StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,728
of 18,208 indexed, latest versions
Container images
6,681
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,728 of 18,208 indexed charts deploy, on 6,681 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.106,438
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+17 more20260909-r3417
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16103
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1070
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1113
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,728 by stars
ChartLatestAffected imagesRadar Score
ingress-annotatorkuossOfficialVerified publisher0.3.01 of 1See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kuoss/ingress-annotator:v0.3.0ae179f65d869
stdlib@go1.24.6
1.26.10

Open the chart page →

1,001
kitcaddykvalitetsitVerified publisher1.5.111 of 2See more

kitcaddy kvalitetsit 1.5.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kvalitetsit/kitcaddy:1.5.110e66907ea266
stdlib@go1.26.6
1.26.10

Open the chart page →

449
kube-fencingkvaps2.4.12 of 2See more

kube-fencing kvaps 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
stdlib@go1.18.8
1.26.10
ghcr.io/kvaps/kube-fencing-switcher:v2.4.0f8c378e63b78
stdlib@go1.18.8
1.26.10

Open the chart page →

4,152
linstorkvaps1.14.04 of 11See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
stdlib@go1.15.14
1.26.10
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
stdlib@go1.15.14
1.26.10
ghcr.io/kvaps/linstor-ha-controller:v1.14.08e7b44bbd123
stdlib@go1.15.14
1.26.10
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
stdlib@go1.15.14
1.26.10

Open the chart page →

22,580
kymaroskymarosVerified publisher0.6.91 of 1See more

kymaros kymaros 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kymaroshq/kymaros:0.6.9fb3b88633381
stdlib@go1.25.9
1.26.10

Open the chart page →

680
chibisafel4gVerified publisher0.1.12 of 3See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latesta3a8606cd9b5
stdlib@go1.20.12
1.26.10
library/caddy:2-alpined8542f48d34a
stdlib@go1.26.8
1.26.10

Open the chart page →

4,009
auditflowlabs64io-helm-chartsVerified publisher0.15.201 of 3See more

auditflow labs64io-helm-charts 0.15.20

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
labs64/auditflowdigest-pinneda3a8a1aef03f
stdlib@go1.27.1
1.26.10

Open the chart page →

784
authz-pdplabs64io-helm-chartsVerified publisher0.8.71 of 1See more

authz-pdp labs64io-helm-charts 0.8.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cerbos/cerbosdigest-pinned540643bc67ba
stdlib@go1.27.1
1.26.10

Open the chart page →

231
checkoutlabs64io-helm-chartsVerified publisher0.11.102 of 3See more

checkout labs64io-helm-charts 0.11.10

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
labs64/checkoutdigest-pinned5a1a40af9186
stdlib@go1.26.7
1.26.10
library/postgres:1874935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

2,523
payment-gatewaylabs64io-helm-chartsVerified publisher0.10.122 of 2See more

payment-gateway labs64io-helm-charts 0.10.12

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
labs64/payment-gatewaydigest-pinnedf8c76a15b741
stdlib@go1.27.1
1.26.10
library/postgres:1874935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

2,497
lagoon-remotelagoon-chartsVerified publisher0.107.01 of 1See more

lagoon-remote lagoon-charts 0.107.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
stdlib@go1.24.3
1.26.10

Open the chart page →

3,426
lakilakiOfficialVerified publisher1.11.01 of 2See more

laki laki 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/laki-n/laki:v1.6.0599a10c453a3
stdlib@go1.27.0
1.26.10

Open the chart page →

774
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
stdlib@go1.13.10
1.26.10

Open the chart page →

9,591
glancelbenicio-communityVerified publisher0.1.31 of 1See more

glance lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
glanceapp/glance:latestbc5a392672c1
stdlib@go1.27.1
1.26.10

Open the chart page →

401
lgtmlgtmVerified publisher0.31.17 of 9See more

lgtm lgtm 0.31.1

7 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.10
grafana/loki:3.7.81107dd5274e0
stdlib@go1.26.6
1.26.10
grafana/pyroscope:2.4.0b7e62699a274
stdlib@go1.26.9
1.26.10
grafana/tempo:3.1.03076b8dcdfb3
stdlib@go1.27.1
1.26.10
ghcr.io/jkroepke/kube-webhook-certgen:1.8.958e4ac2e15bf
stdlib@go1.27.1
1.26.10
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.160.05323a0df9508
stdlib@go1.26.8
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
stdlib@go1.26.8
1.26.10

