0.26243931b4cc7
stdlib@go1.27.1
1.26.10

Open the chart page →

5,930
version-checkercert-managerVerified publisher0.11.01 of 1See more

version-checker cert-manager 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.11.0eae9a374d22f
stdlib@go1.26.4
1.26.10

Open the chart page →

614
cert-managerchoerodon1.8.24 of 4See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
stdlib@go1.17.11
1.26.10

Open the chart page →

11,999
popeyechristianhuthVerified publisher2.4.31 of 1See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
stdlib@go1.23.5
1.26.10

Open the chart page →

2,006
sbom-operatorckotzbauerVerified publisher0.48.01 of 1See more

sbom-operator ckotzbauer 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/sbom-operator:0.47.02916a55055f1
stdlib@go1.26.9
1.26.10

Open the chart page →

10
hellocloudechoVerified publisher0.1.21 of 1See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudecho/hello:0.1.0f76ede067ab9
stdlib@go1.16.6
1.26.10

Open the chart page →

2,829
cloudflare-exportercloudflare-exporter0.2.31 of 1See more

cloudflare-exporter cloudflare-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/lablabs/cloudflare_exporter:0.0.1670d74ec46602
stdlib@go1.22.3
1.26.10

Open the chart page →

1,396
ghostcloudpirates-ghostVerified publisher0.20.323 of 3See more

ghost cloudpirates-ghost 0.20.32

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/ghost:6.72.0c0d83a8d4522
stdlib@go1.26.4
1.26.10
library/mariadb:13.0.20e4bb0f339fe
stdlib@go1.24.6
1.26.10
library/mariadb:12.0.25b6a1eac15b8
stdlib@go1.18.2
1.26.10

Open the chart page →

9,293
cloudprobercloudproberOfficialVerified publisher1.14.281 of 1See more

cloudprober cloudprober 1.14.28

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudprober/cloudprober:v0.14.60902d8adf871
stdlib@go1.26.6
1.26.10

Open the chart page →

281
openstack-manila-csicloud-provider-openstack2.37.15 of 5See more

openstack-manila-csi cloud-provider-openstack 2.37.1

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/manila-csi-plugin:v1.37.146373e7e6a4b
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
stdlib@go1.24.6
1.26.10

Open the chart page →

5,389
dumpscriptcloudscriptVerified publisher1.11.01 of 1See more

dumpscript cloudscript 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.45-alpine-edge99732098a0f3
stdlib@go1.27.1
1.26.10

Open the chart page →

262
clowardenclowarden0.2.32 of 4See more

clowarden clowarden 0.2.3

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
stdlib@go1.25.3
1.26.10

Open the chart page →

7,348
cluster-manager-servercluster-manager-server1.8.01 of 1See more

cluster-manager-server cluster-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server:1.8.0364b3ff0fcb7
stdlib@go1.24.5
1.26.10

Open the chart page →

1,308
cluster-registrycluster-registry-controller0.2.121 of 1See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cisco-open/cluster-registry-controller:v0.2.12937eff91df1e
stdlib@go1.18
1.26.10

Open the chart page →

2,809
coder-observabilitycoder-observabilityVerified publisher0.8.013 of 21See more

coder-observability coder-observability 0.8.0

13 of the 21 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
burningalchemist/sql_exporter:latest3dabcb7c74e9
stdlib@go1.26.9
1.26.10
grafana/alloy:v1.20.12aa2099af76c
stdlib@go1.26.7
1.26.10
grafana/grafana:10.4.19a9043254ba16
stdlib@go1.24.3
1.26.10
grafana/loki:3.1.0d947e68a84d9
stdlib@go1.22.2
1.26.10
grafana/loki-canary:3.1.039baf6d67f85
stdlib@go1.22.2
1.26.10
prom/memcached-exporter:v0.14.2d8a61419b841
stdlib@go1.21.5
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.93.00ccb22ca9f3f
stdlib@go1.26.5
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.0142a1f11df8d
stdlib@go1.26.8
1.26.10
quay.io/prometheus/alertmanager:v0.33.19e082985f56f
stdlib@go1.26.4
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
stdlib@go1.26.5
1.26.10
quay.io/prometheuscommunity/postgres-exporter:latestac5ec343104f
stdlib@go1.26.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.10

Open the chart page →

15,068
convertigoconvertigoOfficialVerified publisher8.4.62 of 5See more

convertigo convertigo 8.4.6

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
stdlib@go1.21.5
1.26.10
timescale/timescaledb:latest-pg166f139d560429
stdlib@go1.26.2
1.26.10

Open the chart page →

79,283
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
stdlib@go1.16.6
1.26.10

Open the chart page →

4,346
cosmocosmo-platformOfficialVerified publisher0.22.16 of 10See more

cosmo cosmo-platform 0.22.1

6 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
stdlib@go1.24.6
1.26.10
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
stdlib@go1.21.10
1.26.10
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
stdlib@go1.22.3
1.26.10
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
stdlib@go1.23.6
1.26.10
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
stdlib@go1.23.6
1.26.10
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
stdlib@go1.20.7
1.26.10

