CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,680; of 18,219 indexed, latest versions
Container images: 6,616; deployed by those charts
Fix available: 10 of 12; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+211 more	1.26.10	6,376
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more	20260909-r3	412
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	102
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	68
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more	0.26.11	12
kustomizeapk	5.8.3-r0	5.8.3-r1	2
containerd-2apk	2.4.1-r2	2.4.2-r1	1
golang-1.19deb	1.19.8-2	no fix listed	1
kineapk	0.17.2-r2	no fix listed	1
kubernetes-1.37apk	1.37.1-r2	1.37.1-r3	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r5	1
tetragonapk	1.7.1-r6	1.7.1-r7	1

OSV records: CGA-32jh-59ph-xj58 CGA-7j3j-q347-3xh3 CGA-9w23-c7x9-6gcf CGA-g98g-xf3f-2xxg CGA-pj7v-5f5f-w56q CGA-v7mw-hrjj-f3hj CGA-wv85-v6qp-cp86 DEBIAN-CVE-2026-111943 GO-2026-6809 RUSTSEC-2026-0381 RUSTSEC-2026-0382 RUSTSEC-2026-0383
Also known as: CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending: Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars

Chart

Latest

Affected images

Radar Score

linode-blockstorage-csi-driverlinode-blockstorage-csi-driver

1.1.5

4 of 5 See more

linode-blockstorage-csi-driver linode-blockstorage-csi-driver 1.1.5

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	stdlib@go1.25.7	1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.26.10
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.26.10
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.26.10

Open the chart page →

4,410

ccm-linodelinode-cloud-controller-manager

0.9.11

1 of 1 See more

ccm-linode linode-cloud-controller-manager 0.9.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
linode/linode-cloud-controller-manager :v0.9.11	4bd0ed3e9ebd	stdlib@go1.27.2	1.26.10

Open the chart page →

school-botlinuxoid69

0.1.0

1 of 1 See more

school-bot linuxoid69 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/linuxoid69/school-bot :v0.3.3	c8872438f1e0	stdlib@go1.23.3	1.26.10

Open the chart page →

1,197

liqo-upgrade-operatorliqo-upgrade-operator

0.1.0

1 of 1 See more

liqo-upgrade-operator liqo-upgrade-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kazem26/liqo-upgrade-operator :v0.1	268b7c6a59dd	stdlib@go1.24.13	1.26.10

Open the chart page →

809

listmonklistmonk-chart

2.0.1

2 of 2 See more

listmonk listmonk-chart 2.0.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :15	77cb52de60c9	stdlib@go1.24.6	1.26.10
listmonk/listmonk :v6.0.0	bf3903d54a46	stdlib@go1.24.1	1.26.10

Open the chart page →

3,830

litefunctionslitefunctions

0.1.1

14 of 19 See more

litefunctions litefunctions 0.1.1

14 of the 19 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ashupednekar535/litefunctions-ingestor :latest	cb293720e66e	stdlib@go1.27.2	1.26.10
ashupednekar535/litefunctions-operator :latest	80ad0954b9d9	stdlib@go1.24.13	1.26.10
ashupednekar535/litefunctions-portal :latest	460f010659fe	stdlib@go1.26.1	1.26.10
bitnami/kubectl :latest	999d5eb28f40	stdlib@go1.26.8	1.26.10
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.26.10
library/docker :28.3.3-dind	a56b3bdde893	stdlib@go1.24.5	1.26.10
library/nats :2.12.3-alpine	88fe8e0e09d6	stdlib@go1.25.5	1.26.10
library/postgres :16	ca0bd484cb98	stdlib@go1.24.6	1.26.10
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.26.10
ghcr.io/project-zot/zot :v2.1.14	4183bd731bcc	stdlib@go1.25.6	1.26.10
quay.io/jetstack/cert-manager-cainjector :v1.20.0	6a620381d995	stdlib@go1.26.1	1.26.10
quay.io/jetstack/cert-manager-controller :v1.20.0	b9009aa6b45b	stdlib@go1.26.1	1.26.10
quay.io/jetstack/cert-manager-startupapicheck :v1.20.0	54da63c9964d	stdlib@go1.26.1	1.26.10
quay.io/jetstack/cert-manager-webhook :v1.20.0	2133daae1f08	stdlib@go1.26.1	1.26.10

