StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,728
of 18,208 indexed, latest versions
Container images
6,681
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,728 of 18,208 indexed charts deploy, on 6,681 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.106,438
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+17 more20260909-r3417
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16103
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1070
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1113
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,728 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackprometheus-communityOfficialVerified publisher92.11.05 of 6See more

kube-prometheus-stack prometheus-community 92.11.0

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.4-distrolessae3d3add290a
stdlib@go1.26.7
1.26.10
ghcr.io/jkroepke/kube-webhook-certgen:1.11.0778d97dc3986
stdlib@go1.27.1
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
stdlib@go1.26.8
1.26.10
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

1,665
cert-managercert-managerOfficialVerified publisher1.21.24 of 4See more

cert-manager cert-manager 1.21.2

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.21.2c85268c64f2e
stdlib@go1.26.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
stdlib@go1.26.8
1.26.10
quay.io/jetstack/cert-manager-startupapicheck:v1.21.246e75b686635
stdlib@go1.26.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
stdlib@go1.26.8
1.26.10

Open the chart page →

938
argo-cdargoOfficialVerified publisher10.10.52 of 3See more

argo-cd argo 10.10.5

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
stdlib@go1.27.1
1.26.10
quay.io/argoproj/argocd:v3.5.513db7b10db23
stdlib@go1.26.2
1.26.10

Open the chart page →

2,851
ingress-nginxingress-nginx4.15.12 of 2See more

ingress-nginx ingress-nginx 4.15.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
stdlib@go1.26.1
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.901038e7de14b
stdlib@go1.26.1
1.26.10

Open the chart page →

2,422
prometheusprometheus-communityOfficialVerified publisher29.37.06 of 6See more

prometheus prometheus-community 29.37.0

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.10
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
quay.io/prometheus/prometheus:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.10
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

1,781
redisbitnamiVerified publisher28.3.11 of 1See more

redis bitnami 28.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/redis:latestf4797b37502e
stdlib@go1.26.8
1.26.10

Open the chart page →

160
traefiktraefikOfficialVerified publisher42.1.01 of 1See more

traefik traefik 42.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/traefik:v3.7.150f6150202bc1
stdlib@go1.26.9
1.26.10

Open the chart page →

21
kubernetes-dashboardk8s-dashboard7.14.04 of 5See more

kubernetes-dashboard k8s-dashboard 7.14.0

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.14.096a702cfd339
stdlib@go1.23.12
1.26.10
kubernetesui/dashboard-auth:1.4.053e9917898bf
stdlib@go1.23.12
1.26.10
kubernetesui/dashboard-metrics-scraper:1.2.25154b68252bd
stdlib@go1.23.4
1.26.10
kubernetesui/dashboard-web:1.7.0cc7c31bd2d84
stdlib@go1.23.9
1.26.10

Open the chart page →

5,222
lokigrafana7.3.03 of 6See more

loki grafana 7.3.0

3 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/loki:3.6.1144148ad243c0
stdlib@go1.26.2
1.26.10
grafana/loki-canary:3.6.121e9bfcff3867
stdlib@go1.26.4
1.26.10
prom/memcached-exporter:v0.15.4b6763ecb3c47
stdlib@go1.25.3
1.26.10

Open the chart page →

5,568
metrics-servermetrics-serverVerified publisher3.14.01 of 1See more

metrics-server metrics-server 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
stdlib@go1.26.4
1.26.10

Open the chart page →

498
vaulthashicorpVerified publisher0.34.12 of 2See more

vault hashicorp 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
stdlib@go1.26.5
1.26.10
hashicorp/vault-k8s:1.7.655e27b080c9b
stdlib@go1.26.5
1.26.10

