StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
life-dashboardlife-dashboardVerified publisher1.1.21 of 2See more

life-dashboard life-dashboard 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/owen282000/life-dashboard-grafana:1.1.212a7bd52a1aa
stdlib@go1.26.7
1.26.10

Open the chart page →

334
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
stdlib@go1.13.8
1.26.10

Open the chart page →

5,956
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge2 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.3104d224a9999b
stdlib@go1.17.6
1.26.10
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
stdlib@go1.20.7
1.26.10

Open the chart page →

6,325
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
ca-certificates@20250619-r5
rustls-webpki@0.103.4
webpki-roots@1.0.2
20260909-r3
0.103.16
0.26.11

Open the chart page →

5,223
halitesql0.1.51 of 2See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/litesql/ha:latest992944f8e2b5
stdlib@go1.27.2
1.26.10

Open the chart page →

606
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
stdlib@go1.23.8
1.26.10

Open the chart page →

9,922
go-hello-worldloafoe0.17.01 of 1See more

go-hello-world loafoe 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/loafoe/go-hello-world:v2.16.022d94845e317
ca-certificates@20260909-r2
stdlib@go1.26.0
20260909-r3
1.26.10

Open the chart page →

623
stackradarlockdepVerified publisher0.2.04 of 4See more

stackradar lockdep 0.2.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.10
ghcr.io/lockdep/stackradar-client:0.2.01ef6c7132778
stdlib@go1.23.12
1.26.10
ghcr.io/lockdep/stackradar-scanner:0.7.045d82534d1d5
stdlib@go1.25.7
1.26.10
ghcr.io/lockdep/stackradar-server:0.2.046eed1f3046a
stdlib@go1.26.8
1.26.10

Open the chart page →

5,828
locust-k8s-operatorlocust-k8s-operatorVerified publisher2.3.11 of 1See more

locust-k8s-operator locust-k8s-operator 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lotest/locust-k8s-operator:2.3.1859b0d36f371
ca-certificates@20260611-r0
stdlib@go1.26.7
20260909-r3
1.26.10

Open the chart page →

281
home-assistantloeken-at-homeVerified publisher2026.9.21 of 1See more

home-assistant loeken-at-home 2026.9.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
loeken/home-assistant:2026.9.2b1dff5b4c593
rustls-webpki@0.103.13
stdlib@go1.25.6
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

2,793
jspolicyloftVerified publisher0.2.21 of 1See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
loftsh/jspolicy:0.2.225deb9bd2683
stdlib@go1.17.13
1.26.10

Open the chart page →

3,396
vcluster-eksloftVerified publisher0.0.0-ci.33 of 4See more

vcluster-eks loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
stdlib@go1.16.15
1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-apiserver:v1.24.9-eks-1-24-772e06b605692
stdlib@go1.18.9
1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager:v1.24.9-eks-1-24-7eaea8c230432
stdlib@go1.18.9
1.26.10

Open the chart page →

5,787
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
stdlib@go1.19.4
1.26.10

Open the chart page →

4,141
log2rbac-operatorlog2rbac-operator0.0.51 of 1See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jkremser/log2rbac:v0.0.5e35cf56ef183
stdlib@go1.17.6
1.26.10

Open the chart page →

3,066
logclilogcliVerified publisher0.1.01 of 1See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/logcli:main-c90366d-amd643d85bb66e39b
stdlib@go1.16.2
1.26.10

Open the chart page →

4,209
lokxylokxyVerified publisher0.2.01 of 1See more

lokxy lokxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lokxy/lokxy:v0.9.0e4ac800dc55d
stdlib@go1.26.4
1.26.10

Open the chart page →

538
plexluiscajl1.0.11 of 2See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latestfc852e4c2135
stdlib@go1.27.1
1.26.10

Open the chart page →

813
lumenvoxlumenvox8.0.011 of 11See more

lumenvox lumenvox 8.0.0

11 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lumenvox/admin-portal:8.0258583dde8a7
stdlib@go1.27.1
1.26.10
lumenvox/archive:8.04611915d66f6
stdlib@go1.27.1
1.26.10
lumenvox/cloud-init-tools:8.0c01faf8d628d
stdlib@go1.27.1
1.26.10
lumenvox/configuration:8.07badfce0df13
stdlib@go1.27.1
1.26.10
lumenvox/deployment:8.0dce4f18b4945
stdlib@go1.27.1
1.26.10
lumenvox/deployment-portal:8.04cf9bad0381d
stdlib@go1.27.1
1.26.10
lumenvox/file-store:8.08090031da992
stdlib@go1.27.1
1.26.10
lumenvox/license:8.01f985ca4d603
stdlib@go1.27.1
1.26.10
lumenvox/management-api:8.098fe71067039
stdlib@go1.27.1
1.26.10
lumenvox/resource:8.026edd01fa2ee
stdlib@go1.27.1
1.26.10
lumenvox/storage:8.057d15feb3603
stdlib@go1.27.1
1.26.10

