CVE-2026-111943
UnscoredAdvisory
Published 19 Oct 2026In the index since 21 Oct 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 5,575
- of 18,219 indexed, latest versions
- Container images
- 6,494
- deployed by those charts
- Fix available
- 5 of 5
- affected packages
Distrust compromised intermediate certificates in crypto/x509
Carried by container images the latest versions of 5,575 of 18,219 indexed charts deploy, on 6,494 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| stdlibgolang | go1.13, go1.13.1, go1.13.3, go1.13.4+211 more | 1.26.10 | 6,259 |
| ca-certificatesapk | 20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more | 20260909-r3 | 410 |
| rustls-webpkicargo | 0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more | 0.103.16 | 98 |
| webpki-root-certscargo | 0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more | 1.0.10 | 66 |
| webpki-rootscargo | 0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more | 0.26.11 | 12 |
- OSV records
- CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
- Also known as
- CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
- Trending
- Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →
Charts affected
5,575 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| pacto-operatorpacto-operatorOfficialVerified publisher | 6.0.1 | 1 of 1See more | 31 |
| ipfs-clusterparadeum-teamVerified publisher | 0.0.19 | 2 of 2See more | 5,826 |
| part-dbpart-dbVerified publisher | 0.1.2 | 1 of 1See more | 3,462 |
| permifypermifyVerified publisher | 0.5.0 | 1 of 1See more | 1,626 |
| persespersesOfficialVerified publisher | 0.23.3 | 1 of 1See more | 490 |
| platzioplatz-ioVerified publisher | 0.6.5 | 1 of 2See more | 3,795 |
| plecopleco | 0.24.0 | 1 of 1See more | 2,099 |
| ipmi-exporterpnnl-miscscripts | 0.1.15 | 1 of 1See more | 4,430 |
| pomeriumpomerium | 34.0.1 | 1 of 1See more | 2,946 |
| prometheus-memcached-exporterprometheus-communityVerified publisher | 0.6.0 | 1 of 1See more | 280 |
| prometheus-pgbouncer-exporterprometheus-communityVerified publisher | 0.10.1 | 1 of 1See more | 613 |
| prometheus-systemd-exporterprometheus-communityVerified publisher | 0.5.2 | 1 of 1See more | 1,293 |
| prometheus-yet-another-cloudwatch-exporterprometheus-communityVerified publisher | 0.48.0 | 1 of 1See more | 160 |
| kube-prometheus-stackprometheus-worawutchan | 12.8.0 | 4 of 6See more | 17,413 |
| qgis-serverqgis-serverVerified publisher | 0.1.10 | 1 of 3See more | 6,392 |
| nfs-server-provisionerraphaelVerified publisher | 1.3.0 | 1 of 1See more | 4,008 |
| repoflowrepoflow-helm-public | 0.9.1 | 1 of 8See more | 14,790 |
| wordpress-hardenedriotkit-org | 2.0.0 | 2 of 2See more | 8,699 |
| backrestrobertobochetVerified publisher | 0.7.0 | 1 of 1See more | 1,364 |
| hedgedocrobertobochetVerified publisher | 1.4.0 | 1 of 1See more | 2,810 |
| supabaserock8sVerified publisher | 0.0.6 | 1 of 1See more | 715 |
| rqliterqliteOfficialVerified publisher | 2.0.0 | 1 of 1See more | 1,833 |
| qbittorrent-vpnrtomik-helm-chartsVerified publisher | 0.0.2 | 1 of 2See more | 1,804 |
| sabliersablier-helm-chartsOfficialVerified publisher | 1.8.1 | 1 of 1See more | 502 |
| satisfactory-serversatisfactoryVerified publisher | 0.1.6 | 1 of 1See more | 4,651 |
| seaweedfs-csi-driverseaweedfs-csi-driver | 0.2.40 | 7 of 7See more | 9,273 |
| seldon-core-operatorseldon | 1.19.0 | 1 of 1See more | 1,454 |
| bentoself-hosters-by-nightVerified publisher | 0.9.1 | 1 of 1See more | 1,811 |
| lldapself-hosters-by-nightVerified publisher | 0.5.2 | 2 of 2See more | 5,005 |
| appshini4iVerified publisher | 0.4.0 | 1 of 1See more | 1,128 |
| skypilotskypilotOfficialVerified publisher | 0.14.1 | 3 of 3See more | 6,484 |
| corednssoftizyVerified publisher | 0.2.0 | 1 of 1See more | 2,581 |
| knative-servingsoftonic | 3.0.0 | 5 of 5See more | 19,047 |
| forecastlestakaterVerified publisher | 2.1.3 | 1 of 1See more | 1,141 |
| ingressmonitorcontrollerstakaterVerified publisher | 2.2.13 | 1 of 1See more | 1,028 |
| tigera-operatorstevehipwellVerified publisher | 2.15.0 | 1 of 1See more | 231 |
| vertical-pod-autoscalerstevehipwell-helm-charts-vertical-pod-autoscalerVerified publisher | 1.12.1 | 3 of 3See more | 1,137 |
| sn-platformstreamnative | 1.11.46 | 6 of 9See more | 76,871 |
