StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,728
of 18,208 indexed, latest versions
Container images
6,681
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,728 of 18,208 indexed charts deploy, on 6,681 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.106,438
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+17 more20260909-r3417
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16103
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1070
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1113
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,728 by stars
ChartLatestAffected imagesRadar Score
argocd-image-updaterargoOfficialVerified publisher1.3.21 of 1See more

argocd-image-updater argo 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.1a578e328e8cb
stdlib@go1.26.8
1.26.10

Open the chart page →

468
natsnatsVerified publisher2.15.13 of 3See more

nats nats 2.15.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats:2.15.1-alpine2ae57dfba306
stdlib@go1.27.2
1.26.10
natsio/nats-box:0.20.0d2f04223f40e
stdlib@go1.26.6
1.26.10
natsio/nats-server-config-reloader:0.24.0d758a82a9c20
stdlib@go1.26.5
1.26.10

Open the chart page →

1,118
dexdexVerified publisher0.26.01 of 1See more

dex dex 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
stdlib@go1.27.1
1.26.10

Open the chart page →

577
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
stdlib@go1.20.5
1.26.10

Open the chart page →

37,469
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
stdlib@go1.21.8
1.26.10

Open the chart page →

13,033
falcofalcosecurity9.2.13 of 3See more

falco falcosecurity 9.2.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
falcosecurity/falco:0.45.169e957f91b3a
ca-certificates@20260909-r2
stdlib@go1.26.8
20260909-r3
1.26.10
falcosecurity/falco-driver-loader:0.45.16cfd7418907e
stdlib@go1.26.8
1.26.10
falcosecurity/falcoctl:0.14.290ba9627886e
ca-certificates@20260611-r1
stdlib@go1.27.1
20260909-r3
1.26.10

Open the chart page →

3,631
kubeviewkubeviewVerified publisher2.2.11 of 1See more

kubeview kubeview 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:latest45b64d7c7016
stdlib@go1.27.1
1.26.10

Open the chart page →

408
alertmanagerprometheus-communityOfficialVerified publisher2.1.12 of 2See more

alertmanager prometheus-community 2.1.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.10
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10

Open the chart page →

538
kongkongOfficialVerified publisher3.4.11 of 2See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.10

Open the chart page →

1,036
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
stdlib@go1.16.2
1.26.10

Open the chart page →

3,553
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
stdlib@go1.24.1
1.26.10

Open the chart page →

2,197
prometheus-node-exporterprometheus-communityOfficialVerified publisher4.60.01 of 1See more

prometheus-node-exporter prometheus-community 4.60.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10

Open the chart page →

387
rook-cephrookOfficialVerified publisher1.21.02 of 2See more

rook-ceph rook 1.21.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rook/ceph:v1.21.02c3a65786d3c
stdlib@go1.22.10
1.26.10
quay.io/cephcsi/ceph-csi-operator:v1.1.0c42c95c36fa2
stdlib@go1.26.8
1.26.10

Open the chart page →

2,124
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
stdlib@go1.25.6
1.26.10

Open the chart page →

1,639
grafanagrafana-communityVerified publisher14.0.11 of 1See more

grafana grafana-community 14.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.4-distrolessae3d3add290a
stdlib@go1.26.7
1.26.10

Open the chart page →

410
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.96.05 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.96.0

5 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.10
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.10
ghcr.io/victoriametrics/sync-job:v0.0.17b6f233532a85
stdlib@go1.26.4-X:jsonv2
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

1,913
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
stdlib@go1.19.5
1.26.10

Open the chart page →

2,315
kuredkuredOfficialVerified publisher6.1.01 of 1See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubereboot/kured:1.23.08dfd3c2e8893
stdlib@go1.26.4
1.26.10

Open the chart page →

560
home-assistanthelm-hassVerified publisher0.3.871 of 1See more

home-assistant helm-hass 0.3.87

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.233afb0659d78
rustls-webpki@0.103.14
stdlib@go1.25.6
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