Open the chart page →

20,501

pocketbase-halitesql

0.0.3

1 of 1 See more

pocketbase-ha litesql 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/litesql/pocketbase-ha :latest	80b42258bfe0	stdlib@go1.27.1	1.26.10

Open the chart page →

950

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	stdlib@go1.20.7	1.26.10

Open the chart page →

12,458

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	stdlib@go1.16.2	1.26.10

Open the chart page →

3,373

livekit-serverlivekit-server

1.9.0

1 of 1 See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.9.0	3602a85840d5	stdlib@go1.24.3	1.26.10

Open the chart page →

2,151

pagesliviu884422-pages

1.0.0

1 of 3 See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.10

Open the chart page →

21,677

llmarinerllmariner

1.53.1

19 of 21 See more

llmariner llmariner 1.53.1

19 of the 21 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dexidp/dex :v2.39.1-distroless	43655afd1a8f	stdlib@go1.21.6	1.26.10
public.ecr.aws/cloudnatix/llmariner/api-usage-cleaner :1.16.0	d47f43484055	stdlib@go1.23.12	1.26.10
public.ecr.aws/cloudnatix/llmariner/api-usage-server :1.16.0	8f9c32b866b0	stdlib@go1.23.12	1.26.10
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	stdlib@go1.24.5	1.26.10
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-agent :0.10.2	6769c2275a43	stdlib@go1.23.11	1.26.10
public.ecr.aws/cloudnatix/llmariner/cluster-monitor-server :0.10.2	2d28f9e3eab4	stdlib@go1.23.11	1.26.10
public.ecr.aws/cloudnatix/llmariner/database-creator :1.17.0	97065ced2942	stdlib@go1.23.11	1.26.10
public.ecr.aws/cloudnatix/llmariner/file-manager-server :1.11.0	301216788e93	stdlib@go1.23.11	1.26.10
public.ecr.aws/cloudnatix/llmariner/inference-manager-engine :1.46.0	c46f109c3d0b	stdlib@go1.25.9	1.26.10
public.ecr.aws/cloudnatix/llmariner/inference-manager-server :1.45.0	90b890f800ab	stdlib@go1.23.12	1.26.10
public.ecr.aws/cloudnatix/llmariner/job-manager-dispatcher :1.27.0	582508903cb0	stdlib@go1.23.12	1.26.10
public.ecr.aws/cloudnatix/llmariner/job-manager-server :1.27.0	fe9de719f91e	stdlib@go1.23.12	1.26.10
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	stdlib@go1.24.0	1.26.10
public.ecr.aws/cloudnatix/llmariner/model-manager-server :1.27.0	c057dcdd9ef3	stdlib@go1.23.12	1.26.10
public.ecr.aws/cloudnatix/llmariner/rbac-server :1.19.1	df1adeb86679	stdlib@go1.23.12	1.26.10
public.ecr.aws/cloudnatix/llmariner/session-manager-agent :1.9.0	b9f23db99051	stdlib@go1.23.11	1.26.10
public.ecr.aws/cloudnatix/llmariner/session-manager-server :1.9.0	f24ecd37fbaa	stdlib@go1.23.11	1.26.10
public.ecr.aws/cloudnatix/llmariner/user-manager-server :1.27.1	628a14449241	stdlib@go1.23.12	1.26.10
public.ecr.aws/cloudnatix/llmariner/vector-store-manager-server :1.7.0	f1f6b884b325	stdlib@go1.23.11	1.26.10

Open the chart page →

25,799

llm-dllm-d

1.0.23

1 of 2 See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	stdlib@go1.24.3	1.26.10

Open the chart page →

3,363

home-assistantlmatfy

0.1.38

1 of 1 See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2026.7	5a531753cea9	rustls-webpki@0.103.13 stdlib@go1.25.6 webpki-root-certs@1.0.7	0.103.16 1.26.10 1.0.10

Open the chart page →

4,282

centcomloafoe

0.97.0

1 of 1 See more

centcom loafoe 0.97.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/centcom :v0.323.0	1b74ef4e8b6e	ca-certificates@20260909-r2 stdlib@go1.26.1	20260909-r3 1.26.10

