StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,602
of 18,219 indexed, latest versions
Container images
6,522
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,602 of 18,219 indexed charts deploy, on 6,522 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,285
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1699
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1067
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,602 by stars
ChartLatestAffected imagesRadar Score
cosignedsigstoreVerified publisher0.1.232 of 2See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/projectsigstore/cosigneddigest-pinned784518ff3ee7
stdlib@go1.17.9
1.26.10
gcr.io/projectsigstore/policy-webhookdigest-pinned82940e8c3e0d
stdlib@go1.17.9
1.26.10

Open the chart page →

7,652
rekor-tilessigstoreVerified publisher1.2.61 of 1See more

rekor-tiles sigstore 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sigstore/rekor-tiles/gcp:v2.2.1e401cfe033c9
stdlib@go1.26.3
1.26.10

Open the chart page →

721
scaffoldsigstoreVerified publisher0.6.11711 of 15See more

scaffold sigstore 0.6.117

11 of the 15 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redisdigest-pinned148bb5411c18
stdlib@go1.18.2
1.26.10
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
stdlib@go1.18.2
1.26.10
ghcr.io/sigstore/fulcio:v1.9.02de0226c5f82
stdlib@go1.27.1
1.26.10
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
stdlib@go1.26.4
1.26.10
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned4d64dac937e2
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.33e591f98e3899
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createdbdigest-pinned16673c1099a5
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.334c845ced03d8
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3324293fa1ed50
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned32ee491f4d00
stdlib@go1.27.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned3d0152303816
stdlib@go1.27.0
1.26.10

Open the chart page →

12,343
octopusdeploysimcube1.0.211 of 2See more

octopusdeploy simcube 1.0.21

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/kubectl:latest599e67d36ff5
stdlib@go1.26.9
1.26.10

Open the chart page →

99
simply-dns-webhooksimply-dns-webhookVerified publisher1.10.01 of 1See more

simply-dns-webhook simply-dns-webhook 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/runnerm/simply-dns-webhook:v1.10.0fdfffa3984a5
stdlib@go1.26.4
1.26.10

Open the chart page →

783
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
stdlib@go1.23.8
1.26.10

Open the chart page →

5,597
postgresql-singlesinextraVerified publisher1.15.21 of 1See more

postgresql-single sinextra 1.15.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
stdlib@go1.24.6
1.26.10

Open the chart page →

6,220
registry-mirrorssinextraVerified publisher2.0.201 of 1See more

registry-mirrors sinextra 2.0.20

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/project-zot/zot:v2.1.2296cda11459ce
stdlib@go1.27.1
1.26.10

Open the chart page →

575
skippersinextraVerified publisher0.9.11 of 1See more

skipper sinextra 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/zalando/skipper:v0.28.398a50a01aea02
stdlib@go1.27.2
1.26.10

Open the chart page →

21
altinity-clickhouse-operatorslamdev0.1.22 of 2See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.20.08f0f582d41f0
stdlib@go1.17.13
1.26.10
altinity/metrics-exporter:0.20.01a46d104406d
stdlib@go1.17.13
1.26.10

Open the chart page →

8,460
docker-registry-uislamdev0.0.11 of 1See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quiq/docker-registry-ui:0.9.491281da47036
stdlib@go1.18
1.26.10

Open the chart page →

3,319
external-secrets-operatorslamdev0.0.151 of 1See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
slamdev/external-secrets-operator:0.0.8855f6625dda4
stdlib@go1.13.15
1.26.10

Open the chart page →

3,567
wg-easyslybase-wg-easyVerified publisher1.2.01 of 1See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:15.4.00e7bc9d34e86
stdlib@go1.26.3
1.26.10

Open the chart page →

1,310
wireguardslybase-wireguardVerified publisher2.0.101 of 1See more

wireguard slybase-wireguard 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
linuxserver/wireguard:1.0.20260223-r0-ls1266bcf5d2f5a26
stdlib@go1.26.8
1.26.10

