StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,294
of 18,232 indexed, latest versions
Container images
6,212
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,104
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars
ChartLatestAffected imagesRadar Score
mdai-event-hubmdai-event-hubVerified publisher0.1.111 of 1See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
stdlib@go1.25.11
1.26.10

Open the chart page →

807
mdai-gatewaymdai-gatewayVerified publisher0.1.101 of 1See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
stdlib@go1.25.11
1.26.10

Open the chart page →

793
mdai-hubmdai-hubVerified publisher0.10.112 of 14See more

mdai-hub mdai-hub 0.10.1

12 of the 14 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/kubectl:latest999d5eb28f40
stdlib@go1.26.8
1.26.10
library/nats:2.14.0-alpinedf3dbf761551
stdlib@go1.26.2
1.26.10
natsio/nats-box:0.19.55d513bf0bb82
stdlib@go1.26.2
1.26.10
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.10
natsio/prometheus-nats-exporter:0.19.25387a5923572
stdlib@go1.25.6
1.26.10
ghcr.io/jkroepke/kube-webhook-certgen:1.8.38ce13c365c8e
stdlib@go1.26.3
1.26.10
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
stdlib@go1.25.8
1.26.10
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
stdlib@go1.25.11
1.26.10
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
stdlib@go1.25.11
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
stdlib@go1.25.9
1.26.10
quay.io/prometheus/node-exporter:v1.11.1-distroless6112664fd761
stdlib@go1.26.1
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
stdlib@go1.26.2
1.26.10

Open the chart page →

13,646
mdai-s3-logs-readermdai-s3-logs-readerVerified publisher0.0.81 of 1See more

mdai-s3-logs-reader mdai-s3-logs-reader 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/decisiveai/mdai-s3-logs-reader:0.0.8d1e35167eec5
stdlib@go1.24.10
1.26.10

Open the chart page →

883
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
stdlib@go1.13.10
1.26.10

Open the chart page →

9,469
pod-cleanupmediamarktsaturn1.2.11 of 1See more

pod-cleanup mediamarktsaturn 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.34.159bafa07ff3a
stdlib@go1.24.6
1.26.10

Open the chart page →

939
cleanuparrmedia-servarrVerified publisher0.20.41 of 1See more

cleanuparr media-servarr 0.20.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.12d0212e4c66bd
stdlib@go1.22.2
1.26.10

Open the chart page →

1,983
sabnzbdmedia-servarrVerified publisher1.7.01 of 3See more

sabnzbd media-servarr 1.7.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/exportarr:v1.6.160cf3d44aa0b
stdlib@go1.21.6
1.26.10

Open the chart page →

1,106
tinymediamanagermedia-servarrVerified publisher1.7.11 of 2See more

tinymediamanager media-servarr 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.448c15784a127
stdlib@go1.24.4
1.26.10

Open the chart page →

11,066
cameramedia-streaming-meshVerified publisher0.2.51 of 3See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
stdlib@go1.19.2
1.26.10

Open the chart page →

21,000
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
stdlib@go1.20.5
1.26.10

Open the chart page →

4,755
ingressmedia-streaming-meshVerified publisher0.1.82 of 2See more

ingress media-streaming-mesh 0.1.8

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
stdlib@go1.20.1
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.10

Open the chart page →

4,934
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
stdlib@go1.24.0
1.26.10
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
stdlib@go1.24.0
1.26.10
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
stdlib@go1.23.1
1.26.10
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
stdlib@go1.23.1
1.26.10
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
stdlib@go1.22.3
1.26.10

Open the chart page →

15,635
msm-rtspmedia-streaming-meshVerified publisher0.0.21 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
stdlib@go1.19.2
1.26.10

Open the chart page →

21,000
rtspmedia-streaming-meshVerified publisher0.0.141 of 2See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
stdlib@go1.19.2
1.26.10

Open the chart page →

21,000
mediawiki-backupmediawiki-backupVerified publisher0.2.11 of 1See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
stdlib@go1.19.5
1.26.10

Open the chart page →

2,824
medik8smedik8sVerified publisher0.2.03 of 3See more

medik8s medik8s 0.2.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/medik8s/fence-agents-remediation-operator:v0.8.0fab0089a9d65
stdlib@go1.26.3
1.26.10
quay.io/medik8s/node-healthcheck-operator:v0.12.05b048ad5d2b8
stdlib@go1.25.9
1.26.10
quay.io/medik8s/self-node-remediation-operator:v0.13.09ad002dca9ea
stdlib@go1.25.9
1.26.10

Open the chart page →

3,770
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
stdlib@go1.18.2
1.26.10

Open the chart page →

7,062
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
rustls-webpki@0.103.13
webpki-root-certs@1.0.7
0.103.16
1.0.10

Open the chart page →

2,219
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
stdlib@go1.13.10
1.26.10

Open the chart page →

9,611
merge-pilotmerge-pilot1.6.01 of 2See more

merge-pilot merge-pilot 1.6.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jhonbrownn/merge-pilot-backend:1.6.068d6223ea366
stdlib@go1.25.7
1.26.10

