StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56q
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
openebs/mayastor-api-rest:v2.12.20c646268cd8c
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-csi-controller:v2.12.238a82f29f777
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-csi-node:v2.12.2cbf834303735
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-io-engine:v2.12.20161a3e6f902
rustls-webpki@0.103.13
0.103.16
2
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
rustls-webpki@0.102.8
webpki-roots@0.25.4
0.103.16
0.26.11
2
openebs/mayastor-obs-callhome:v2.12.24c25179ca592
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
2
openebs/mayastor-obs-callhome-stats:v2.12.2cfb042c35b92
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
2
openebs/mayastor-operator-diskpool:v2.12.27cd50e41324c
rustls-webpki@0.102.8
0.103.16
2
openebs/mc:RELEASE.2024-11-21T17-21-54Z4d1b85539919
stdlib@go1.23.4
1.26.10
2
openebs/minio:RELEASE.2024-12-18T13-15-44Zbb04e41fc1b8
stdlib@go1.23.4
1.26.10
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.26.10
2
openkruise/kruise-helm-hook:v0.1.0edc7cf9428fd
stdlib@go1.20.14
1.26.10
2
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
stdlib@go1.16.2
1.26.10
2
oryd/hydra-maester:v0.0.420a7a2bfd0e7d
stdlib@go1.26.3
1.26.10
2
oryd/kratos:v26.2.02a13bb8d362c
stdlib@go1.26.0
1.26.10
2
oryd/kratos:v1.0.0d06fc5845f63
stdlib@go1.20.5
1.26.10
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
stdlib@go1.20.5
1.26.10
2
osixia/openldap:1.4.0ccd95cc6e61e
stdlib@go1.13.4
1.26.10
2
otel/opentelemetry-collector-contrib:latest1175b0300305
stdlib@go1.26.9
1.26.10
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
stdlib@go1.21.7
1.26.10
2
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
stdlib@go1.25.7
1.26.10
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
stdlib@go1.23.2
1.26.10
2
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.26.10
2
owncloud/server:10.16.6:10.16.6-20261022879638cd818b
stdlib@go1.26.3
1.26.10
2
percona/percona-postgresql-operator:3.1.0a7c50ef1545e
stdlib@go1.26.8
1.26.10
2
percona/percona-xtradb-cluster-operator:1.20.0ac4d0995c71e
stdlib@go1.26.4
1.26.10
2
pgsty/mc:RELEASE.2026-09-16T00-00-00Zcfc83108c3ab
stdlib@go1.27.1
1.26.10
2
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
stdlib@go1.24.6
1.26.10
2
phntom/kochi:1.1.33b82358bd56e
stdlib@go1.15.5
1.26.10
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
stdlib@go1.13.8
1.26.10
2
polyaxon/polyaxon-operator:2.18.0ee42fdcadace
stdlib@go1.24.13
1.26.10
2
postgis/postgis:15-3.3a2fc46b52819
stdlib@go1.18.2
1.26.10
2
pottava/s3-proxy:2.020a0bcb15f76
stdlib@go1.13.7
1.26.10
2
prom/blackbox-exporter:v0.18.01ffc3f109eb3
stdlib@go1.15.2
1.26.10
2
prom/graphite-exporter:latestc1a266f63a84
stdlib@go1.26.5
1.26.10
2
prom/prometheus:v2.17.242d2395cd719
stdlib@go1.13.10
1.26.10
2
prom/prometheus:v2.52.05c435642ca4d
stdlib@go1.22.3
1.26.10
2
prom/prometheus:v2.37.98176adea328e
stdlib@go1.19.11
1.26.10
2
prom/prometheus:v2.48.1a67e5e402ff5
stdlib@go1.21.5
1.26.10
2
prom/prometheus:v2.21.0d43417c260e5
stdlib@go1.15.2
1.26.10
2
prom/prometheus:v2.16.0e4ca62c0d62f
stdlib@go1.13.8
1.26.10
2
prom/pushgateway:v1.3.0c0d39b8d4cfe
stdlib@go1.15.2
1.26.10
2
qmcgaw/ddns-updater:2.10.0:v2.10.03e2aa558946b
stdlib@go1.26.2
1.26.10
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
stdlib@go1.19.4
1.26.10
2
rancher/kine:v0.11.412889bbcd1e8
stdlib@go1.21.5
1.26.10
2
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.26.10
2
rancher/local-path-provisioner:v0.0.3534ff0847cc47
stdlib@go1.26.1
1.26.10
2
rancher/local-path-provisioner:v0.0.299bebefa0b908
stdlib@go1.22.5
1.26.10
2
rclone/rclone:1.6874c51b8817e5
stdlib@go1.23.3
1.26.10
2

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.