StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,294
of 18,232 indexed, latest versions
Container images
6,212
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,104
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
obolnetwork/charon:v1.11.03a5b05b3cb87
stdlib@go1.26.6
1.26.10
2
oliver006/redis_exporter:v1.9.04af75e9f16f6
stdlib@go1.14.4
1.26.10
2
openbas/caldera-server:5.1.0a277796d9724
golang-1.19@1.19.8-2
stdlib@go1.19.8
no fix listed
1.26.10
2
opencloudeu/opencloud-rolling:8.1.08fc64ca86173
stdlib@go1.26.8
1.26.10
2
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.26.10
2
openebs/mayastor-agent-core:v2.12.200429e487478
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-agent-ha-cluster:v2.12.2cb2fa3bfc1f8
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-agent-ha-node:v2.12.2964cbb43c5e5
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-api-rest:v2.12.20c646268cd8c
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-csi-controller:v2.12.238a82f29f777
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-csi-node:v2.12.2cbf834303735
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-io-engine:v2.12.20161a3e6f902
rustls-webpki@0.103.13
0.103.16
2
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
rustls-webpki@0.102.8
webpki-roots@0.25.4
0.103.16
0.26.11
2
openebs/mayastor-obs-callhome:v2.12.24c25179ca592
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
2
openebs/mayastor-obs-callhome-stats:v2.12.2cfb042c35b92
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
2
openebs/mayastor-operator-diskpool:v2.12.27cd50e41324c
rustls-webpki@0.102.8
0.103.16
2
openebs/mc:RELEASE.2024-11-21T17-21-54Z4d1b85539919
stdlib@go1.23.4
1.26.10
2
openebs/minio:RELEASE.2024-12-18T13-15-44Zbb04e41fc1b8
stdlib@go1.23.4
1.26.10
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.26.10
2
openkruise/kruise-helm-hook:v0.1.0edc7cf9428fd
stdlib@go1.20.14
1.26.10
2
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
stdlib@go1.16.2
1.26.10
2
oryd/hydra-maester:v0.0.420a7a2bfd0e7d
stdlib@go1.26.3
1.26.10
2
oryd/kratos:v26.2.02a13bb8d362c
stdlib@go1.26.0
1.26.10
2
oryd/kratos:v1.0.0d06fc5845f63
stdlib@go1.20.5
1.26.10
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
stdlib@go1.20.5
1.26.10
2
osixia/openldap:1.4.0ccd95cc6e61e
stdlib@go1.13.4
1.26.10
2
otel/opentelemetry-collector-contrib:latest1175b0300305
stdlib@go1.26.9
1.26.10
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
stdlib@go1.21.7
1.26.10
2
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
stdlib@go1.25.7
1.26.10
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
stdlib@go1.23.2
1.26.10
2
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.26.10
2
owncloud/server:10.16.6:10.16.6-20261022879638cd818b
stdlib@go1.26.3
1.26.10
2
percona/percona-postgresql-operator:3.1.0a7c50ef1545e
stdlib@go1.26.8
1.26.10
2
percona/percona-xtradb-cluster-operator:1.20.0ac4d0995c71e
stdlib@go1.26.4
1.26.10
2
pgsty/mc:RELEASE.2026-09-16T00-00-00Zcfc83108c3ab
stdlib@go1.27.1
1.26.10
2
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
stdlib@go1.24.6
1.26.10
2
phntom/kochi:1.1.33b82358bd56e
stdlib@go1.15.5
1.26.10
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
stdlib@go1.13.8
1.26.10
2
polyaxon/polyaxon-operator:2.18.0ee42fdcadace
stdlib@go1.24.13
1.26.10
2
postgis/postgis:15-3.3a2fc46b52819
stdlib@go1.18.2
1.26.10
2
pottava/s3-proxy:2.020a0bcb15f76
stdlib@go1.13.7
1.26.10
2
prom/blackbox-exporter:v0.18.01ffc3f109eb3
stdlib@go1.15.2
1.26.10
2
prom/graphite-exporter:latestc1a266f63a84
stdlib@go1.26.5
1.26.10
2
prom/prometheus:v2.17.242d2395cd719
stdlib@go1.13.10
1.26.10
2
prom/prometheus:v2.52.05c435642ca4d
stdlib@go1.22.3
1.26.10
2
prom/prometheus:v2.37.98176adea328e
stdlib@go1.19.11
1.26.10
2
prom/prometheus:v2.48.1a67e5e402ff5
stdlib@go1.21.5
1.26.10
2
prom/prometheus:v2.21.0d43417c260e5
stdlib@go1.15.2
1.26.10
2
prom/prometheus:v2.16.0e4ca62c0d62f
stdlib@go1.13.8
1.26.10
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.