Open the chart page →

3,345
dex-k8s-authenticatormesosphere1.4.31 of 1See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mesosphere/dex-k8s-authenticator:v1.4.1-d2iqf3d9982cc2fd
stdlib@go1.23.0
1.26.10

Open the chart page →

1,649
docker-registrymesosphere2.3.51 of 1See more

docker-registry mesosphere 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/registry:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.26.10

Open the chart page →

1,103
flaggermesosphere0.21.02 of 2See more

flagger mesosphere 0.21.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
stdlib@go1.13.1
1.26.10
weaveworks/flagger-loadtester:0.9.03cdac6928a63
stdlib@go1.13.1
1.26.10

Open the chart page →

8,762
gatekeepermesosphere0.6.111 of 2See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
stdlib@go1.16.2
1.26.10

Open the chart page →

4,680
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.26.10

Open the chart page →

6,547
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
stdlib@go1.25.7
1.26.10

Open the chart page →

3,355
istio-helm-istiodmesosphere1.25.12 of 2See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
stdlib@go1.25.7
1.26.10
mesosphere/kubectl:v1.35.0-alpineea01a9387771
stdlib@go1.25.5
1.26.10

Open the chart page →

5,306
kafka-operatormesosphere0.20.21 of 2See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/kafka-operator:v0.20.2e341aefa9a90
stdlib@go1.17.6
1.26.10

Open the chart page →

3,040
karmamesosphere1.3.01 of 1See more

karma mesosphere 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.503751e5eed656
stdlib@go1.13.4
1.26.10

Open the chart page →

3,520
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
stdlib@go1.15.2
1.26.10

Open the chart page →

13,885
kubefedmesosphere0.5.21 of 1See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mesosphere/kubefed:proxyurl4fd8889195fe
stdlib@go1.15.3
1.26.10

Open the chart page →

4,433
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
stdlib@go1.14.1
1.26.10

Open the chart page →

4,496
kube-prometheus-stackmesosphere87.16.06 of 7See more

kube-prometheus-stack mesosphere 87.16.0

6 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.26.10
grafana/grafana:13.1.0121a7a9ece6d
stdlib@go1.25.7
1.26.10
ghcr.io/jkroepke/kube-webhook-certgen:1.8.476a2170cd0c9
stdlib@go1.26.4
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
stdlib@go1.26.4
1.26.10
quay.io/prometheus/node-exporter:v1.12.0-distroless843ed23bb564
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.10

Open the chart page →

10,578
kudomesosphere0.1.41 of 1See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kudobuilder/controller:v0.9.069072d979708
stdlib@go1.13
1.26.10

Open the chart page →

7,291
local-path-provisionermesosphere0.0.221 of 1See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.22e34c88ae0aff
stdlib@go1.16.15
1.26.10

Open the chart page →

3,444
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.26.10

Open the chart page →

4,163
nvidiamesosphere0.4.41 of 2See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
stdlib@go1.14.2
1.26.10

Open the chart page →

12,310
prometheus-operatormesosphere12.11.135 of 8See more

prometheus-operator mesosphere 12.11.13

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
stdlib@go1.25.7
1.26.10
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
stdlib@go1.15.3
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
stdlib@go1.14.12
1.26.10
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

16,907
registry-syncermesosphere0.1.01 of 1See more

registry-syncer mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
regclient/regsync:v0.8.33d8d8e40afb7
stdlib@go1.24.2
1.26.10

Open the chart page →

788
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
stdlib@go1.16.2
1.26.10

Open the chart page →

4,702
azuredisk-csi-drivermesosphere-stable0.8.16 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
stdlib@go1.15.4
1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
stdlib@go1.14
1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
stdlib@go1.15
1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
stdlib@go1.15.2
1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
stdlib@go1.15.2
1.26.10
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
stdlib@go1.15.6
1.26.10

Open the chart page →

22,229
cert-manager-setupmesosphere-stable0.2.104 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.11.05c3eb25b0854
stdlib@go1.19.5
1.26.10
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
stdlib@go1.19.5
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
stdlib@go1.19.5
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
stdlib@go1.19.5
1.26.10

Open the chart page →

11,383
cosimesosphere-stable0.2.21 of 1See more

cosi mesosphere-stable 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller:v0.2.23c708e508197
stdlib@go1.24.11
1.26.10

Open the chart page →

765
dexmesosphere-stable2.14.24 of 5See more

dex mesosphere-stable 2.14.2

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.26.10
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
stdlib@go1.20.4
1.26.10
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
ca-certificates@20240705-r0
stdlib@go1.22.7
20260909-r3
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.21.18ee55a15d8b0
stdlib@go1.25.8
1.26.10

Open the chart page →

23,244
gatekeepermesosphere-stable0.6.111 of 2See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
stdlib@go1.16.2
1.26.10

Open the chart page →

4,680
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.26.10

Open the chart page →

5,435
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.26.10

Open the chart page →

6,547
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
stdlib@go1.23.7
1.26.10

Open the chart page →

4,265
istio-helm-istiodmesosphere-stable1.23.62 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
stdlib@go1.23.7
1.26.10
mesosphere/kubectl:v1.35.0-alpineea01a9387771
stdlib@go1.25.5
1.26.10