Open the chart page →

2,671
voice-biometricslumenvox2.0.18 of 26See more

voice-biometrics lumenvox 2.0.1

8 of the 26 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
library/traefik:v2.57d5a6ae66572
stdlib@go1.17.6
1.26.10
lumenvox/cloud-init-tools:2.0.07ff037a71c50
stdlib@go1.17.3
1.26.10
lumenvox/cloud-license:2.0.09a69862e1248
stdlib@go1.17.3
1.26.10
prom/pushgateway:v1.3.18305a33fb80a
stdlib@go1.15.6
1.26.10
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
stdlib@go1.14.4
1.26.10
quay.io/prometheus/node-exporter:v1.1.222fbde17ab64
stdlib@go1.15.8
1.26.10
quay.io/prometheus/prometheus:v2.26.038d40a760569
stdlib@go1.16.2
1.26.10

Open the chart page →

84,328
dnsbl-exporterluzillaVerified publisher0.5.01 of 2See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/luzilla/dnsbl_exporter:v0.12.0ecba7360ff12
stdlib@go1.25.0
1.26.10

Open the chart page →

2,144
lynqlynqVerified publisher1.1.221 of 1See more

lynq lynq 1.1.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/k8s-lynq/lynq:1.1.22229b05e3c717
stdlib@go1.24.13
1.26.10

Open the chart page →

1,076
cert-manager-webhook-infomaniakm0nsterrr-cert-manager-webhook-infomaniakVerified publisher1.1.31 of 1See more

cert-manager-webhook-infomaniak m0nsterrr-cert-manager-webhook-infomaniak 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/cert-manager-webhook-infomaniak:v0.1.65b7373bc3664
stdlib@go1.27.1
1.26.10

Open the chart page →

248
magentomagento3.2.35 of 12See more

magento magento 3.2.3

5 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
stdlib@go1.18.2
1.26.10
library/rabbitmq:4.1.0-management935b3f84c1e4
stdlib@go1.22.2
1.26.10
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
stdlib@go1.24.6
1.26.10
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
stdlib@go1.24.6
1.26.10
longhornio/longhorn-ui:v1.10.0e60f36161511
stdlib@go1.24.6
1.26.10

Open the chart page →

17,880
mcp-orchestratormagertronVerified publisher4.1.651 of 7See more

mcp-orchestrator magertron 4.1.65

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
curtismager20/mcp-envoy:1.38.10ae2ba784a5e
ca-certificates@20260909-r2
20260909-r3

Open the chart page →

62
goblackholemainVerified publisher0.0.41 of 1See more

goblackhole main 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bedag/goblackhole:0.2.0447a88598f4c
stdlib@go1.16.6
1.26.10

Open the chart page →

3,306
plane-enterprisemakeplaneOfficialVerified publisher3.10.124 of 13See more

plane-enterprise makeplane 3.10.12

4 of the 13 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine468d34fefd63
stdlib@go1.18.2
1.26.10
makeplane/monitor-commercial:v3.3.3e451e99283aa
stdlib@go1.26.8
1.26.10
pgsty/mc:RELEASE.2026-09-16T00-00-00Zcfc83108c3ab
stdlib@go1.27.1
1.26.10
pgsty/silo:RELEASE.2026-09-16T00-00-00Z635197cb9f36
stdlib@go1.27.1
1.26.10

Open the chart page →

7,311
mattermost-enterprise-editionmattermostVerified publisher2.6.1061 of 3See more

mattermost-enterprise-edition mattermost 2.6.106

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mattermost/mattermost-enterprise-edition:12.0.095a5606c980c
stdlib@go1.26.7
1.26.10

Open the chart page →

1,182
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:80f51e63e537a
stdlib@go1.24.6
1.26.10

Open the chart page →

22,709
mcpmcp-chartsVerified publisher0.0.243 of 7See more

mcp mcp-charts 0.0.24

3 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest0bdf876e5703
stdlib@go1.26.9
1.26.10
ghcr.io/gla-rad/mc-mms-router:latest99e8c2a00a83
stdlib@go1.26.9
1.26.10
ghcr.io/maritimeconnectivity/identityregistry:lateste03cd5830979
stdlib@go1.26.7
1.26.10

