StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
openhumanhelmforgeVerified publisher1.1.01 of 1See more

openhuman helmforge 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/tinyhumansai/openhuman-core:v0.64.15c694baccddb4
stdlib@go1.19.8
1.26.10

Open the chart page →

2,944
openreplayhelmforgeVerified publisher1.1.118 of 24See more

openreplay helmforge 1.1.1

18 of the 24 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/git:2.52.04a0e72d49596
stdlib@go1.25.10
1.26.10
library/caddy:2.10.2-alpine4c6e91c6ed0e
stdlib@go1.25.0
1.26.10
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/openreplay/minio:20258cada3c9458a
ca-certificates@20260413-r0
minio@0.20251015.172955-r10
stdlib@go1.26.3
20260909-r3
0.20260922.192518-r5
1.26.10
ghcr.io/openreplay/postgres:173b49780c0497
ca-certificates@20260413-r0
20260909-r3
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
public.ecr.aws/p1t3u8a3/api:v1.28.512aeda8dbac7
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/assets:v1.28.0fee63ead0e74
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/canvases:v1.28.08d2b3a947a14
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
public.ecr.aws/p1t3u8a3/db:v1.28.02c99078d7957
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/ender:v1.28.00f5806583626
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/frontend:v1.28.3bc4452ef9701
ca-certificates@20260909-r2
20260909-r3
public.ecr.aws/p1t3u8a3/http:v1.28.0cd0e4469cd02
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/images:v1.28.004fadd25a569
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/sink:v1.28.06b80fb10b443
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/spot:v1.28.00ba5cb666370
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/storage:v1.28.02f9784a385ce
stdlib@go1.26.8
1.26.10

Open the chart page →

15,720
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:9.0.4dc28ed5a9d0f
stdlib@go1.26.8
1.26.10

Open the chart page →

69,345
paperless-ngxhelmforgeVerified publisher1.1.12 of 4See more

paperless-ngx helmforge 1.1.1

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
rustls-webpki@0.103.14
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

8,142
paprahelmforgeVerified publisher1.0.21 of 1See more

papra helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
stdlib@go1.23.12
1.26.10

Open the chart page →

3,685
pimcorehelmforgeVerified publisher2.0.72 of 6See more

pimcore helmforge 2.0.7

2 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.2916834e49961
stdlib@go1.26.3
1.26.10
library/mariadb:13.0.20e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

3,677
pocket-idhelmforgeVerified publisher1.0.21 of 2See more

pocket-id helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.14.001540977dcf4
stdlib@go1.26.6
1.26.10

Open the chart page →

742
questdbhelmforgeVerified publisher1.2.01 of 1See more

questdb helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
questdb/questdb:10.0.167eaed863ebb
stdlib@go1.25.14
1.26.10

Open the chart page →

170
reactive-resumehelmforgeVerified publisher1.0.22 of 4See more

reactive-resume helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
stdlib@go1.26.4
1.26.10

Open the chart page →

4,028
ryothelmforgeVerified publisher1.0.22 of 2See more

ryot helmforge 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
stdlib@go1.23.1
1.26.10

Open the chart page →

7,267
siyuanhelmforgeVerified publisher1.0.41 of 1See more

siyuan helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
b3log/siyuan:v3.8.7aced5ce847dc
stdlib@go1.26.9
1.26.10

Open the chart page →

267
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

2,580
strava-statisticshelmforgeVerified publisher1.1.191 of 2See more

strava-statistics helmforge 1.1.19

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
stdlib@go1.26.3
1.26.10

Open the chart page →

1,256
supersethelmforgeVerified publisher1.4.23 of 5See more

superset helmforge 1.4.2

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
0.103.16
1.0.10
helmforge/kubectl:1.35.3c3f97e954c47
stdlib@go1.25.7
1.26.10
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

34,432
temporalhelmforgeVerified publisher1.1.14 of 4See more

temporal helmforge 1.1.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
temporalio/admin-tools:1.32.19ef0dc5b063b
stdlib@go1.26.8
1.26.10
temporalio/server:1.32.1acecbab5b0b8
stdlib@go1.26.8
1.26.10
temporalio/ui:2.56.066d55d383bfb
stdlib@go1.26.9
1.26.10

Open the chart page →

2,630
twentyhelmforgeVerified publisher1.0.91 of 5See more

twenty helmforge 1.0.9

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5486e8fb2069
stdlib@go1.24.6
1.26.10

Open the chart page →

2,792
wallabaghelmforgeVerified publisher1.3.112 of 3See more

wallabag helmforge 1.3.11

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.10

Open the chart page →

3,315
webodmhelmforgeVerified publisher1.1.21 of 4See more

webodm helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
postgis/postgis:17-3.501a6a70e41e6
stdlib@go1.18.2
1.26.10