Open the chart page →

707

go-ocpp-serverloafoe

0.2.1

1 of 1 See more

go-ocpp-server loafoe 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/go-ocpp-server :v0.2.1	45bb960674ab	ca-certificates@20260413-r0 stdlib@go1.21.13	20260909-r3 1.26.10

Open the chart page →

845

mcp-notifierloafoe

0.2.0

1 of 1 See more

mcp-notifier loafoe 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/mcp-notifier :v0.2.0	ea958b832415	ca-certificates@20260611-r1 stdlib@go1.26.4	20260909-r3 1.26.10

Open the chart page →

295

mt-mcp-grafanaloafoe

0.10.0

2 of 2 See more

mt-mcp-grafana loafoe 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/mcp-grafana :0.14.0	42f541f22063	stdlib@go1.26.3	1.26.10
ghcr.io/loafoe/mt-mcp-grafana :v0.1.1	2332d9b47475	ca-certificates@20260413-r0 stdlib@go1.26.2	20260909-r3 1.26.10

Open the chart page →

2,870

mt-mcp-proxyloafoe

0.4.2

2 of 2 See more

mt-mcp-proxy loafoe 0.4.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/github/github-mcp-server :latest	ffced0d76e77	stdlib@go1.27.1	1.26.10
ghcr.io/loafoe/mt-mcp-proxy :v0.3.0	881e7d8097bc	ca-certificates@20260611-r1 stdlib@go1.26.4	20260909-r3 1.26.10

Open the chart page →

1,081

picoclawloafoe

0.1.2

1 of 2 See more

picoclaw loafoe 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/picoclaw :v0.0.19	42e1b6862913	ca-certificates@20260413-r0 stdlib@go1.26.2	20260909-r3 1.26.10

Open the chart page →

900

solgateloafoe

0.0.12

1 of 1 See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	stdlib@go1.21.0	1.26.10

Open the chart page →

2,909

local-path-exporterlocal-path-exporter

0.2.3

1 of 1 See more

local-path-exporter local-path-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/tmusial99/local-path-exporter :1.1.0	82476692c680	stdlib@go1.26.4	1.26.10

Open the chart page →

287

weather-app-chartlocal-weatherapp

0.1.0

2 of 4 See more

weather-app-chart local-weatherapp 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :8.0.36-debian-11-r3	8aad73aa0c6d	stdlib@go1.21.6	1.26.10
youssef11gaber10/deployment-auth-go :latest	6597b26959d2	stdlib@go1.26.1	1.26.10

Open the chart page →

8,389

ocatiecataloguslocatiecatalogus

1.0.0

1 of 3 See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/ocatiecatalogus-php :latest	c22764cbfa97	stdlib@go1.13.10	1.26.10

Open the chart page →

9,595

locust-pluginslocust-plugins

0.0.4

2 of 3 See more

locust-plugins locust-plugins 0.0.4

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
sky5367/locust-plugins-grafana :latest	d51bf68d4b26	stdlib@go1.21.8	1.26.10
sky5367/locust-plugins-timescale :latest	d3150f201471	stdlib@go1.18.7	1.26.10

Open the chart page →

9,364

uptime-kumaloeken-at-home

2.3.2

1 of 1 See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	stdlib@go1.20.5	1.26.10

Open the chart page →

42,784

central-hostpath-mapperloft

0.2.9

1 of 1 See more

central-hostpath-mapper loft 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/central-hostpath-mapper :0.2.9	fa6dba122171	stdlib@go1.23.2	1.26.10

Open the chart page →

1,515

devpod-proloft

0.0.0-ci.4-do-not-use

1 of 1 See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	stdlib@go1.20.10	1.26.10

Open the chart page →

4,117

devspace-cloudloft

0.3.3

2 of 8 See more

devspace-cloud loft 0.3.3

2 of the 8 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
devspacecloud/manager :0.3.3	49c397413f7b	stdlib@go1.13.8	1.26.10
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.26.10

Open the chart page →

12,424

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	stdlib@go1.15.7	1.26.10

Open the chart page →

4,404

license-serverloft

0.6.1

1 of 1 See more

license-server loft 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/license-server :0.6.1	d6033f3c8500	stdlib@go1.24.3	1.26.10