Open the chart page →

762
smallest-self-hostsmallest-self-hostVerified publisher0.2.27 of 12See more

smallest-self-host smallest-self-host 0.2.2

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/redis:latest33dbb7a4be39
stdlib@go1.26.9
1.26.10
grafana/grafana:11.0.00dc5a246ab16
stdlib@go1.21.10
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
stdlib@go1.22.3
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
stdlib@go1.21.8
1.26.10
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
stdlib@go1.22.8
1.26.10
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.10

Open the chart page →

11,916
smarter-edgesmarterOfficialVerified publisher0.0.151 of 1See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/smarter-device-manager:v1.20.12228f7f44594a
stdlib@go1.19.3
1.26.10

Open the chart page →

2,016
aws-otel-collectorsnowplow-devopsVerified publisher0.17.01 of 1See more

aws-otel-collector snowplow-devops 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.50.07968fb60db6a
stdlib@go1.26.7
1.26.10

Open the chart page →

360
yopasssoftizyVerified publisher1.0.11 of 2See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jhaals/yopass:11.4.69516e3b3e88c
stdlib@go1.19.1
1.26.10

Open the chart page →

2,346
artifact-hubsoftonic1.19.06 of 8See more

artifact-hub softonic 1.19.0

6 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
stdlib@go1.19.10
1.26.10
artifacthub/db-migrator:v1.19.02a746b289fcd
stdlib@go1.22.4
1.26.10
artifacthub/hub:v1.19.0111918d8c399
stdlib@go1.22.4
1.26.10
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
artifacthub/scanner:v1.19.0323d026e78c3
stdlib@go1.21.8
1.26.10
artifacthub/tracker:v1.19.06596c8c4d955
stdlib@go1.22.4
1.26.10

Open the chart page →

18,943
gcp-quota-exportersoftonic2.0.21 of 1See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mintel/gcp-quota-exporter:v0.3.20e0707b7732b
stdlib@go1.13.12
1.26.10

Open the chart page →

3,927
go-ratelimitsoftonic1.0.72 of 3See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:v1.4.071081616da3e
stdlib@go1.14
1.26.10
oliver006/redis_exporter:v1.9.04af75e9f16f6
stdlib@go1.14.4
1.26.10

Open the chart page →

7,899
node-policy-webhooksoftonic0.1.101 of 1See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
softonic/node-policy-webhook:0.1.2ab6098c04a53
stdlib@go1.14.6
1.26.10

Open the chart page →

4,135
redis-shardedsoftonic0.5.01 of 2See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.9.04af75e9f16f6
stdlib@go1.14.4
1.26.10

Open the chart page →

3,178
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
stdlib@go1.24.13
1.26.10

Open the chart page →

8,901
pubsubplussolaceVerified publisher3.10.01 of 1See more

pubsubplus solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest59f2a6d8eaba
stdlib@go1.26.8
1.26.10

Open the chart page →

488
pubsubplus-devsolaceVerified publisher3.10.01 of 1See more

pubsubplus-dev solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
solace/solace-pubsub-standard:latest59f2a6d8eaba
stdlib@go1.26.8
1.26.10

Open the chart page →

488
postgresql-ha-chartsoldevelo-postgresql-ha-chart16.3.41 of 2See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
stdlib@go1.25.4
1.26.10

Open the chart page →

5,385
rabbitmqsolidchartsVerified publisher0.8.01 of 2See more

rabbitmq solidcharts 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/rabbitmq:4.4.0-managementc200fd496482
stdlib@go1.25.0
1.26.10

Open the chart page →

1,122
thanossolidchartsVerified publisher0.12.21 of 1See more

thanos solidcharts 0.12.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
stdlib@go1.26.5
1.26.10

Open the chart page →

537
gloosolo-gloo-edge0.0.0-fork4 of 5See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/solo-io/certgen:0.0.0-forkb17a8c7d1f32
stdlib@go1.18.1
1.26.10
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
stdlib@go1.18.1
1.26.10
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
stdlib@go1.18.1
1.26.10
quay.io/solo-io/gloo-envoy-wrapper:0.0.0-fork26ae185e835a
stdlib@go1.18.1
1.26.10