Open the chart page →

1,260
gitlabgitlabVerified publisher10.5.018 of 21See more

gitlab gitlab 10.5.0

18 of the 21 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
envoyproxy/gateway:v1.9.29d67017c442a
stdlib@go1.26.8
1.26.10
quay.io/jetstack/cert-manager-cainjector:v1.21.2c85268c64f2e
stdlib@go1.26.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.21.270f532fd9cfd
stdlib@go1.26.8
1.26.10
quay.io/jetstack/cert-manager-startupapicheck:v1.21.246e75b686635
stdlib@go1.26.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.21.2a60e2dac46db
stdlib@go1.26.8
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.0142a1f11df8d
stdlib@go1.26.8
1.26.10
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
stdlib@go1.26.6
1.26.10
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.5.074a4c2f23e47
stdlib@go1.27.1
1.26.10
registry.gitlab.com/gitlab-org/build/cng/cfssl-self-sign:v19.5.03dd240f7ff07
stdlib@go1.22.0
1.26.10
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.5.0595c4f2b1b7b
stdlib@go1.27.1
1.26.10
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.5.09584ce75ec08
stdlib@go1.27.1
1.26.10
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlab4fed422a7637
stdlib@go1.27.1
1.26.10
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
stdlib@go1.26.7
1.26.10
registry.gitlab.com/gitlab-org/build/cng/gitlab-kas:v19.5.0dd8e02add8cf
stdlib@go1.27.1
1.26.10
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.0723f668ceef8
stdlib@go1.27.1
1.26.10
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.02f58e4625ab7
stdlib@go1.27.1
1.26.10
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.5.0b868b93e013d
stdlib@go1.26.8
1.26.10
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.4.0a4838319e55b
stdlib@go1.26.5
1.26.10

Open the chart page →

20,354
harborharborOfficialVerified publisher1.19.45 of 8See more

harbor harbor 1.19.4

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.47d2ba5304a72
stdlib@go1.26.7
1.26.10
goharbor/harbor-jobservice:v2.15.4f143578ef30e
stdlib@go1.26.7
1.26.10
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
stdlib@go1.26.7
1.26.10
goharbor/registry-photon:v2.15.4dc0cb388a644
stdlib@go1.26.7
1.26.10
goharbor/trivy-adapter-photon:v2.15.4813ca81b4a4e
stdlib@go1.26.7
1.26.10

Open the chart page →

1,730
jenkinsjenkinsciOfficialVerified publisher5.9.721 of 2See more

jenkins jenkinsci 5.9.72

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jenkins/jenkins:2.580.1-jdk2542fc298cdafa
stdlib@go1.27.0
1.26.10

Open the chart page →

2,223
external-secretsexternal-secrets-operatorVerified publisher2.13.01 of 1See more

external-secrets external-secrets-operator 2.13.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.13.0f799d87a6a95
stdlib@go1.27.2
1.26.10

Open the chart page →

40
external-dnsexternal-dnsVerified publisher1.23.01 of 1See more

external-dns external-dns 1.23.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/external-dns/external-dns:v0.23.01854499e2b08
stdlib@go1.27.0
1.26.10

Open the chart page →

231
longhornlonghorn1.13.03 of 3See more

longhorn longhorn 1.13.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.13.07372f3c59239
stdlib@go1.26.8
1.26.10
longhornio/longhorn-share-manager:v1.13.053950f78b7af
stdlib@go1.26.8
1.26.10
longhornio/longhorn-ui:v1.13.0f22fb0254ae5
stdlib@go1.26.8
1.26.10

Open the chart page →

767
gitlab-runnergitlabVerified publisher0.94.01 of 1See more

gitlab-runner gitlab 0.94.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.5.0b7dead3b57cd
stdlib@go1.26.5
1.26.10

Open the chart page →

550
ciliumciliumOfficialVerified publisher1.20.33 of 3See more

cilium cilium 1.20.3

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.20.395cfa5c2427c
stdlib@go1.26.9
1.26.10
quay.io/cilium/cilium-envoy:v1.38.6-1791537840-00e749f11f69334c625e53fc1ce2fc6c7f34a51fd6c8c0c91954
stdlib@go1.27.2
1.26.10
quay.io/cilium/operator-generic:v1.20.3efdd8d89d6d8
stdlib@go1.26.9
1.26.10

