StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,294
of 18,232 indexed, latest versions
Container images
6,212
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,104
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
prom/pushgateway:v1.3.0c0d39b8d4cfe
stdlib@go1.15.2
1.26.10
2
qmcgaw/ddns-updater:2.10.0:v2.10.03e2aa558946b
stdlib@go1.26.2
1.26.10
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
stdlib@go1.19.4
1.26.10
2
rancher/kine:v0.11.412889bbcd1e8
stdlib@go1.21.5
1.26.10
2
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.26.10
2
rancher/local-path-provisioner:v0.0.3534ff0847cc47
stdlib@go1.26.1
1.26.10
2
rancher/local-path-provisioner:v0.0.299bebefa0b908
stdlib@go1.22.5
1.26.10
2
rclone/rclone:1.6874c51b8817e5
stdlib@go1.23.3
1.26.10
2
ribbybibby/ssl-exporter:2.4.2718abe7f5e79
stdlib@go1.18.3
1.26.10
2
rookout/controller:latest4451a6f6b8ec
stdlib@go1.20.5
1.26.10
2
rookout/data-on-prem:latest51c0fce64467
stdlib@go1.20.5
1.26.10
2
rotationalio/quarterdeck:0.18.12b370645d64f
stdlib@go1.26.9
1.26.10
2
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
stdlib@go1.21.3
1.26.10
2
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
stdlib@go1.21.3
1.26.10
2
safeglobal/safe-config-service:latest09a5e495c219
rustls-webpki@0.103.13
webpki-root-certs@1.0.7
0.103.16
1.0.10
2
safeglobal/safe-transaction-service:latest7b576c73f865
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
2
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
stdlib@go1.15.2
1.26.10
2
seafileltd/seafile-mc:11.0.12d0c66e4621bd
stdlib@go1.21.4
1.26.10
2
sikalabs/hello-world-server:latest5f49bf889a64
stdlib@go1.26.2
1.26.10
2
squareup/ghostunnel:v1.5.270f4cf270425
stdlib@go1.13.4
1.26.10
2
starrocks/operator:v1.11.8184de0b7ebcd
stdlib@go1.22.12
1.26.10
2
statping/statping:v0.90.74e874da513a5c
stdlib@go1.14.13
1.26.10
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
stdlib@go1.20.4
1.26.10
2
supporttools/go-web-cache:v1.3.2f4f775dd43b9
stdlib@go1.21.6
1.26.10
2
syncthing/syncthing:2.1.1775c4aac4862
stdlib@go1.26.3
1.26.10
2
temporalio/admin-tools:1.15.135034611d981
stdlib@go1.17.6
1.26.10
2
temporalio/admin-tools:1.32.19ef0dc5b063b
stdlib@go1.26.8
1.26.10
2
temporalio/admin-tools:1.32.0a9f84fb9a374
stdlib@go1.26.8
1.26.10
2
temporalio/server:1.32.1acecbab5b0b8
stdlib@go1.26.8
1.26.10
2
temporalio/server:1.22.4c0a44c26397b
stdlib@go1.20.11
1.26.10
2
temporalio/server:1.32.0c3e752127759
stdlib@go1.26.8
1.26.10
2
temporalio/server:1.15.1e26758f5a1bf
stdlib@go1.17.6
1.26.10
2
temporalio/ui:2.16.2af9c9349708f
stdlib@go1.20.5
1.26.10
2
testinprod/op-erigon:latest0a125bd77a2d
stdlib@go1.22.12
1.26.10
2
thanosio/thanos:v0.41.0cf3e9b292e43
stdlib@go1.25.7
1.26.10
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
stdlib@go1.13.12
1.26.10
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
stdlib@go1.14.12
1.26.10
2
thomasnyambati/aws-service-events-exporter:1.0.01e18a0944ceb
stdlib@go1.15.6
1.26.10
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
stdlib@go1.13.15
1.26.10
2
thomseddon/traefik-forward-auth:2.2.0e875194d67e2
stdlib@go1.13.12
1.26.10
2
thoughtmachine/aws-service-quotas-exporter:v1.3.2c6065ba55c72
stdlib@go1.19.4
1.26.10
2
timescale/timescaledb:latest-pg156343bdc87ca1
stdlib@go1.24.6
1.26.10
2
timescale/timescaledb:2.31.0-pg17:latest-pg17b56a3f51991d
stdlib@go1.26.2
1.26.10
2
tkpd/gripmock:1.10.174441dadcfbd
stdlib@go1.14.6
1.26.10
2
traefik/whoami:v1.11.0200689790a0a
stdlib@go1.24.1
1.26.10
2
trinodb/trino:4842704eb53935a
stdlib@go1.26.5
1.26.10
2
tykio/tyk-mdcb-docker:v2.13.047c25173146e
stdlib@go1.26.7
1.26.10
2
tykio/tyk-pump-docker-pub:v1.17.09cc53e58abc4
stdlib@go1.26.7
1.26.10
2
ubercadence/server:0.23.22ac5491d13bb
stdlib@go1.13.6
1.26.10
2
uffizzi/controller:latest0344805f267b
stdlib@go1.20.14
1.26.10
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.