Open the chart page →

1,203

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	stdlib@go1.18.10	1.26.10

Open the chart page →

3,418

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	stdlib@go1.16.6	1.26.10

Open the chart page →

4,318

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	stdlib@go1.22.0	1.26.10

Open the chart page →

4,117

vcluster-headloft

0.0.0-035ec6e

1 of 2 See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/kubernetes :v1.35.0	90097a08b87c	stdlib@go1.24.11	1.26.10

Open the chart page →

1,920

vcluster-hpmloft

0.2.7

1 of 1 See more

vcluster-hpm loft 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-hpm :0.2.7	f65f6810ea23	stdlib@go1.24.2	1.26.10

Open the chart page →

1,407

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	stdlib@go1.19.4	1.26.10
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	stdlib@go1.18.10	1.26.10

Open the chart page →

7,078

vcluster-pro-eksloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-eks loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	stdlib@go1.18.10	1.26.10
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	stdlib@go1.16.15	1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.26.10

Open the chart page →

9,443

vcluster-pro-k0sloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	stdlib@go1.19.4	1.26.10
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	stdlib@go1.18.10	1.26.10

Open the chart page →

7,797

vcluster-pro-k8sloft

0.0.0-ci-run.10

4 of 4 See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	stdlib@go1.18.10	1.26.10
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	stdlib@go1.16.15	1.26.10
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	stdlib@go1.19.5	1.26.10
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	stdlib@go1.19.5	1.26.10

Open the chart page →

12,141

virtualclusterloft

0.0.28

1 of 2 See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
loftsh/virtual-cluster :0.0.28	023b13bf5898	stdlib@go1.15.11	1.26.10

Open the chart page →

4,228

vnode-runtimeloft

0.3.3

1 of 1 See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	stdlib@go1.24.2	1.26.10

Open the chart page →

3,366

filebeatlog10x-elastic-helm-charts

1.5.1

1 of 1 See more

filebeat log10x-elastic-helm-charts 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
log10x/filebeat-10x :1.1.39-native	7d6a79dacd58	stdlib@go1.18.7	1.26.10

Open the chart page →

8,209

loggingcomponentloggingcomponent

1.0.0

1 of 3 See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/loggingcomponent-php :latest	834b8e1af290	stdlib@go1.13.10	1.26.10

Open the chart page →

9,570

nightingalelogic3579

0.3.1

4 of 6 See more

nightingale logic3579 0.3.1

4 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	stdlib@go1.25.14	1.26.10
flashcatcloud/nightingale :8.5.1	421acb36181b	stdlib@go1.24.0	1.26.10
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.26.10
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	stdlib@go1.22.6	1.26.10

Open the chart page →

11,986

logicservicelogicservice

1.0.0

1 of 4 See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/logicservice-php :latest	72aae2080595	stdlib@go1.13.10	1.26.10

Open the chart page →

9,561

0.1.0

1 of 2 See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
aboogie/login_test_backend :new	9c41a4483ac8	stdlib@go1.22.5	1.26.10

Open the chart page →

73,453

apica-ascentlogiqai

2.0.4

5 of 19 See more

apica-ascent logiqai 2.0.4

5 of the 19 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
logiqai/flash :v3.10.2	65b996bc7bdc	stdlib@go1.21.13	1.26.10
logiqai/flash-discovery :v2.0.3	f5b551bca98e	stdlib@go1.18.9	1.26.10
logiqai/logiqctl :2.0.4	798306811f2d	stdlib@go1.13.7	1.26.10
logiqai/tracing :v1.35.2-lq1-c	3e149f6781b8	stdlib@go1.18.2	1.26.10
logiqai/tracing :v1.35.2-lq1-q	4a746ff04d6a	stdlib@go1.18.2	1.26.10

Open the chart page →

87,077

logtidelogtide

2.1.14

1 of 4 See more

logtide logtide 2.1.14

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg15	6343bdc87ca1	stdlib@go1.24.6	1.26.10

Open the chart page →

4,200

loki-proxyloki-proxy

0.4.1

1 of 1 See more

loki-proxy loki-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	ca-certificates@20250619-r5 stdlib@go1.24.6	20260909-r3 1.26.10