Open the chart page →

1,313
airflowapache-airflowOfficialVerified publisher1.22.01 of 4See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/statsd-exporter:v0.30.0378cb79c4ac7
stdlib@go1.26.3
1.26.10

Open the chart page →

3,570
mongodbbitnamiVerified publisher20.0.51 of 1See more

mongodb bitnami 20.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mongodb:latest34c2495c56d9
stdlib@go1.26.9
1.26.10

Open the chart page →

231
velerovmware-tanzu12.2.11 of 1See more

velero vmware-tanzu 12.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
stdlib@go1.25.11
1.26.10

Open the chart page →

1,553
metallbmetallbVerified publisher0.16.13 of 4See more

metallb metallb 0.16.1

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.16.1f51ab515de9c
stdlib@go1.25.9
1.26.10
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
stdlib@go1.25.8
1.26.10
quay.io/metallb/speaker:v0.16.116561e96531e
stdlib@go1.25.9
1.26.10

Open the chart page →

3,613
rancherrancher-stable2.15.22 of 2See more

rancher rancher-stable 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.20c3d8e570255
stdlib@go1.26.4
1.26.10
rancher/shell:v0.8.21eeed72d4eda
stdlib@go1.26.8
1.26.10

Open the chart page →

2,745
cloudnative-pgcloudnative-pgVerified publisher0.29.11 of 1See more

cloudnative-pg cloudnative-pg 0.29.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.30.1923c267ec296
stdlib@go1.27.1
1.26.10

Open the chart page →

227
kyvernokyvernoOfficialVerified publisher3.9.11 of 7See more

kyverno kyverno 3.9.1

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kyverno/readiness-checker:v1.19.131bb42ce7f5b
stdlib@go1.26.6
1.26.10

Open the chart page →

261
argo-workflowsargoOfficialVerified publisher2.0.133 of 3See more

argo-workflows argo 2.0.13

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-workflows-crdinstaller:v4.1.593534a0d0ba3
stdlib@go1.26.5
1.26.10
quay.io/argoproj/argocli:v4.1.5e0824b55297b
stdlib@go1.26.5
1.26.10
quay.io/argoproj/workflow-controller:v4.1.5328307c9436f
stdlib@go1.26.5
1.26.10

Open the chart page →

1,019
giteagiteaOfficialVerified publisher12.7.02 of 4See more

gitea gitea 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.26.10
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
stdlib@go1.24.6
1.26.10

Open the chart page →

10,422
oauth2-proxyoauth2-proxyOfficialVerified publisher10.7.11 of 1See more

oauth2-proxy oauth2-proxy 10.7.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.15.58498b0d0ef0a
stdlib@go1.26.8
1.26.10

Open the chart page →

231
nginxbitnamiVerified publisher25.2.51 of 1See more

nginx bitnami 25.2.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/nginx:latestfb69e7a082a5
stdlib@go1.26.9
1.26.10

Open the chart page →

16
wordpressbitnamiVerified publisher34.2.02 of 2See more

wordpress bitnami 34.2.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mariadb:latest2c14d1572dd0
stdlib@go1.26.9
1.26.10
bitnami/wordpress:latest0e7d00a7d782
stdlib@go1.26.9
1.26.10

Open the chart page →

448
authentikgoauthentikOfficialVerified publisher2026.8.41 of 1See more

authentik goauthentik 2026.8.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.4e7226ae116da
rustls-webpki@0.103.13
webpki-root-certs@1.0.8
0.103.16
1.0.10

Open the chart page →

1,374
sealed-secretsbitnami-labsVerified publisher2.18.61 of 1See more

sealed-secrets bitnami-labs 2.18.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/sealed-secrets-controller:0.37.03fe0103896b8
stdlib@go1.26.3
1.26.10