Open the chart page →

94,494
cosmotech-apicosmotech-apiVerified publisher5.3.11 of 1See more

cosmotech-api cosmotech-api 5.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-api:5.3.12ad55850c106
ca-certificates@20260909-r2
20260909-r3

Open the chart page →

90
ocularcrashoverride-helm-chartsVerified publisher0.5.21 of 1See more

ocular crashoverride-helm-charts 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/crashappsec/ocular-controller:v0.4.122060cf61e0e
stdlib@go1.26.6
1.26.10

Open the chart page →

269

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
stdlib@go1.21.5
1.26.10
1
public.ecr.aws/truefoundrycloud/eks/eks-node-monitoring-agent:v1.7.1-eksbuild.1d3c1269791d7
stdlib@go1.26.7
1.26.10
1
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
stdlib@go1.23.5
1.26.10
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
stdlib@go1.23.0
1.26.10
1
public.ecr.aws/xray/aws-xray-daemon:3.6.243d051eed000
stdlib@go1.25.7
1.26.10
1
quay.io/aerokube/boot:1.0.13c269612053f
stdlib@go1.22.2
1.26.10
1
quay.io/aerokube/browser-ops:2.6.7807c1bb67086
stdlib@go1.22.2
1.26.10
1
quay.io/aerokube/keygen:1.0.1578934444f04
stdlib@go1.20.5
1.26.10
1
quay.io/aerokube/moon:2.8.2072f3c5592dc
stdlib@go1.27.1
1.26.10
1
quay.io/aerokube/moon:2.5.1a8837b00ba1c
stdlib@go1.20.4
1.26.10
1
quay.io/aerokube/moon-conf:2.8.235c465ab25d8
stdlib@go1.27.1
1.26.10
1
quay.io/aerokube/moon-conf:2.5.19ca307b30080
stdlib@go1.20.4
1.26.10
1
quay.io/aerokube/moon-ui:2.0.589990b146824
stdlib@go1.20.5
1.26.10
1
quay.io/aerokube/moon-ui:2.8.2f374d0b9953b
stdlib@go1.27.1
1.26.10
1
quay.io/aerokube/reloader:1.0.1e4a3661416a5
stdlib@go1.22.2
1.26.10
1
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
stdlib@go1.20.12
1.26.10
1
quay.io/appzygy/ociregistry:1.20.052cfc157ed62
stdlib@go1.27.1
1.26.10
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
stdlib@go1.16.5
1.26.10
1
quay.io/argoproj/argocd:v2.10.783c86003b781
stdlib@go1.20.10
1.26.10
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
stdlib@go1.22.7
1.26.10
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
stdlib@go1.22.7
1.26.10
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
stdlib@go1.20.4
1.26.10
1
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
stdlib@go1.26.4
1.26.10
1
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
stdlib@go1.25.5
1.26.10
1
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
stdlib@go1.24.6
1.26.10
1
quay.io/argoproj/argocli:v3.5.591b9825f09a8
stdlib@go1.21.7
1.26.10
1
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
stdlib@go1.24.11
1.26.10
1
quay.io/argoprojlabs/argocd-extension-metrics:v1.0.30d614816c4b7
stdlib@go1.21.11
1.26.10
1
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
stdlib@go1.26.5
1.26.10
1
quay.io/argoprojlabs/argocd-operator:v0.18.0a09814522a72
stdlib@go1.25.10
1.26.10
1
quay.io/argoprojlabs/argocd-operator:v0.4.0cf8faa986789
stdlib@go1.18.4
1.26.10
1
quay.io/argoprojlabs/argocd-rbac-operator:v0.2.451dded00137a
stdlib@go1.24.9
1.26.10
1
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
stdlib@go1.27.1
1.26.10
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
stdlib@go1.24.6
1.26.10
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
stdlib@go1.21.7
1.26.10
1
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
stdlib@go1.25.5
1.26.10
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
stdlib@go1.15.12
1.26.10
1
quay.io/backube/snapscheduler:3.5.035ac95c51780
stdlib@go1.24.3
1.26.10
1
quay.io/backube/volsync:0.16.00d03a6aad575
stdlib@go1.25.11
1.26.10
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
stdlib@go1.18.4
1.26.10
1
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
stdlib@go1.20.7
1.26.10
1
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
stdlib@go1.19.13
1.26.10
1
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
stdlib@go1.21.3
1.26.10
1
quay.io/brancz/kube-rbac-proxy:v0.16.02c8f8c357ff8
stdlib@go1.21.7
1.26.10
1
quay.io/brancz/kube-rbac-proxy:v0.18.0754ab2a723c8
stdlib@go1.22.4
1.26.10
1
quay.io/brancz/kube-rbac-proxy:v0.21.18ee55a15d8b0
stdlib@go1.25.8
1.26.10
1
quay.io/brancz/kube-rbac-proxy:v0.23.0a6075902738e
stdlib@go1.27.1
1.26.10
1
quay.io/brancz/kube-rbac-proxy:v0.22.1e8cad21b2f9a
stdlib@go1.26.5
1.26.10
1
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
stdlib@go1.25.4
1.26.10
1
quay.io/camel-tooling/camel-dashboard-operator:latest5e867d01846e
stdlib@go1.25.9
1.26.10
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.