Open the chart page →

4,100
traefik-forward-authmesosphere0.3.102 of 2See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.5.15efa21defcbc
stdlib@go1.15.11
1.26.10
mesosphere/traefik-forward-auth:3.1.05456581d7b76
stdlib@go1.14.15
1.26.10

Open the chart page →

8,101
metadata-injectormetadata-injector-operator0.0.11 of 1See more

metadata-injector metadata-injector-operator 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ruslanguns/metadata-injector-operator:v0.0.16c77e4675e07
stdlib@go1.22.11
1.26.10

Open the chart page →

1,133
metrics-server-exportermetrics-server-exporterVerified publisher2.4.01 of 1See more

metrics-server-exporter metrics-server-exporter 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mrnim94/metrics-server-exporter:v2.4.086c4807a4bca
stdlib@go1.26.3
1.26.10

Open the chart page →

1,757
subspacemglants0.1.01 of 1See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
subspacecommunity/subspace:1.5.0e2042b63fb35
stdlib@go1.14.6
1.26.10

Open the chart page →

4,551
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
stdlib@go1.23.4
1.26.10

Open the chart page →

5,192
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
stdlib@go1.16.12
1.26.10

Open the chart page →

10,105
chartmuseummike75151.2.01 of 1See more

chartmuseum mike7515 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
stdlib@go1.17.8
1.26.10

Open the chart page →

4,326
minecraft-exporterminecraft-exporterVerified publisher0.16.01 of 1See more

minecraft-exporter minecraft-exporter 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/dirien/minecraft-exporter:0.24.061d89bf99ff7
ca-certificates@20251003-r0
stdlib@go1.25.10
20260909-r3
1.26.10

Open the chart page →

721
miniapiminiapi1.3.21 of 1See more

miniapi miniapi 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
udhos/miniapi:1.3.28a7042db82ce
stdlib@go1.23.2
1.26.10

Open the chart page →

1,293
miropsmirops-operatorVerified publisher0.2.02 of 2See more

mirops mirops-operator 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/miropshq/mirops/operator:v0.2.04b0b5fef9a6a
stdlib@go1.24.13
1.26.10
ghcr.io/miropshq/mirops/remediation:v0.2.0976a7319ff4a
stdlib@go1.24.13
1.26.10

Open the chart page →

1,921
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.10

Open the chart page →

7,704
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
stdlib@go1.25.4
1.26.10

Open the chart page →

36,362
mockservermockserverOfficialVerified publisher9.1.01 of 1See more

mockserver mockserver 9.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-9.1.00ed883c9b2d0
stdlib@go1.27.2
1.26.10

Open the chart page →

1,152
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
stdlib@go1.24.0
1.26.10

Open the chart page →

3,595
model-manager-servermodel-manager-server1.27.01 of 1See more

model-manager-server model-manager-server 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-server:1.27.0c057dcdd9ef3
stdlib@go1.23.12
1.26.10

Open the chart page →

1,271
mongodb-atlas-operatormongodb-helm-charts2.17.01 of 1See more

mongodb-atlas-operator mongodb-helm-charts 2.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mongodb/mongodb-atlas-kubernetes-operator:2.17.0cfe202a2a076
stdlib@go1.26.7
1.26.10

Open the chart page →

306
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10

Open the chart page →

69,868
redminemt1905027.3.42 of 3See more

redmine mt190502 7.3.4

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:1874935e722416
stdlib@go1.24.6
1.26.10
library/redmine:6.1.204ac44a2595b
stdlib@go1.24.6
1.26.10

Open the chart page →

9,509
podsyncmy0nVerified publisher1.5.41 of 2See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
tdeutsch/podsync:v2.4.2b67186f4c9a5
stdlib@go1.19.3
1.26.10

Open the chart page →

2,949
maddymyaVerified publisher22.4.121 of 2See more

maddy mya 22.4.12

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
foxcpp/maddy:0.7.16ab538e2f28b
stdlib@go1.19.13
1.26.10

Open the chart page →

2,170
registrymyaVerified publisher22.4.111 of 1See more

registry mya 22.4.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
distribution/distribution:2.8.3f84b2078238f
stdlib@go1.20.8
1.26.10