Open the chart page →

1,338

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/jetstack/cert-manager-controller :v1.21.2	70f532fd9cfd	stdlib@go1.26.8	1.26.10	7
quay.io/jetstack/cert-manager-startupapicheck :v1.21.2	46e75b686635	stdlib@go1.26.8	1.26.10	7
quay.io/jetstack/cert-manager-webhook :v1.21.2	a60e2dac46db	stdlib@go1.26.8	1.26.10	7
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.26.10	7
quay.io/prometheus-operator/prometheus-operator :v0.94.1	7c88d4e7bae6	stdlib@go1.26.8	1.26.10	7
quay.io/thanos/thanos :v0.37.2	4ec6df40fdb9	stdlib@go1.23.4	1.26.10	7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	stdlib@go1.23.3	1.26.10	7
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	stdlib@go1.21.8	1.26.10	7
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	stdlib@go1.16.2	1.26.10	7
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	stdlib@go1.24.2	1.26.10	7
registry.k8s.io/sig-storage/csi-snapshotter :v8.6.0	42af0929bcd6	stdlib@go1.26.3	1.26.10	7
bitnami/kubectl :latest	599e67d36ff5	stdlib@go1.26.9	1.26.10	6
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.26.10	6
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	stdlib@go1.25.0	1.26.10	6
bitnami/mariadb :latest	2c14d1572dd0	stdlib@go1.26.9	1.26.10	6
clastix/kubectl :v1.31	22918a06c253	stdlib@go1.22.5	1.26.10	6
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	stdlib@go1.16	1.26.10	6
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	stdlib@go1.16	1.26.10	6
grafana/grafana :latest	b28bae15e219	stdlib@go1.26.7	1.26.10	6
grafana/grafana :7.0.3	d72946c8e5d5	stdlib@go1.14.3	1.26.10	6
grafana/grafana :latest	dbbc38ea2110	stdlib@go1.26.9	1.26.10	6
grafana/loki :2.6.1	1ee60f980950	stdlib@go1.17.9	1.26.10	6
library/mariadb :10 :10.11	0d0945c57f75	stdlib@go1.24.6	1.26.10	6
library/postgres :16.15-alpine :16-alpine	deb28ee47118	stdlib@go1.24.6	1.26.10	6
library/registry :2 :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.26.10	6
postgis/postgis :17-3.5 :latest	01a6a70e41e6	stdlib@go1.18.2	1.26.10	6
prom/alertmanager :v0.20.0	7e4e9f7a0954	stdlib@go1.13.5	1.26.10	6
prom/memcached-exporter :v0.15.4	b6763ecb3c47	stdlib@go1.25.3	1.26.10	6
traefik/whoami :latest :v1.12.0	c4717a8d1f01	stdlib@go1.26.5	1.26.10	6
victoriametrics/operator :v0.75.0	78da26b41a81	stdlib@go1.27.1	1.26.10	6
ghcr.io/quenchworks/images/prometheus	d57cf70aab4c	ca-certificates@20260909-r2 stdlib@go1.26.9	20260909-r3 1.26.10	6
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	stdlib@go1.18.2	1.26.10	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.26.10	6
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	stdlib@go1.16.6	1.26.10	6
quay.io/devtron/kubectl :latest	2ad610626658	stdlib@go1.18.5	1.26.10	6
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	stdlib@go1.19.9	1.26.10	6
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.26.10	6
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	stdlib@go1.17.6	1.26.10	6
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	stdlib@go1.13.3	1.26.10	6
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	stdlib@go1.13.4	1.26.10	6
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	stdlib@go1.14.4	1.26.10	6
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	stdlib@go1.25.3	1.26.10	6
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.1	06b52bd4dbe3	stdlib@go1.26.8	1.26.10	6
quay.io/prometheus/pushgateway :v1.11.4	91a56b89b97d	stdlib@go1.27.1	1.26.10	6
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	stdlib@go1.26.1	1.26.10	6
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.9	01038e7de14b	stdlib@go1.26.1	1.26.10	6
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	stdlib@go1.19.4	1.26.10	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.13.0	639a1e2da549	stdlib@go1.22.5	1.26.10	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	stdlib@go1.26.4	1.26.10	6
registry.k8s.io/sig-storage/csi-attacher :v4.12.0	b9dc9a714a48	stdlib@go1.26.3	1.26.10	6