Open the chart page →

1,727
lgtm-stacklgtm-stackVerified publisher0.1.35 of 8See more

lgtm-stack lgtm-stack 0.1.3

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.10f4434c92b3e
stdlib@go1.26.5
1.26.10
grafana/grafana:13.1.0121a7a9ece6d
stdlib@go1.25.7
1.26.10
grafana/loki:3.7.6efd47c67f9ba
stdlib@go1.26.5
1.26.10
grafana/mimir:3.2.0736f7459913d
stdlib@go1.26.5
1.26.10
grafana/tempo:2.10.8f0561deb1c68
stdlib@go1.26.5
1.26.10

Open the chart page →

4,643
keptn-cert-managerlifecycle-toolkitVerified publisher0.3.01 of 1See more

keptn-cert-manager lifecycle-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keptn/certificate-operator:v3.0.0b82064b0e339
stdlib@go1.23.3
1.26.10

Open the chart page →

1,066
keptn-lifecycle-operatorlifecycle-toolkitVerified publisher0.6.01 of 1See more

keptn-lifecycle-operator lifecycle-toolkit 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
stdlib@go1.23.3
1.26.10

Open the chart page →

1,182
keptn-metrics-operatorlifecycle-toolkitVerified publisher0.5.01 of 1See more

keptn-metrics-operator lifecycle-toolkit 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
stdlib@go1.23.3
1.26.10

Open the chart page →

1,419
life-dashboardlife-dashboardVerified publisher1.1.21 of 2See more

life-dashboard life-dashboard 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/owen282000/life-dashboard-grafana:1.1.212a7bd52a1aa
stdlib@go1.26.7
1.26.10

Open the chart page →

334
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
stdlib@go1.13.8
1.26.10

Open the chart page →

5,965
lightrun-k8s-operatorlightrun-k8s-operatorOfficialVerified publisher0.4.81 of 1See more

lightrun-k8s-operator lightrun-k8s-operator 0.4.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lightruncom/lightrun-k8s-operator:0.4.8dfb8bff4646b
stdlib@go1.27.2
1.26.10

Open the chart page →

82
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge2 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.3104d224a9999b
stdlib@go1.17.6
1.26.10
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
stdlib@go1.20.7
1.26.10

Open the chart page →

6,323
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
ca-certificates@20250619-r5
rustls-webpki@0.103.4
webpki-roots@1.0.2
20260909-r3
0.103.16
0.26.11

Open the chart page →

5,045
halitesql0.1.51 of 2See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/litesql/ha:latest992944f8e2b5
stdlib@go1.27.2
1.26.10

Open the chart page →

612
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
stdlib@go1.23.8
1.26.10

Open the chart page →

9,922
go-hello-worldloafoe0.17.01 of 1See more

go-hello-world loafoe 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/loafoe/go-hello-world:v2.16.022d94845e317
ca-certificates@20260909-r2
stdlib@go1.26.0
20260909-r3
1.26.10

Open the chart page →

622
stackradarlockdepVerified publisher0.2.04 of 4See more

stackradar lockdep 0.2.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.10
ghcr.io/lockdep/stackradar-client:0.2.01ef6c7132778
stdlib@go1.23.12
1.26.10
ghcr.io/lockdep/stackradar-scanner:0.7.045d82534d1d5
stdlib@go1.25.7
1.26.10
ghcr.io/lockdep/stackradar-server:0.2.046eed1f3046a
stdlib@go1.26.8
1.26.10

Open the chart page →

5,825
locust-k8s-operatorlocust-k8s-operatorVerified publisher2.3.11 of 1See more

locust-k8s-operator locust-k8s-operator 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lotest/locust-k8s-operator:2.3.1859b0d36f371
ca-certificates@20260611-r0
stdlib@go1.26.7
20260909-r3
1.26.10

Open the chart page →

280
home-assistantloeken-at-homeVerified publisher2026.9.21 of 1See more

home-assistant loeken-at-home 2026.9.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
loeken/home-assistant:2026.9.2b1dff5b4c593
rustls-webpki@0.103.13
stdlib@go1.25.6
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

2,513
jspolicyloftVerified publisher0.2.21 of 1See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
loftsh/jspolicy:0.2.225deb9bd2683
stdlib@go1.17.13
1.26.10

Open the chart page →

3,396
vcluster-eksloftVerified publisher0.0.0-ci.33 of 4See more

vcluster-eks loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
stdlib@go1.16.15
1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-apiserver:v1.24.9-eks-1-24-772e06b605692
stdlib@go1.18.9
1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager:v1.24.9-eks-1-24-7eaea8c230432
stdlib@go1.18.9
1.26.10

Open the chart page →

5,786
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
stdlib@go1.19.4
1.26.10