3,196
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.10

Open the chart page →

1,587
openebsopenebsOfficialVerified publisher4.6.232 of 35See more

openebs openebs 4.6.2

32 of the 35 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
stdlib@go1.24.1
1.26.10
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.26.10
library/nats:2.9.17-alpine1a7b320b2942
stdlib@go1.19.9
1.26.10
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
stdlib@go1.19.4
1.26.10
natsio/prometheus-nats-exporter:0.11.031c02aac089a
stdlib@go1.20.3
1.26.10
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.26.10
openebs/lvm-driver:1.10.141f73aba7f31
stdlib@go1.24.7
1.26.10
openebs/mayastor-agent-core:v2.12.200429e487478
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-agent-ha-cluster:v2.12.2cb2fa3bfc1f8
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-agent-ha-node:v2.12.2964cbb43c5e5
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-api-rest:v2.12.20c646268cd8c
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-csi-controller:v2.12.238a82f29f777
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-csi-node:v2.12.2cbf834303735
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-io-engine:v2.12.20161a3e6f902
rustls-webpki@0.103.13
0.103.16
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
rustls-webpki@0.102.8
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-obs-callhome:v2.12.24c25179ca592
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-obs-callhome-stats:v2.12.2cfb042c35b92
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-operator-diskpool:v2.12.27cd50e41324c
rustls-webpki@0.102.8
0.103.16
openebs/mc:RELEASE.2024-11-21T17-21-54Z4d1b85539919
stdlib@go1.23.4
1.26.10
openebs/minio:RELEASE.2024-12-18T13-15-44Zbb04e41fc1b8
stdlib@go1.23.4
1.26.10
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.26.10
openebs/zfs-driver:2.11.20234692bb4a4
stdlib@go1.26.2
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.26.10

Open the chart page →

36,827
tigera-operatorprojectcalico3.33.01 of 1See more

tigera-operator projectcalico 3.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.10

Open the chart page →

231
open-webuiopen-webui17.0.01 of 4See more

open-webui open-webui 17.0.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.26.10

Open the chart page →

2,372
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
stdlib@go1.19.1
1.26.10

Open the chart page →

4,546
aws-for-fluent-bitaws0.2.01 of 1See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit:3.2.1a480a1241720
stdlib@go1.25.6
1.26.10

Open the chart page →

568
corednscorednsVerified publisher1.49.01 of 1See more

coredns coredns 1.49.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
coredns/coredns:1.14.77efd3c635b03
stdlib@go1.26.6
1.26.10

Open the chart page →

576
apisixapisix2.18.21 of 3See more

apisix apisix 2.18.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.26.10

Open the chart page →

3,674
vpafairwinds-stableVerified publisher5.1.04 of 4See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.10

Open the chart page →

2,951
x509-certificate-exporterenixOfficialVerified publisher4.2.11 of 1See more

x509-certificate-exporter enix 4.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/enix/x509-certificate-exporter:4.2.10f79740a10df
stdlib@go1.27.2
1.26.10

Open the chart page →

8
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
stdlib@go1.18.8
1.26.10

Open the chart page →

2,989
opentelemetry-operatoropentelemetry-helmOfficialVerified publisher0.126.11 of 1See more

opentelemetry-operator opentelemetry-helm 0.126.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.161.076ac4fa40512
stdlib@go1.27.2
1.26.10

Open the chart page →

4
trinotrino1.45.01 of 1See more

trino trino 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
trinodb/trino:4842704eb53935a
stdlib@go1.26.5
1.26.10

Open the chart page →

378
prometheus-pushgatewayprometheus-communityOfficialVerified publisher3.9.11 of 1See more

prometheus-pushgateway prometheus-community 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.10

Open the chart page →

231
dagsterdagsterVerified publisher1.13.263 of 5See more

dagster dagster 1.13.26

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.26605d41ae6647
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
dagster/user-code-example:1.13.265c98e09b2aeb
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
library/postgres:14.6f565573d74ae
stdlib@go1.18.2
1.26.10

Open the chart page →

4,162
prometheus-redis-exporterprometheus-communityVerified publisher6.34.01 of 1See more

prometheus-redis-exporter prometheus-community 6.34.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.94.00842ef7110e6
stdlib@go1.27.2
1.26.10

Open the chart page →

8
zabbixzabbix-communityVerified publisher7.1.03 of 5See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
stdlib@go1.24.10
1.26.10
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
stdlib@go1.24.10
1.26.10

Open the chart page →

16,569
keycloakcloudpirates-keycloakVerified publisher0.21.462 of 3See more

keycloak cloudpirates-keycloak 0.21.46

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
stdlib@go1.24.6
1.26.10
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

