StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ribbybibby/ssl-exporter:2.4.2718abe7f5e79
stdlib@go1.18.3
1.26.10
2
rookout/controller:latest4451a6f6b8ec
stdlib@go1.20.5
1.26.10
2
rookout/data-on-prem:latest51c0fce64467
stdlib@go1.20.5
1.26.10
2
rotationalio/quarterdeck:0.18.12b370645d64f
stdlib@go1.26.9
1.26.10
2
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
stdlib@go1.21.3
1.26.10
2
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
stdlib@go1.21.3
1.26.10
2
safeglobal/safe-config-service:latest09a5e495c219
rustls-webpki@0.103.13
webpki-root-certs@1.0.7
0.103.16
1.0.10
2
safeglobal/safe-transaction-service:latest7b576c73f865
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
2
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
stdlib@go1.15.2
1.26.10
2
seafileltd/seafile-mc:11.0.12d0c66e4621bd
stdlib@go1.21.4
1.26.10
2
sikalabs/hello-world-server:latest5f49bf889a64
stdlib@go1.26.2
1.26.10
2
squareup/ghostunnel:v1.5.270f4cf270425
stdlib@go1.13.4
1.26.10
2
starrocks/operator:v1.11.8184de0b7ebcd
stdlib@go1.22.12
1.26.10
2
statping/statping:v0.90.74e874da513a5c
stdlib@go1.14.13
1.26.10
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
stdlib@go1.20.4
1.26.10
2
supporttools/go-web-cache:v1.3.2f4f775dd43b9
stdlib@go1.21.6
1.26.10
2
syncthing/syncthing:2.1.1775c4aac4862
stdlib@go1.26.3
1.26.10
2
temporalio/admin-tools:1.15.135034611d981
stdlib@go1.17.6
1.26.10
2
temporalio/admin-tools:1.32.19ef0dc5b063b
stdlib@go1.26.8
1.26.10
2
temporalio/admin-tools:1.32.0a9f84fb9a374
stdlib@go1.26.8
1.26.10
2
temporalio/server:1.32.1acecbab5b0b8
stdlib@go1.26.8
1.26.10
2
temporalio/server:1.22.4c0a44c26397b
stdlib@go1.20.11
1.26.10
2
temporalio/server:1.32.0c3e752127759
stdlib@go1.26.8
1.26.10
2
temporalio/server:1.15.1e26758f5a1bf
stdlib@go1.17.6
1.26.10
2
temporalio/ui:2.16.2af9c9349708f
stdlib@go1.20.5
1.26.10
2
testinprod/op-erigon:latest0a125bd77a2d
stdlib@go1.22.12
1.26.10
2
thanosio/thanos:v0.41.0cf3e9b292e43
stdlib@go1.25.7
1.26.10
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
stdlib@go1.13.12
1.26.10
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
stdlib@go1.14.12
1.26.10
2
thomasnyambati/aws-service-events-exporter:1.0.01e18a0944ceb
stdlib@go1.15.6
1.26.10
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
stdlib@go1.13.15
1.26.10
2
thomseddon/traefik-forward-auth:2.2.0e875194d67e2
stdlib@go1.13.12
1.26.10
2
thoughtmachine/aws-service-quotas-exporter:v1.3.2c6065ba55c72
stdlib@go1.19.4
1.26.10
2
timescale/timescaledb:latest-pg156343bdc87ca1
stdlib@go1.24.6
1.26.10
2
timescale/timescaledb:2.31.0-pg17:latest-pg17b56a3f51991d
stdlib@go1.26.2
1.26.10
2
tkpd/gripmock:1.10.174441dadcfbd
stdlib@go1.14.6
1.26.10
2
traefik/whoami:v1.11.0200689790a0a
stdlib@go1.24.1
1.26.10
2
trinodb/trino:4842704eb53935a
stdlib@go1.26.5
1.26.10
2
tykio/tyk-mdcb-docker:v2.13.047c25173146e
stdlib@go1.26.7
1.26.10
2
tykio/tyk-pump-docker-pub:v1.17.09cc53e58abc4
stdlib@go1.26.7
1.26.10
2
ubercadence/server:0.23.22ac5491d13bb
stdlib@go1.13.6
1.26.10
2
uffizzi/controller:latest0344805f267b
stdlib@go1.20.14
1.26.10
2
uselagoon/docker-host:v3.6.12c89ed939b8b
stdlib@go1.24.3
1.26.10
2
utkuozdemir/nvidia_gpu_exporter:1.15.17aee2d42836a
stdlib@go1.27.1
1.26.10
2
velero/velero:v1.18.237396519f399
stdlib@go1.25.11
1.26.10
2
victoriametrics/operator:v0.74.0c4fde419a4f0
stdlib@go1.26.5
1.26.10
2
victoriametrics/victoria-logs:v1.53.0251121fa882a
stdlib@go1.27.1
1.26.10
2
victoriametrics/victoria-traces:v0.11.09947b14b6b9b
stdlib@go1.26.5
1.26.10
2
victoriametrics/vmalert:v1.95.1a83e5db0897a
stdlib@go1.21.4
1.26.10
2
voltha/voltha-ofagent-go:2.1.68feb9ef89e97
stdlib@go1.16.3
1.26.10
2

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.