Open the chart page →

1,451

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
weblate/weblate:4.2.2-169c160d37a3c
stdlib@go1.13.5
1.26.10
2
wener/frpc:v0.37.0cc9fd4da44c0
stdlib@go1.17.3
1.26.10
2
wener/frps:v0.37.05c92cc9e8597
stdlib@go1.17.3
1.26.10
2
xelalex/dregsy:0.4.3574054e1c417
stdlib@go1.18.3
1.26.10
2
yzhou442/equiz:latesta3f7ca69e28d
stdlib@go1.16.7
1.26.10
2
zhenghaoz/gorse-master:0.4.12033046b432ec
stdlib@go1.20.1
1.26.10
2
zhenghaoz/gorse-server:0.4.1239c565685b01
stdlib@go1.20.1
1.26.10
2
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
stdlib@go1.20.1
1.26.10
2
gcr.io/google-samples/microservices-demo/cartservice:v0.2.3566733b4d2d5
stdlib@go1.15.6
1.26.10
2
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
stdlib@go1.15.10
1.26.10
2
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
stdlib@go1.15.6
1.26.10
2
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
stdlib@go1.15.10
1.26.10
2
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
stdlib@go1.15.6
1.26.10
2
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
stdlib@go1.15.10
1.26.10
2
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
stdlib@go1.15.6
1.26.10
2
gcr.io/google-samples/microservices-demo/shippingservice:v0.2.30cb1707fc503
stdlib@go1.15.6
1.26.10
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
stdlib@go1.15
1.26.10
2
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller0d5f740b4224
stdlib@go1.24.6
1.26.10
2
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook697668be7893
stdlib@go1.24.6
1.26.10
2
gcr.io/knative-releases/knative.dev/serving/cmd/activator031408ec516f
stdlib@go1.24.3
1.26.10
2
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler3502bb5aa60f
stdlib@go1.24.3
1.26.10
2
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa7405faeb7636
stdlib@go1.24.3
1.26.10
2
gcr.io/knative-releases/knative.dev/serving/cmd/controller5b93308a392c
stdlib@go1.24.3
1.26.10
2
gcr.io/knative-releases/knative.dev/serving/cmd/webhook50831d9aaa69
stdlib@go1.24.3
1.26.10
2
ghcr.io/akhilrex/podgrab:1.0.0bce133f3f511
stdlib@go1.15.2
1.26.10
2
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
stdlib@go1.24.0
1.26.10
2
ghcr.io/appscode/fargocd:v0.1.0c59d775d9a7c
stdlib@go1.25.13
1.26.10
2
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
stdlib@go1.25.13
1.26.10
2
ghcr.io/appscode/grafana-tools:v0.0.1f60324bca644
stdlib@go1.19.4
1.26.10
2
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
stdlib@go1.20.2
1.26.10
2
ghcr.io/appscode/kubectl-nonroot:1.3183d43cc41590
stdlib@go1.24.9
1.26.10
2
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
stdlib@go1.15.14
1.26.10
2
ghcr.io/appscode/license-proxyserver:v0.1.28dfd7a44f362
stdlib@go1.25.13
1.26.10
2
ghcr.io/appscode/petset:v0.1.093fa0daf603c
stdlib@go1.25.10
1.26.10
2
ghcr.io/appscode/petset:v0.2.0acf407bb57d7
stdlib@go1.25.13
1.26.10
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
stdlib@go1.25.5
1.26.10
2
ghcr.io/astriaorg/astria-geth:latest4249e403225a
stdlib@go1.22.12
1.26.10
2
ghcr.io/bank-vaults/vault-operator:v1.24.1b5529976f0f6
stdlib@go1.27.1
1.26.10
2
ghcr.io/banzaicloud/logging-operator:3.17.101b530cf7c07f
stdlib@go1.17.13
1.26.10
2
ghcr.io/banzaicloud/tcheck:latest0147d87c2019
stdlib@go1.15.2
1.26.10
2
ghcr.io/berriai/litellm:1.106.2:main-stable7294b90f868c
ca-certificates@20260611-r1
20260909-r3
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
stdlib@go1.24.3
1.26.10
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
stdlib@go1.23.2
1.26.10
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
stdlib@go1.24.7
1.26.10
2
ghcr.io/cerbos/cerbos:0.56.0540643bc67ba
stdlib@go1.27.1
1.26.10
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
stdlib@go1.25.5
1.26.10
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
stdlib@go1.19.7
1.26.10
2
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.1b5210df46c05
stdlib@go1.24.0
1.26.10
2
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
stdlib@go1.18.10
1.26.10
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
stdlib@go1.24.5
1.26.10
2

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.