| stunnerstunner | 1.2.1 | 2 of 2See more | 971 |
| pocketbasetechwolf12Verified publisher | 0.29.3 | 1 of 1See more | 2,125 |
| pretixtechwolf12Verified publisher | 2026.8.0 | 1 of 3See more | 10,080 |
| mealieth-chartsVerified publisher | 0.5.1 | 1 of 1See more | 4,889 |
| thingsboard-clusterthingsboard-cluster-bettaVerified publisher | 0.2.26 | 3 of 6See more | 18,149 |
| feedbacksystemthm-mni-iiVerified publisher | 0.48.3 | 11 of 14See more | 30,407 |
| topaztopaz | 0.2.5 | 1 of 1See more | 2,401 |
| maeshtraefikOfficialVerified publisher | 2.1.2 | 1 of 7See more | 6,098 |
| traefik-meshtraefikOfficialVerified publisher | 4.1.1 | 3 of 7See more | 13,393 |
| ttl-controllerttl-controllerVerified publisher | 1.9.1 | 1 of 1See more | 238 |
| k8s-ttl-controllertwin | 0.4.0 | 1 of 1See more | 1,026 |
| argocdtwomartensVerified publisher | 0.1.1 | 2 of 3See more | 12,870 |
Container images carrying it
6,494 by charts deploying them
A fixed version is listed for 5 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 95b58a0c5f09 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | c88d1b0ced8b | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 4db366cec419 | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | da8f102c4faa | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | f2b65a8c303e | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | 6903ae92d267 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | aff324663cee | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 7ac158b6f682 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | bfc9db97a1e7 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 43ff4a2514f0 | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | 5dade160df8a | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | 7b5bfb2ad386 | ca-certificates rustls-webpki webpki-roots | 20260909-r3 0.103.16 0.26.11 | 2 |
| ghcr.io/ | 358f27b2403d | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 07c0a9a91f3a | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | 785a8bf92539 | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | df5db8ea6f85 | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | 032ed743c4a0 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 0d03762a6e7f | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 249897c2f110 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | d0ba5c16290c | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | 7781137b3a43 | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | 87479f941040 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | dcd84e3ef9e6 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 4871175e5f7e | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | 08ab8f04e193 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | c9ec047729db | ca-certificates rustls-webpki | 20260909-r3 0.103.16 | 2 |
| ghcr.io/ | d9e4ce585357 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 35a60f0b0a42 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 068fee395774 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | a8aa365b374d | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | 904d2b53c5b2 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | e940e0f7ada0 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 790183b3dfa0 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 97ab1ab254f0 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 69b3e2c3c576 | ca-certificates stdlib | 20260909-r3 1.26.10 | 2 |
| ghcr.io/ | 00b694656224 | ca-certificates | 20260909-r3 | 2 |
| ghcr.io/ | 9236fb4f559b | stdlib | 1.26.10 | 2 |
| ghcr.io/ | 6c5efe150958 | stdlib | 1.26.10 | 2 |
| ghcr.io/ | 3f7cc45fd20b | stdlib | 1.26.10 | 2 |
| ghcr.io/ | fc2d40f4904c | stdlib | 1.26.10 | 2 |
| ghcr.io/ | 2de0226c5f82 | stdlib | 1.26.10 | 2 |
| ghcr.io/ | 100d793d68d0 | stdlib | 1.26.10 | 2 |
| ghcr.io/ | 4d64dac937e2 | stdlib | 1.26.10 | 2 |
| ghcr.io/ | 228f7f44594a | stdlib | 1.26.10 | 2 |
| ghcr.io/ | bb95f13c2b4e | stdlib | 1.26.10 | 2 |
| ghcr.io/ | 9dfe4f0caff0 | stdlib | 1.26.10 | 2 |
| ghcr.io/ | 1c92e5998ad3 | stdlib | 1.26.10 | 2 |
| ghcr.io/ | 19e418e9d7f2 | stdlib | 1.26.10 | 2 |
| ghcr.io/ | 4082f30d3e0d | stdlib | 1.26.10 | 2 |
| ghcr.io/ | ba6f0b4cf6c8 | stdlib | 1.26.10 | 2 |