5,217
graylogkong-zVerified publisher3.0.381 of 5See more

graylog kong-z 3.0.38

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.10

Open the chart page →

3,396
netdatanetdataVerified publisher3.7.1761 of 1See more

netdata netdata 3.7.176

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
netdata/netdata:v2.12.15cfa05a5fa56
stdlib@go1.27.0
1.26.10

Open the chart page →

3,061
connectonepassword-connect2.4.22 of 2See more

connect onepassword-connect 2.4.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
1password/connect-api:1.8.3656e4b10df83
ca-certificates@20260611-r1
stdlib@go1.26.8
20260909-r3
1.26.10
1password/connect-sync:1.8.3a760350c941a
ca-certificates@20260611-r1
stdlib@go1.26.8
20260909-r3
1.26.10

Open the chart page →

538
node-problem-detectordeliveryheroVerified publisher2.4.21 of 1See more

node-problem-detector deliveryhero 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
stdlib@go1.25.5
1.26.10

Open the chart page →

2,569
opencostopencostOfficialVerified publisher2.5.331 of 2See more

opencost opencost 2.5.33

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.10

Open the chart page →

563
openfaasopenfaas15.0.146 of 6See more

openfaas openfaas 15.0.14

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
stdlib@go1.20.11
1.26.10
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
stdlib@go1.26.3
1.26.10
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
stdlib@go1.24.13
1.26.10
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
stdlib@go1.23.4
1.26.10
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10
quay.io/prometheus/prometheus:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.10

Open the chart page →

5,697
prometheus-elasticsearch-exporterprometheus-communityVerified publisher7.4.01 of 1See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/elasticsearch-exporter:v1.11.0a056739b095d
stdlib@go1.26.5
1.26.10

Open the chart page →

413
flux2fluxcd-community2.19.17 of 7See more

flux2 fluxcd-community 2.19.1

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
fluxcd/flux-cli:v2.9.5704d55295355
stdlib@go1.26.2
1.26.10
ghcr.io/fluxcd/helm-controller:v1.6.48ff15409e46d
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/image-automation-controller:v1.2.5e1a2720d3951
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/kustomize-controller:v1.9.5a3a955eb2bc4
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/source-controller:v1.9.56f20d232d596
stdlib@go1.26.7
1.26.10

Open the chart page →

4,739
gitlab-agentgitlabVerified publisher2.33.01 of 1See more

gitlab-agent gitlab 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk:v19.5.049dd7b857f3e
stdlib@go1.27.1
1.26.10

Open the chart page →

231
policy-reporterpolicy-reporterOfficialVerified publisher3.11.11 of 1See more

policy-reporter policy-reporter 3.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kyverno/policy-reporter:3.11.1a95ef6394c4d
stdlib@go1.27.2
1.26.10

Open the chart page →

75
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
stdlib@go1.18.2
1.26.10

Open the chart page →

6,813
jaeger-operatorjaegertracingOfficialVerified publisher2.57.01 of 1See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/jaeger-operator:1.61.03f036ec60e61
stdlib@go1.22.3
1.26.10

Open the chart page →

1,186
netboxnetboxOfficialVerified publisher8.3.933 of 5See more

netbox netbox 8.3.93

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/valkey:latest9985c6b0fef4
stdlib@go1.26.9
1.26.10
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.26.10
ghcr.io/netbox-community/netbox:v4.7.31d6e0b5fbd48
rustls-webpki@0.103.14
stdlib@go1.27.1
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