Open the chart page →

13,271
zookeeperhelmforgeVerified publisher1.1.11 of 1See more

zookeeper helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/zookeeper:3.9.65bad433c7170
stdlib@go1.18.1
1.26.10

Open the chart page →

3,724
harborhelm-harborVerified publisher2.3.75 of 8See more

harbor helm-harbor 2.3.7

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.47d2ba5304a72
stdlib@go1.26.7
1.26.10
goharbor/harbor-jobservice:v2.15.4f143578ef30e
stdlib@go1.26.7
1.26.10
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
stdlib@go1.26.7
1.26.10
goharbor/registry-photon:v2.15.4dc0cb388a644
stdlib@go1.26.7
1.26.10
goharbor/trivy-adapter-photon:v2.15.4813ca81b4a4e
stdlib@go1.26.7
1.26.10

Open the chart page →

1,734
openaevhelm-openbasVerified publisher2.0.151 of 7See more

openaev helm-openbas 2.0.15

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
golang-1.19@1.19.8-2
stdlib@go1.19.8
no fix listed
1.26.10

Open the chart page →

79,005
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
golang-1.19@1.19.8-2
stdlib@go1.19.8
no fix listed
1.26.10

Open the chart page →

83,823
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
stdlib@go1.25.6
1.26.10

Open the chart page →

2,614
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.10

Open the chart page →

21,677
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
stdlib@go1.26.1
1.26.10

Open the chart page →

3,909
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
stdlib@go1.24.3
1.26.10

Open the chart page →

7,357
hermes-operatorhermes-agent-operatorVerified publisher0.2.01 of 1See more

hermes-operator hermes-agent-operator 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/paperclipinc/hermes-operator:v0.2.07a491ec9b0ff
stdlib@go1.27.1
1.26.10

Open the chart page →

257
postgres-backup-localheywood8-helm-chartsVerified publisher0.1.131 of 1See more

postgres-backup-local heywood8-helm-charts 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
stdlib@go1.16
1.26.10

Open the chart page →

3,504
kubefaashfoxy-helm-charts0.1.63 of 4See more

kubefaas hfoxy-helm-charts 0.1.6

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hfoxy4/kubefaas-builder:main-2afc7570bfb65aaad93
stdlib@go1.21.11
1.26.10
hfoxy4/kubefaas-controller:main-2afc7570761fe08f14c
stdlib@go1.22.4
1.26.10
library/docker:27.0.1-dind2416984b43dd
stdlib@go1.21.11
1.26.10

Open the chart page →

8,261
tapo-prometheus-exporterhfoxy-helm-charts0.1.111 of 1See more

tapo-prometheus-exporter hfoxy-helm-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hfoxy4/tapo-prometheus-exporter:v0.1.117e385eef6fc7
stdlib@go1.21.3
1.26.10

Open the chart page →

1,447
goshimmerhiveroad0.2.141 of 1See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
iotaledger/goshimmer:v0.8.6b02a8f77474f
stdlib@go1.17.2
1.26.10

Open the chart page →

3,859
cratedb-adapterhmdmph0.1.01 of 1See more

cratedb-adapter hmdmph 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crate/crate_adapter:latestb8d89fa5d19b
stdlib@go1.16.3
1.26.10

Open the chart page →

4,159
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
stdlib@go1.21.5
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10

Open the chart page →

13,200
imageproxyhmphuVerified publisher0.1.11 of 1See more

imageproxy hmphu 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
willnorris/imageproxy:latest21d0c90f4c31
stdlib@go1.16.8
1.26.10

Open the chart page →

3,353
holmesholmes0.1.01 of 1See more

holmes holmes 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:master39081bf0c4a9
stdlib@go1.19
1.26.10

Open the chart page →

2,957
homeboxhomebox-helmVerified publisher0.3.01 of 2See more

homebox homebox-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
sysadminsmedia/homebox:0.26.056e880b62309
stdlib@go1.26.4
1.26.10

Open the chart page →

1,188
homecharthomechartVerified publisher1.0.11 of 1See more

homechart homechart 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/candiddev/homechart:latest582a76ccdd9f
stdlib@go1.27.2
1.26.10

Open the chart page →

12
adguardhomeenterpriseinc0.12.01 of 1See more

adguard homeenterpriseinc 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.0-b.5a9668737b1d6
stdlib@go1.16.6
1.26.10

Open the chart page →

3,749
cert-managerhomeenterpriseinc1.10.13 of 3See more

cert-manager homeenterpriseinc 1.10.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.10.1b5657161d2c2
stdlib@go1.19.3
1.26.10
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
stdlib@go1.19.3
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.10.164121721c665
stdlib@go1.19.3
1.26.10