Open the chart page →

13,588
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
stdlib@go1.20.5
1.26.10

Open the chart page →

2,814
sql-exportersql-exporterOfficialVerified publisher0.18.131 of 1See more

sql-exporter sql-exporter 0.18.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
burningalchemist/sql_exporter:0.24.1192f8210824dd
stdlib@go1.26.9
1.26.10

Open the chart page →

8
sql-operatorsql-operatorOfficialVerified publisher0.11.21 of 1See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stenic/sql-operator:1.13.2f4324baa2aad
stdlib@go1.17.13
1.26.10

Open the chart page →

2,530
stackradar-scannerstackradarVerified publisher0.7.01 of 1See more

stackradar-scanner stackradar 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/lockdep/stackradar-scanner:0.7.045d82534d1d5
stdlib@go1.25.7
1.26.10

Open the chart page →

1,820
gitwebhookproxystakaterVerified publisher0.2.791 of 1See more

gitwebhookproxy stakater 0.2.79

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
stakater/gitwebhookproxy:v0.2.79c1226e5270cd
stdlib@go1.13.1
1.26.10

Open the chart page →

2,661
splunk-operatorstakaterVerified publisher0.0.61 of 2See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
splunk/splunk-operator:2.0.0c4e0d3146226
stdlib@go1.17.12
1.26.10

Open the chart page →

12,617
gethstakewise2.5.81 of 3See more

geth stakewise 2.5.8

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ethereum/client-go:v1.15.101f36ca5922a5
stdlib@go1.24.2
1.26.10

Open the chart page →

1,904
graph-nodestakewise3.1.02 of 3See more

graph-node stakewise 3.1.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
graphprotocol/graph-node:v0.37.0f4452cdedd68
stdlib@go1.24.1
1.26.10
ipfs/kubo:v0.24.0e3de33bd746b
stdlib@go1.19.8
1.26.10

Open the chart page →

6,144
stardogstardog3.1.01 of 3See more

stardog stardog 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
stardog/stardog:lateste09198a37cd8
ca-certificates@20260909-r2
20260909-r3

Open the chart page →

358
mayastorstartechnicaVerified publisher0.2.03 of 13See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-attacher:v4.0.09a685020911e
stdlib@go1.18
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.0f1c25991bac2
stdlib@go1.18
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.8.0cacee2b5c36d
stdlib@go1.18
1.26.10

Open the chart page →

7,557
multusstartechnicaVerified publisher0.1.21 of 1See more

multus startechnica 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:stable9dc8ca645a78
stdlib@go1.26.8
1.26.10

Open the chart page →

706
statpingstatping0.1.141 of 1See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
stdlib@go1.14.13
1.26.10

Open the chart page →

4,639
thanosstevehipwell-helm-charts-thanosVerified publisher1.24.11 of 1See more

thanos stevehipwell-helm-charts-thanos 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
stdlib@go1.26.5
1.26.10

Open the chart page →

537
stornxstornxVerified publisher1.1.19 of 9See more

stornx stornx 1.1.1

9 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alazidis/kube-netlag:1.1.00e8c84152201
stdlib@go1.24.13
1.26.10
alazidis/stornx:1.1.1602d4f7f090c
stdlib@go1.25.7
1.26.10
istio/pilot:1.29.1f8b0e412ac4a
stdlib@go1.25.8
1.26.10
quay.io/kiali/kiali:v2.23.07652b1285f50
stdlib@go1.25.0
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.0e5aab3be6873
stdlib@go1.25.8
1.26.10
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
quay.io/prometheus/prometheus:v3.10.07571a304e67f
stdlib@go1.26.0
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
stdlib@go1.24.4
1.26.10

Open the chart page →

16,981
consolestratosVerified publisher4.4.01 of 4See more

console stratos 4.4.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
splatform/stratos-jetstream:4.4.0-bc65c315c886311c331b9
stdlib@go1.13.4
1.26.10