Open the chart page →

6,291

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0e0f4431c4704
stdlib@go1.25.13
1.26.10
2
ghcr.io/kubestash/kubestash:v0.29.00686b2a40280
stdlib@go1.25.13
1.26.10
2
ghcr.io/kubestash/kubestash:v0.30.04ff37f9863d5
stdlib@go1.25.5
1.26.10
2
ghcr.io/libredb/libredb-studio:1.0.00cb0177dd278
stdlib@go1.24.4
1.26.10
2
ghcr.io/lockdep/stackradar-scanner:0.7.045d82534d1d5
stdlib@go1.25.7
1.26.10
2
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
stdlib@go1.20.14
1.26.10
2
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
stdlib@go1.24.4
1.26.10
2
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
rustls-webpki@0.103.14
stdlib@go1.25.5
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
stdlib@go1.24.5
1.26.10
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
stdlib@go1.24.5
1.26.10
2
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.10
2
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.161.076ac4fa40512
stdlib@go1.27.2
1.26.10
2
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
rustls-webpki@0.103.14
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
stdlib@go1.21.1
1.26.10
2
ghcr.io/projectcapsule/capsule:v0.15.1fb1eed4437f8
stdlib@go1.27.1
1.26.10
2
ghcr.io/projectcapsule/capsule-proxy:v0.15.20f91cf29ebc9
ca-certificates@20260909-r2
stdlib@go1.27.1
20260909-r3
1.26.10
2
ghcr.io/project-zot/zot:v2.1.2296cda11459ce
stdlib@go1.27.1
1.26.10
2
ghcr.io/quenchworks/images/litellm2388983ffcb2
rustls-webpki@0.103.15
webpki-roots@1.0.9
0.103.16
0.26.11
2
ghcr.io/quenchworks/images/qdrant65750911f8e7
rustls-webpki@0.103.15
0.103.16
2
ghcr.io/rabbitmq/messaging-topology-operator:1.20.3f377d3c3e221
stdlib@go1.27.1
1.26.10
2
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
stdlib@go1.18.10
1.26.10
2
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
stdlib@go1.19.7
1.26.10
2
ghcr.io/shopify/toxiproxy:2.7.0fc2d40f4904c
stdlib@go1.19.13
1.26.10
2
ghcr.io/sigstore/fulcio:v1.9.02de0226c5f82
stdlib@go1.27.1
1.26.10
2
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
stdlib@go1.26.4
1.26.10
2
ghcr.io/sigstore/scaffolding/createcerts4d64dac937e2
stdlib@go1.25.0
1.26.10
2
ghcr.io/smarter-project/smarter-device-manager:v1.20.12228f7f44594a
stdlib@go1.19.3
1.26.10
2
ghcr.io/spiffe/oidc-discovery-provider:1.15.3bb95f13c2b4e
stdlib@go1.26.6
1.26.10
2
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
stdlib@go1.24.0
1.26.10
2
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
stdlib@go1.25.3
1.26.10
2
ghcr.io/spiffe/spire-controller-manager:0.8.019e418e9d7f2
stdlib@go1.27.1
1.26.10
2
ghcr.io/spiffe/spire-server:1.15.34082f30d3e0d
stdlib@go1.26.6
1.26.10
2
ghcr.io/squat/generic-device-plugin:36bfc606bba2064de6ede0ff2764cbb52edff70dba6f0b4cf6c8
stdlib@go1.20.2
1.26.10
2
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
stdlib@go1.25.3
1.26.10
2
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
stdlib@go1.20.1
1.26.10
2
ghcr.io/voyagermesh/echoserver:v20221109:v20221109-7ee2f3efa56a9251de6
stdlib@go1.19
1.26.10
2
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
stdlib@go1.26.4
1.26.10
2
ghcr.io/wg-easy/wg-easy:15:15.4.00e7bc9d34e86
stdlib@go1.26.3
1.26.10
2
ghcr.io/xeor/karb:1.0.6:main647a3c938d31
ca-certificates@20260413-r0
20260909-r3
2
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner:v6.3.0b87b19172ed7
stdlib@go1.26.9
1.26.10
2
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.6_local:latest62d30add38b5
stdlib@go1.27.1
1.26.10
2
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
stdlib@go1.25.4
1.26.10
2
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.0:latest1eb61443d68e
stdlib@go1.23.4
1.26.10
2
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner:1.16.0d47f43484055
stdlib@go1.23.12
1.26.10
2
public.ecr.aws/cloudnatix/llmariner/api-usage-server:1.16.08f9c32b866b0
stdlib@go1.23.12
1.26.10
2
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server:1.8.0364b3ff0fcb7
stdlib@go1.24.5
1.26.10
2
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent:0.10.26769c2275a43
stdlib@go1.23.11
1.26.10
2
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server:0.10.22d28f9e3eab4
stdlib@go1.23.11
1.26.10
2
public.ecr.aws/cloudnatix/llmariner/file-manager-server:1.11.0301216788e93
stdlib@go1.23.11
1.26.10
2
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine:1.46.0c46f109c3d0b
stdlib@go1.25.9
1.26.10
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.