Open the chart page →

7,396
homeassistanthomeenterpriseinc0.3.01 of 1See more

homeassistant homeenterpriseinc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2022.3.5565751f33794
stdlib@go1.17.1
1.26.10

Open the chart page →

9,543
photoprismhomeenterpriseinc0.8.01 of 1See more

photoprism homeenterpriseinc 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
photoprism/photoprism:20211010f4687352985a
stdlib@go1.17.1
1.26.10

Open the chart page →

3,266
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
stdlib@go1.19.8
1.26.10

Open the chart page →

18,925
honeydipperhoneydipperVerified publisher0.1.111 of 2See more

honeydipper honeydipper 0.1.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redis:5fc5ecd863862
stdlib@go1.16.7
1.26.10

Open the chart page →

2,873
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
stdlib@go1.21.10
1.26.10

Open the chart page →

4,639
universal-web-apphotrungnhanVerified publisher0.2.61 of 2See more

universal-web-app hotrungnhan 0.2.6

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
traefik/whoami:latestc4717a8d1f01
stdlib@go1.26.5
1.26.10

Open the chart page →

387
hoverflyhoverflyVerified publisher0.2.01 of 1See more

hoverfly hoverfly 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
spectolabs/hoverfly:v1.12.13250986d58ed4
stdlib@go1.27.0
1.26.10

Open the chart page →

326
paperlesshpVerified publisher0.1.23 of 5See more

paperless hp 0.1.2

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
stdlib@go1.26.2
1.26.10
gotenberg/gotenberg:8.3467097317623a
stdlib@go1.26.2
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls-webpki@0.103.13
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

38,296
wallabaghpVerified publisher0.1.71 of 1See more

wallabag hp 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.10

Open the chart page →

1,573
hammerspace-csihscsi1.2.86 of 6See more

hammerspace-csi hscsi 1.2.8

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
stdlib@go1.24.4
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.0a399393ff5bd
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.0.25f051159c95f
stdlib@go1.22.5
1.26.10

Open the chart page →

8,009
eoloplanthttpd-eoloplant0.1.03 of 7See more

eoloplant httpd-eoloplant 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
stdlib@go1.18.10
1.26.10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.10
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.10

Open the chart page →

37,945

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
stdlib@go1.26.8
1.26.10
7
quay.io/jetstack/cert-manager-startupapicheck:v1.21.246e75b686635
stdlib@go1.26.8
1.26.10
7
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
stdlib@go1.26.8
1.26.10
7
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.26.10
7
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
stdlib@go1.26.8
1.26.10
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.26.10
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
stdlib@go1.23.3
1.26.10
7
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
stdlib@go1.21.8
1.26.10
7
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.26.10
7
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
7
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10
7
bitnami/kubectl:latest599e67d36ff5
stdlib@go1.26.9
1.26.10
6
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10
6
bitnami/mariadb:latest2c14d1572dd0
stdlib@go1.26.9
1.26.10
6
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
6
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.26.10
6
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.26.10
6
grafana/grafana:latestb28bae15e219
stdlib@go1.26.7
1.26.10
6
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.26.10
6
grafana/grafana:latestdbbc38ea2110
stdlib@go1.26.9
1.26.10
6
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.26.10
6
library/mariadb:10:10.110d0945c57f75
stdlib@go1.24.6
1.26.10
6
library/postgres:16.15-alpine:16-alpinedeb28ee47118
stdlib@go1.24.6
1.26.10
6
library/registry:2:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.26.10
6
postgis/postgis:17-3.5:latest01a6a70e41e6
stdlib@go1.18.2
1.26.10
6
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.26.10
6
prom/memcached-exporter:v0.15.4b6763ecb3c47
stdlib@go1.25.3
1.26.10
6
traefik/whoami:latest:v1.12.0c4717a8d1f01
stdlib@go1.26.5
1.26.10
6
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.10
6
ghcr.io/quenchworks/images/prometheusd57cf70aab4c
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
stdlib@go1.18.2
1.26.10
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
stdlib@go1.20.12
1.26.10
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
stdlib@go1.16.6
1.26.10
6
quay.io/devtron/kubectl:latest2ad610626658
stdlib@go1.18.5
1.26.10
6
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
stdlib@go1.19.9
1.26.10
6
quay.io/devtron/postgres:14.91b594392f7cb
stdlib@go1.18.2
1.26.10
6
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
stdlib@go1.17.6
1.26.10
6
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.26.10
6
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.26.10
6
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
stdlib@go1.14.4
1.26.10
6
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
6
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.10
6
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.10
6
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
stdlib@go1.26.1
1.26.10
6
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
stdlib@go1.26.1
1.26.10
6
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.10
6
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
stdlib@go1.22.5
1.26.10
6
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.10
6
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
6

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.