Open the chart page →

711
kedakedacore2.21.03 of 3See more

keda kedacore 2.21.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.21.081fe6547ce8d
stdlib@go1.26.8
1.26.10
ghcr.io/kedacore/keda-admission-webhooks:2.21.0e1969628cca6
stdlib@go1.26.8
1.26.10
ghcr.io/kedacore/keda-metrics-apiserver:2.21.0255375037fe5
stdlib@go1.26.8
1.26.10

Open the chart page →

693
nginx-ingressnginxVerified publisher2.8.01 of 1See more

nginx-ingress nginx 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nginx/nginx-ingress:5.7.0c603a5cbac85
stdlib@go1.27.2
1.26.10

Open the chart page →

1,207
nfs-subdir-external-provisionernfs-subdir-external-provisioner4.0.181 of 1See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.26.10

Open the chart page →

4,035
artifact-hubartifact-hubVerified publisher1.23.06 of 7See more

artifact-hub artifact-hub 1.23.0

6 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
stdlib@go1.25.7
1.26.10
artifacthub/db-migrator:v1.23.028c13565ac5c
stdlib@go1.26.4
1.26.10
artifacthub/hub:v1.23.07d3a91c539dc
stdlib@go1.26.4
1.26.10
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
artifacthub/scanner:v1.23.02d8365601f0e
stdlib@go1.25.7
1.26.10
artifacthub/tracker:v1.23.05368d21a6e5c
stdlib@go1.24.4
1.26.10

Open the chart page →

15,266
kube-state-metricsprometheus-communityVerified publisher8.6.01 of 1See more

kube-state-metrics prometheus-community 8.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

351
consulhashicorpVerified publisher2.0.42 of 2See more

consul hashicorp 2.0.4

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/consul:2.0.41c59f007df8e
stdlib@go1.26.7
1.26.10
hashicorp/consul-k8s-control-plane:2.0.49334d7f4bcf0
stdlib@go1.26.7
1.26.10

Open the chart page →

496
mariadbbitnamiVerified publisher28.1.11 of 1See more

mariadb bitnami 28.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mariadb:latest2c14d1572dd0
stdlib@go1.26.9
1.26.10

Open the chart page →

4
alloygrafana1.14.02 of 2See more

alloy grafana 1.14.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.21.09726bfba078d
stdlib@go1.27.2
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.0142a1f11df8d
stdlib@go1.26.8
1.26.10

Open the chart page →

784
prometheus-blackbox-exporterprometheus-communityOfficialVerified publisher11.20.01 of 1See more

prometheus-blackbox-exporter prometheus-community 11.20.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/blackbox-exporter:v0.29.09613f2884689
stdlib@go1.27.1
1.26.10

Open the chart page →

231
reloaderstakaterVerified publisher2.2.181 of 1See more

reloader stakater 2.2.18

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stakater/reloader:v1.4.22def2480040ad
stdlib@go1.26.8
1.26.10

Open the chart page →

238
argo-rolloutsargoOfficialVerified publisher2.43.81 of 1See more

argo-rollouts argo 2.43.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-rollouts:v1.10.1fbcc4cf0a29d
stdlib@go1.26.9
1.26.10

Open the chart page →

242
argo-cdargo-cd-oci10.10.52 of 3See more

argo-cd argo-cd-oci 10.10.5

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
stdlib@go1.27.1
1.26.10
quay.io/argoproj/argocd:v3.5.513db7b10db23
stdlib@go1.26.2
1.26.10

Open the chart page →

2,851
deschedulerdescheduler0.37.01 of 1See more

descheduler descheduler 0.37.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/descheduler/descheduler:v0.37.088deef34ff5c
stdlib@go1.26.0
1.26.10

Open the chart page →

642
jaegerjaegertracingOfficialVerified publisher4.16.11 of 1See more

jaeger jaegertracing 4.16.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.22.0836b967b5abc
stdlib@go1.27.1
1.26.10