Open the chart page →

4,140
log2rbac-operatorlog2rbac-operator0.0.51 of 1See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jkremser/log2rbac:v0.0.5e35cf56ef183
stdlib@go1.17.6
1.26.10

Open the chart page →

3,065
logclilogcliVerified publisher0.1.01 of 1See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/logcli:main-c90366d-amd643d85bb66e39b
stdlib@go1.16.2
1.26.10

Open the chart page →

4,208
lokxylokxyVerified publisher0.2.01 of 1See more

lokxy lokxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lokxy/lokxy:v0.9.0e4ac800dc55d
stdlib@go1.26.4
1.26.10

Open the chart page →

537
plexluiscajl1.0.11 of 2See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latestfc852e4c2135
stdlib@go1.27.1
1.26.10

Open the chart page →

799
lumenvoxlumenvox8.0.011 of 11See more

lumenvox lumenvox 8.0.0

11 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lumenvox/admin-portal:8.0258583dde8a7
stdlib@go1.27.1
1.26.10
lumenvox/archive:8.04611915d66f6
stdlib@go1.27.1
1.26.10
lumenvox/cloud-init-tools:8.0c01faf8d628d
stdlib@go1.27.1
1.26.10
lumenvox/configuration:8.07badfce0df13
stdlib@go1.27.1
1.26.10
lumenvox/deployment:8.0dce4f18b4945
stdlib@go1.27.1
1.26.10
lumenvox/deployment-portal:8.04cf9bad0381d
stdlib@go1.27.1
1.26.10
lumenvox/file-store:8.08090031da992
stdlib@go1.27.1
1.26.10
lumenvox/license:8.01f985ca4d603
stdlib@go1.27.1
1.26.10
lumenvox/management-api:8.098fe71067039
stdlib@go1.27.1
1.26.10
lumenvox/resource:8.026edd01fa2ee
stdlib@go1.27.1
1.26.10
lumenvox/storage:8.057d15feb3603
stdlib@go1.27.1
1.26.10

Open the chart page →

2,668
voice-biometricslumenvox2.0.18 of 26See more

voice-biometrics lumenvox 2.0.1

8 of the 26 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
library/traefik:v2.57d5a6ae66572
stdlib@go1.17.6
1.26.10
lumenvox/cloud-init-tools:2.0.07ff037a71c50
stdlib@go1.17.3
1.26.10
lumenvox/cloud-license:2.0.09a69862e1248
stdlib@go1.17.3
1.26.10
prom/pushgateway:v1.3.18305a33fb80a
stdlib@go1.15.6
1.26.10
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
stdlib@go1.14.4
1.26.10
quay.io/prometheus/node-exporter:v1.1.222fbde17ab64
stdlib@go1.15.8
1.26.10
quay.io/prometheus/prometheus:v2.26.038d40a760569
stdlib@go1.16.2
1.26.10

Open the chart page →

84,407
dnsbl-exporterluzillaVerified publisher0.5.01 of 2See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/luzilla/dnsbl_exporter:v0.12.0ecba7360ff12
stdlib@go1.25.0
1.26.10

Open the chart page →

2,146
lynqlynqVerified publisher1.1.221 of 1See more

lynq lynq 1.1.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/k8s-lynq/lynq:1.1.22229b05e3c717
stdlib@go1.24.13
1.26.10

Open the chart page →

1,075
cert-manager-webhook-infomaniakm0nsterrr-cert-manager-webhook-infomaniakVerified publisher1.1.31 of 1See more

cert-manager-webhook-infomaniak m0nsterrr-cert-manager-webhook-infomaniak 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/cert-manager-webhook-infomaniak:v0.1.65b7373bc3664
stdlib@go1.27.1
1.26.10

Open the chart page →

248
magentomagento3.2.35 of 12See more

magento magento 3.2.3

5 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
stdlib@go1.18.2
1.26.10
library/rabbitmq:4.1.0-management935b3f84c1e4
stdlib@go1.22.2
1.26.10
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
stdlib@go1.24.6
1.26.10
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
stdlib@go1.24.6
1.26.10
longhornio/longhorn-ui:v1.10.0e60f36161511
stdlib@go1.24.6
1.26.10

Open the chart page →

17,905
mcp-orchestratormagertronVerified publisher4.1.651 of 7See more

mcp-orchestrator magertron 4.1.65

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
curtismager20/mcp-envoy:1.38.10ae2ba784a5e
ca-certificates@20260909-r2
20260909-r3

