StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0382RUSTSEC-2026-0383CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943RUSTSEC-2026-0381
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
grafana/loki:3.7.8:latest1107dd5274e0
stdlib@go1.26.6
1.26.10
2
grafana/loki:3.6.5847c287ada0e
stdlib@go1.24.13
1.26.10
2
grafana/loki:1.5.0922b3f412fdd
stdlib@go1.13.11
1.26.10
2
grafana/loki:3.1.0d947e68a84d9
stdlib@go1.22.2
1.26.10
2
grafana/loki:2.5.0f9ef133793af
stdlib@go1.17.8
1.26.10
2
grafana/promtail:1.5.046e88d390cd6
stdlib@go1.13.11
1.26.10
2
grafana/promtail:2.9.3b338a29de45e
stdlib@go1.21.3
1.26.10
2
grafana/tempo:2.5.0f0200a9bff6d
stdlib@go1.21.3
1.26.10
2
hanchuanchuan/goinception:latestb3c0dd26fb50
stdlib@go1.22.1
1.26.10
2
hashicorp/boundary-enterprise:1.0.2-ent3a8061968ee4
stdlib@go1.26.7
1.26.10
2
hashicorp/consul:1.14.2e38576edcdfd
stdlib@go1.19.2
1.26.10
2
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
stdlib@go1.19.2
1.26.10
2
hashicorp/vault:1.8.34db614d40d0e
stdlib@go1.16.7
1.26.10
2
hashicorp/vault:1.15.26b4e5dadf082
stdlib@go1.21.3
1.26.10
2
hashicorp/vault:1.12.18de4d5f31b38
stdlib@go1.19.2
1.26.10
2
hashicorp/vault-k8s:1.3.15d74a885ae3e
stdlib@go1.21.3
1.26.10
2
hashicorp/vault-k8s:1.1.0844337076b72
stdlib@go1.19.3
1.26.10
2
hashicorp/vault-k8s:0.13.1bebb03e8e800
stdlib@go1.16.3
1.26.10
2
helmforge/kubectl:1.35.3c3f97e954c47
stdlib@go1.25.7
1.26.10
2
honestica/kube-iptables-tailer:master-91a393242fb939
stdlib@go1.13.8
1.26.10
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
stdlib@go1.21.10
1.26.10
2
ilum/api:6.7.3624fd09528c8
stdlib@go1.23.7
1.26.10
2
ilum/mongodb:6.0.542b6d774c37d
stdlib@go1.20.12
1.26.10
2
inaccel/daemon:latest093e1ea90ab8
stdlib@go1.21.6
1.26.10
2
inaccel/mkrt:latest187fd448b6f2
stdlib@go1.21.5
1.26.10
2
inaccel/reef:latestc967218739f3
stdlib@go1.21.6
1.26.10
2
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
stdlib@go1.17.3
1.26.10
2
iomesh/csi-provisioner:v3.0.0f9508460b273
stdlib@go1.16.2
1.26.10
2
iomesh/csi-snapshotter:v6.2.2becc53e25b96
stdlib@go1.19
1.26.10
2
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
stdlib@go1.13.1
1.26.10
2
iomesh/livenessprobe:v2.8.0560f01510f99
stdlib@go1.18
1.26.10
2
iomesh/localpv-manager:v0.2.0f13deacac3f4
stdlib@go1.20.3
1.26.10
2
iomesh/node-disk-exporter:1.8.0f03148764f38
stdlib@go1.14.7
1.26.10
2
iomesh/snapshot-controller:v6.2.2fb95b65bb88f
stdlib@go1.19
1.26.10
2
iomesh/zookeeper-operator:0.2.159b38b5c7a61d
stdlib@go1.19.7
1.26.10
2
ipfs/ipfs-cluster:latest:v1.1.6a83266c524f1
stdlib@go1.26.3
1.26.10
2
ipfs/kubo:v0.33.21a30f5ed8579
stdlib@go1.23.6
1.26.10
2
istio/install-cni:1.24.2-distrolessaef4825e110f
ca-certificates@20241010-r2
stdlib@go1.23.2
20260909-r3
1.26.10
2
istio/pilot:1.24.2-distroless137e44e3d1d2
ca-certificates@20241010-r1
stdlib@go1.23.2
20260909-r3
1.26.10
2
istio/pilot:1.10.0294ca55bd1cc
stdlib@go1.16.4
1.26.10
2
istio/proxyv2:1.18.0757d28c24100
stdlib@go1.20.4
1.26.10
2
istio/proxyv2:1.9.687a9db561d2e
stdlib@go1.15.13
1.26.10
2
istio/proxyv2:1.10.088c6c693e67a
stdlib@go1.16.4
1.26.10
2
istio/proxyv2:1.10.3a78b7a165744
stdlib@go1.16.6
1.26.10
2
istio/ztunnel:1.24.2-distroless3e475eb88965
ca-certificates@20241010-r2
20260909-r3
2
jacobalberty/unifi:v10.0.162896c0ab82d33
stdlib@go1.24.6
1.26.10
2
jaegertracing/all-in-one:1.3104d224a9999b
stdlib@go1.17.6
1.26.10
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
stdlib@go1.20.6
1.26.10
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
stdlib@go1.25.3
1.26.10
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
stdlib@go1.13.11
1.26.10
2

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.