Open the chart page →

31,534
stunner-gateway-operatorstunner1.1.02 of 2See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
l7mp/stunner-auth-server:1.1.02f8114477ba6
stdlib@go1.23.8
1.26.10
l7mp/stunner-gateway-operator:1.1.0c34f7c931491
stdlib@go1.23.8
1.26.10

Open the chart page →

2,453
hlf-k8ssubstraVerified publisher10.2.44 of 7See more

hlf-k8s substra 10.2.4

4 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:1.5.0f270dfeee91d
stdlib@go1.15.7
1.26.10
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.10
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
stdlib@go1.18.10
1.26.10
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
stdlib@go1.18.10
1.26.10

Open the chart page →

17,137
supabasesupabse0.8.04 of 11See more

supabase supabse 0.8.0

4 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
stdlib@go1.25.1
1.26.10
library/postgres:17-alpineb0f9560a2de0
stdlib@go1.24.6
1.26.10
supabase/gotrue:v2.189.0385184459f57
stdlib@go1.25.8
1.26.10
supabase/postgres:17.6.1.136f371b5f3f2ac
stdlib@go1.26.1
1.26.10

Open the chart page →

22,516
Grafanasurajwarbhe-grafana0.1.01 of 1See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
surajwarbhe/grafana:v185248611e9f1
stdlib@go1.14.3
1.26.10

Open the chart page →

3,917
switchboardswitchboardVerified publisher0.7.41 of 1See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/borchero/switchboard:0.7.454a193b757da
stdlib@go1.26.1
1.26.10

Open the chart page →

1,351

Container images carrying it

6,522 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
stdlib@go1.26.8
1.26.10
7
quay.io/jetstack/cert-manager-startupapicheck:v1.21.246e75b686635
stdlib@go1.26.8
1.26.10
7
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
stdlib@go1.26.8
1.26.10
7
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.26.10
7
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
stdlib@go1.26.8
1.26.10
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.10
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
stdlib@go1.23.3
1.26.10
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
stdlib@go1.21.8
1.26.10
7
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.26.10
7
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
7
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10
7
bitnami/kubectl:latest599e67d36ff5
stdlib@go1.26.9
1.26.10
6
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10
6
bitnami/mariadb:latest2c14d1572dd0
stdlib@go1.26.9
1.26.10
6
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
6
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.26.10
6
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.26.10
6
grafana/grafana:latestb28bae15e219
stdlib@go1.26.7
1.26.10
6
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.26.10
6
grafana/grafana:latestdbbc38ea2110
stdlib@go1.26.9
1.26.10
6
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.26.10
6
library/registry:2:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.26.10
6
postgis/postgis:17-3.5:latest01a6a70e41e6
stdlib@go1.18.2
1.26.10
6
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.26.10
6
prom/memcached-exporter:v0.15.4b6763ecb3c47
stdlib@go1.25.3
1.26.10
6
traefik/whoami:latest:v1.12.0c4717a8d1f01
stdlib@go1.26.5
1.26.10
6
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.10
6
ghcr.io/quenchworks/images/prometheusd57cf70aab4c
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
stdlib@go1.18.2
1.26.10
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
stdlib@go1.20.12
1.26.10
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
stdlib@go1.16.6
1.26.10
6
quay.io/devtron/kubectl:latest2ad610626658
stdlib@go1.18.5
1.26.10
6
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
stdlib@go1.19.9
1.26.10
6
quay.io/devtron/postgres:14.91b594392f7cb
stdlib@go1.18.2
1.26.10
6
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
stdlib@go1.17.6
1.26.10
6
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.26.10
6
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.26.10
6
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
stdlib@go1.14.4
1.26.10
6
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
6
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.10
6
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.10
6
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
stdlib@go1.26.1
1.26.10
6
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
stdlib@go1.26.1
1.26.10
6
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.10
6
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
stdlib@go1.22.5
1.26.10
6
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.10
6
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
6
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
6
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
6

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.