1,666

Container images carrying it

6,681 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
library/redmine:6.1.3-trixief474a901faec
stdlib@go1.24.6
1.26.10
2
library/telegraf:1.40-alpined3b22c2bd211
stdlib@go1.27.1
1.26.10
2
library/traefik:v3.7.1324841fe2de73
stdlib@go1.26.8
1.26.10
2
library/traefik:v3.7.16b9cbca6fac4
stdlib@go1.25.10
1.26.10
2
library/traefik:v2.57d5a6ae66572
stdlib@go1.17.6
1.26.10
2
library/traefik:2.4.8eda951fd29a8
stdlib@go1.16.2
1.26.10
2
library/traefik:2.2.8f5af5a5ce17f
stdlib@go1.14.6
1.26.10
2
library/ubuntu:latestc098726dd9b9
stdlib@go1.27.1
1.26.10
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
stdlib@go1.22.5
1.26.10
2
linuxserver/cloud9:latest:version-1.29.245c5fe102ff3
stdlib@go1.17.11
1.26.10
2
linuxserver/plex:1.43.4:latest06e07af2851e
stdlib@go1.26.7
1.26.10
2
linuxserver/plex:1.43.5:latest8f655bad7dcb
stdlib@go1.27.1
1.26.10
2
linuxserver/wireguard:1.0.20260223-r0-ls126:latest6bcf5d2f5a26
stdlib@go1.26.8
1.26.10
2
listmonk/listmonk:v2.1.0d2eac77ddfad
stdlib@go1.17.6
1.26.10
2
listmonk/listmonk:latest:v6.2.0f535d59e1499
stdlib@go1.26.1
1.26.10
2
localstack/localstack:latestaa5632e041ca
rustls-webpki@0.103.14
stdlib@go1.27.1-X:nojsonv2
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
2
longhornio/longhorn-manager:v1.2.3dca34321452c
stdlib@go1.14.1
1.26.10
2
louislam/uptime-kuma:1.23.1396510915e6be
stdlib@go1.19.6
1.26.10
2
louislam/uptime-kuma:2.5.69912da7d7d9b
stdlib@go1.26.3
1.26.10
2
louislam/uptime-kuma:2.3.29aeb4e51d038
stdlib@go1.20.5
1.26.10
2
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
stdlib@go1.24.5
1.26.10
2
matthiasluedtke/iconserver:v3.16.0661d607b0fbc
stdlib@go1.21.1
1.26.10
2
maxrocketinternet/datadog-controller:0.1a867315facf8
stdlib@go1.13.15
1.26.10
2
maxrocketinternet/soti-mobicontrol-exporter:0.61a281b76efa3
stdlib@go1.14
1.26.10
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
stdlib@go1.15.2
1.26.10
2
mesosphere/kubectl:v1.35.0-alpineea01a9387771
stdlib@go1.25.5
1.26.10
2
mikefarah/yq:4:latest4b3d9475d655
stdlib@go1.27.1
1.26.10
2
nacos/nacos-server:latest1c191c30c8cd
rustls-webpki@0.103.13
stdlib@go1.26.5
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
2
natsio/nats-box:0.11.09fbf7bf684e4
stdlib@go1.18.1
1.26.10
2
natsio/nats-server-config-reloader:0.20.147094fcae2f4
stdlib@go1.24.8
1.26.10
2
natsio/nats-server-config-reloader:0.7.2911ce7ed2f55
stdlib@go1.19
1.26.10
2
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
stdlib@go1.19.4
1.26.10
2
natsio/prometheus-nats-exporter:0.10.016048afb67a5
stdlib@go1.19
1.26.10
2
natsio/prometheus-nats-exporter:0.11.031c02aac089a
stdlib@go1.20.3
1.26.10
2
neosmemo/memos:0.31.024c2707ddd8f
stdlib@go1.27.0
1.26.10
2
netbirdio/netbird-server:0.81.3541ecef7e98a
stdlib@go1.26.7
1.26.10
2
obolnetwork/charon:v1.11.03a5b05b3cb87
stdlib@go1.26.6
1.26.10
2
oliver006/redis_exporter:v1.9.04af75e9f16f6
stdlib@go1.14.4
1.26.10
2
openbas/caldera-server:5.1.0a277796d9724
stdlib@go1.19.8
1.26.10
2
opencloudeu/opencloud-rolling:8.1.08fc64ca86173
stdlib@go1.26.8
1.26.10
2
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.26.10
2
openebs/mayastor-agent-core:v2.12.200429e487478
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-agent-ha-cluster:v2.12.2cb2fa3bfc1f8
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-agent-ha-node:v2.12.2964cbb43c5e5
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-api-rest:v2.12.20c646268cd8c
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-csi-controller:v2.12.238a82f29f777
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-csi-node:v2.12.2cbf834303735
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
rustls-webpki@0.102.8
0.103.16
2
openebs/mayastor-io-engine:v2.12.20161a3e6f902
rustls-webpki@0.103.13
0.103.16
2
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
rustls-webpki@0.102.8
webpki-roots@0.25.4
0.103.16
0.26.11
2

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.