Open the chart page →

62
goblackholemainVerified publisher0.0.41 of 1See more

goblackhole main 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bedag/goblackhole:0.2.0447a88598f4c
stdlib@go1.16.6
1.26.10

Open the chart page →

3,305
plane-enterprisemakeplaneOfficialVerified publisher3.10.114 of 13See more

plane-enterprise makeplane 3.10.11

4 of the 13 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine468d34fefd63
stdlib@go1.18.2
1.26.10
makeplane/monitor-commercial:v3.3.3e451e99283aa
stdlib@go1.26.8
1.26.10
pgsty/mc:RELEASE.2026-09-16T00-00-00Zcfc83108c3ab
stdlib@go1.27.1
1.26.10
pgsty/silo:RELEASE.2026-09-16T00-00-00Z635197cb9f36
stdlib@go1.27.1
1.26.10

Open the chart page →

7,053
mattermost-enterprise-editionmattermostVerified publisher2.6.1061 of 3See more

mattermost-enterprise-edition mattermost 2.6.106

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mattermost/mattermost-enterprise-edition:12.0.095a5606c980c
stdlib@go1.26.7
1.26.10

Open the chart page →

1,181
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:80f51e63e537a
stdlib@go1.24.6
1.26.10

Open the chart page →

22,725
mcpmcp-chartsVerified publisher0.0.243 of 7See more

mcp mcp-charts 0.0.24

3 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest0bdf876e5703
stdlib@go1.26.9
1.26.10
ghcr.io/gla-rad/mc-mms-router:latest99e8c2a00a83
stdlib@go1.26.9
1.26.10
ghcr.io/maritimeconnectivity/identityregistry:lateste03cd5830979
stdlib@go1.26.7
1.26.10

Open the chart page →

4,112
traefik-forward-authmesosphere0.3.102 of 2See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-addon-initializer:v0.5.15efa21defcbc
stdlib@go1.15.11
1.26.10
mesosphere/traefik-forward-auth:3.1.05456581d7b76
stdlib@go1.14.15
1.26.10

Open the chart page →

8,097

Container images carrying it

6,681 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
stdlib@go1.27.2
1.26.10
7
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
stdlib@go1.26.4
1.26.10
7
quay.io/jetstack/cert-manager-cainjector:v1.21.2c85268c64f2e
stdlib@go1.26.8
1.26.10
7
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
stdlib@go1.26.8
1.26.10
7
quay.io/jetstack/cert-manager-startupapicheck:v1.21.246e75b686635
stdlib@go1.26.8
1.26.10
7
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
stdlib@go1.26.8
1.26.10
7
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.26.10
7
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
stdlib@go1.26.8
1.26.10
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.10
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
stdlib@go1.23.3
1.26.10
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
stdlib@go1.21.8
1.26.10
7
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.26.10
7
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
7
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10
7
bitnami/kubectl:latest599e67d36ff5
stdlib@go1.26.9
1.26.10
6
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10
6
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
6
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.26.10
6
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.26.10
6
grafana/grafana:latestb28bae15e219
stdlib@go1.26.7
1.26.10
6
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.26.10
6
grafana/grafana:latestdbbc38ea2110
stdlib@go1.26.9
1.26.10
6
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.26.10
6
library/mysql:26.7.0625f74ddf936
stdlib@go1.24.6
1.26.10
6
library/registry:2:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.26.10
6
postgis/postgis:17-3.5:latest01a6a70e41e6
stdlib@go1.18.2
1.26.10
6
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.26.10
6
prom/memcached-exporter:v0.15.4b6763ecb3c47
stdlib@go1.25.3
1.26.10
6
traefik/whoami:latest:v1.12.0c4717a8d1f01
stdlib@go1.26.5
1.26.10
6
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.10
6
ghcr.io/quenchworks/images/prometheusd57cf70aab4c
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
stdlib@go1.18.2
1.26.10
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
stdlib@go1.20.12
1.26.10
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
stdlib@go1.16.6
1.26.10
6
quay.io/devtron/kubectl:latest2ad610626658
stdlib@go1.18.5
1.26.10
6
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
stdlib@go1.19.9
1.26.10
6
quay.io/devtron/postgres:14.91b594392f7cb
stdlib@go1.18.2
1.26.10
6
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
stdlib@go1.17.6
1.26.10
6
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.26.10
6
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.26.10
6
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
stdlib@go1.14.4
1.26.10
6
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
6
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.10
6
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.10
6
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
stdlib@go1.26.1
1.26.10
6
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
stdlib@go1.26.1
1.26.10
6
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.10
6
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
stdlib@go1.22.5
1.26.10
6
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.10
6

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.