Open the chart page →

269
jupyterhubjupyterhubOfficialVerified publisher4.4.42 of 7See more

jupyterhub jupyterhub 4.4.4

2 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-image-awaiter:4.4.40d5e5e04f508
stdlib@go1.23.12
1.26.10
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
stdlib@go1.23.10
1.26.10

Open the chart page →

8,687
mimir-distributedgrafana6.2.13 of 5See more

mimir-distributed grafana 6.2.1

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/mimir:3.2.192838f113ba5
stdlib@go1.26.7
1.26.10
grafana/rollout-operator:v0.38.132fe838b79dd
stdlib@go1.26.5
1.26.10
pgsty/silo:RELEASE.2026-09-03T13-18-01Zb616a0cf8cb2
stdlib@go1.27.1
1.26.10

Open the chart page →

3,238
headlampheadlampOfficialVerified publisher0.46.01 of 1See more

headlamp headlamp 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.46.08a0ef9752754
stdlib@go1.26.8
1.26.10

Open the chart page →

294

Container images carrying it

6,681 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.10
2
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.161.076ac4fa40512
stdlib@go1.27.2
1.26.10
2
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls-webpki@0.103.13
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
stdlib@go1.21.1
1.26.10
2
ghcr.io/projectcapsule/capsule:v0.14.6ac02588e65e8
ca-certificates@20260611-r1
stdlib@go1.26.4
20260909-r3
1.26.10
2
ghcr.io/projectcapsule/capsule-proxy:v0.15.20f91cf29ebc9
ca-certificates@20260909-r2
stdlib@go1.27.1
20260909-r3
1.26.10
2
ghcr.io/project-zot/zot:v2.1.2296cda11459ce
stdlib@go1.27.1
1.26.10
2
ghcr.io/quenchworks/images/akhq92bfdfe9ef61
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/argocd671b4c8b2922
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/argo-events63a9bb4521a6
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/argo-rolloutsf06459db15bb
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/argo-workflows24498f85eed1
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/busybox6955d15bba1a
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/cassandrabe9dcf2a1569
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/cilium-operator95b58a0c5f09
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/cloudnative-pgc88d1b0ced8b
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/configurable-http-proxy4db366cec419
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/coolify-realtimeda8f102c4faa
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/elasticsearchf2b65a8c303e
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/etcd6903ae92d267
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/external-dnsaff324663cee
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/fulcio7ac158b6f682
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/ingress-nginxbfc9db97a1e7
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/jupyterhub43ff4a2514f0
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/label-studio5dade160df8a
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/litellm7b5bfb2ad386
ca-certificates@20260909-r2
rustls-webpki@0.103.15
webpki-roots@1.0.9
20260909-r3
0.103.16
0.26.11
2
ghcr.io/quenchworks/images/mariadb-operator358f27b2403d
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/mlflow07c0a9a91f3a
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/nessie785a8bf92539
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/nginxdf5db8ea6f85
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/oauth2-proxy032ed743c4a0
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/openbao0d03762a6e7f
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/opencost249897c2f110
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/opensearchd0ba5c16290c
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/pgbouncer7781137b3a43
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/polaris87479f941040
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/policy-reporterdcd84e3ef9e6
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/powerdns4871175e5f7e
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/pyroscope08ab8f04e193
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/qdrantc9ec047729db
ca-certificates@20260909-r2
rustls-webpki@0.103.15
20260909-r3
0.103.16
2
ghcr.io/quenchworks/images/rcloned9e4ce585357
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/rekor-tiles35a60f0b0a42
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/step-issuer068fee395774
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/timestamp-authoritya8aa365b374d
ca-certificates@20260909-r2
20260909-r3
2
ghcr.io/quenchworks/images/trino904d2b53c5b2
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/trivy-operatore940e0f7ada0
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/trust-manager790183b3dfa0
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/velero97ab1ab254f0
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/victoriametrics69b3e2c3c576
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
2
ghcr.io/quenchworks/images/zookeeper00b694656224
ca-certificates@20260909-r2
20260909-r3
2

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.