StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
yatai-image-builderbentomlVerified publisher3.0.441 of 1See more

yatai-image-builder bentoml 3.0.44

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-image-builder:3.0.4401d8538c4f48
stdlib@go1.24.13
1.26.10

Open the chart page →

940
aramid-indexerbiatec-repoVerified publisher3.9.04 of 5See more

aramid-indexer biatec-repo 3.9.0

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:1414bfab572eec
stdlib@go1.24.6
1.26.10
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
stdlib@go1.23.9
1.26.10
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
stdlib@go1.26.3
1.26.10
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
stdlib@go1.26.3
1.26.10

Open the chart page →

17,708
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
stdlib@go1.25.3
1.26.10

Open the chart page →

8,817
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
stdlib@go1.23.11
1.26.10

Open the chart page →

6,376
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
stdlib@go1.25.3
1.26.10

Open the chart page →

8,817
self-hostbitwarden2.5.210 of 11See more

self-host bitwarden 2.5.2

10 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bitwarden/admin:2026.9.2e82f37409cce
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/api:2026.9.272abdfb33c83
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/attachments:2026.9.2a3e09f120b64
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/events:2026.9.2818a1d907fc4
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/icons:2026.9.25e23eaab3976
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/identity:2026.9.263037d60f7d8
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/notifications:2026.9.2029f0d8a576f
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/sso:2026.9.23ef058df2039
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/web:2026.9.10d9b5f239cb8
stdlib@go1.26.5
1.26.10
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
stdlib@go1.23.1
1.26.10

Open the chart page →

8,511
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
stdlib@go1.21.6
1.26.10

Open the chart page →

3,609
bouinebouineVerified publisher0.5.291 of 1See more

bouine bouine 0.5.29

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bouinecache/bouine:0.5.29e89d0d720b94
stdlib@go1.27.2
1.26.10

Open the chart page →

5
boundaryboundary-chart0.3.121 of 1See more

boundary boundary-chart 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/boundary:0.15.3339b78b61750
stdlib@go1.21.8
1.26.10

Open the chart page →

2,310
syncthingbrandan-schmitz-helm-chartsVerified publisher2.1.01 of 1See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.1775c4aac4862
stdlib@go1.26.3
1.26.10

Open the chart page →

1,576
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
stdlib@go1.13.10
1.26.10

Open the chart page →

9,904
btrfs-nfs-csibtrfs-nfs-csi0.4.07 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
stdlib@go1.26.7
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
stdlib@go1.25.7
1.26.10

Open the chart page →

6,352
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
stdlib@go1.21.4
1.26.10

Open the chart page →

3,030
agentbuildkite0.6.41 of 1See more

agent buildkite 0.6.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
buildkite/agent:3.25.0aec38cfaae0e
stdlib@go1.14.7
1.26.10

Open the chart page →

3,970
buildkite-agent-metricsbuildkite-agent-metrics0.1.01 of 1See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
stdlib@go1.25.1
1.26.10

Open the chart page →

2,298
buildkit-fleetbuildkit-fleetVerified publisher0.1.21 of 1See more

buildkit-fleet buildkit-fleet 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
moby/buildkit:v0.33.0-rootless80b15f0735e8
stdlib@go1.26.8
1.26.10

Open the chart page →

1,402
static-httpserverbyjgVerified publisher0.3.11 of 1See more

static-httpserver byjg 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
byjg/static-httpserver:0.5.1bed29f3f45e8
stdlib@go1.26.8
1.26.10

Open the chart page →

173
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
rustls-webpki@0.103.13
stdlib@go1.26.5
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

2,926
argocd-source-trackercableship0.0.91 of 1See more

argocd-source-tracker cableship 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
stdlib@go1.24.2
1.26.10

Open the chart page →

2,325
chart-sentinelcableship0.0.121 of 1See more

chart-sentinel cableship 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
stdlib@go1.24.2
1.26.10

Open the chart page →

2,325
pgcagriekinVerified publisher2.5.01 of 2See more

pg cagriekin 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
stdlib@go1.24.4
1.26.10

Open the chart page →

2,263
pgvectorcagriekinVerified publisher2.5.02 of 3See more

pgvector cagriekin 2.5.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
stdlib@go1.24.4
1.26.10
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
stdlib@go1.24.6
1.26.10

Open the chart page →

4,701
camel-dashboard-operatorcamel-dashboardVerified publisher0.1.01 of 1See more

camel-dashboard-operator camel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/camel-tooling/camel-dashboard-operator:latest5e867d01846e
stdlib@go1.25.9
1.26.10

Open the chart page →

995
camel-monitor-operatorcamel-dashboardVerified publisher0.2.11 of 1See more

camel-monitor-operator camel-dashboard 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/camel-tooling/camel-monitor-operator:latestc644e786c5f9
stdlib@go1.27.2
1.26.10

Open the chart page →

5
blackbox-exportercamptocamp31.0.01 of 1See more

blackbox-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.25.0b04a9fef4fa0
stdlib@go1.22.2
1.26.10

Open the chart page →

1,540
camunda-operatorcamunda-operatorVerified publisher0.2.01 of 1See more

camunda-operator camunda-operator 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/konsole-is/camunda-operator:0.2.0c06f61af7b3c
stdlib@go1.27.2
1.26.10

Open the chart page →

75
capsulecapsuleOfficialVerified publisher0.15.02 of 2See more

capsule capsule 0.15.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/projectcapsule/capsule:v0.15.0ac2ffee25857
stdlib@go1.27.1
1.26.10

Open the chart page →

1,986
capsule-proxycapsule-proxyOfficialVerified publisher0.15.22 of 2See more

capsule-proxy capsule-proxy 0.15.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/projectcapsule/capsule-proxy:v0.15.20f91cf29ebc9
ca-certificates@20260909-r2
stdlib@go1.27.1
20260909-r3
1.26.10

Open the chart page →

1,949
casdoorcasdoorVerified publisher4.23.01 of 1See more

casdoor casdoor 4.23.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
casbin/casdoor:4.23.0e13c9aada231
stdlib@go1.25.8
1.26.10

Open the chart page →

955
fluxcd-webuiccowleyVerified publisher0.0.21 of 2See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
adrianberger/fluxcd-webui:latest76848c0d2780
stdlib@go1.16.2
1.26.10

Open the chart page →

4,809
celestia-nodecelestia-node0.1.71 of 1See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
stdlib@go1.23.0
1.26.10

Open the chart page →

2,425
cert-estuarycert-estuaryVerified publisher0.2.11 of 1See more

cert-estuary cert-estuary 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/hsn723/cert-estuary:0.2.00c4b6132b0ad
stdlib@go1.26.2
1.26.10

Open the chart page →

664
cert-manager-approver-policycert-managerOfficialVerified publisher0.28.01 of 1See more

cert-manager-approver-policy cert-manager 0.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-approver-policy:v0.28.01a955b0a5c41
stdlib@go1.27.1
1.26.10

Open the chart page →

232
cert-manager-google-cas-issuercert-managerOfficialVerified publisher0.13.01 of 1See more

cert-manager-google-cas-issuer cert-manager 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-google-cas-issuer:v0.13.00d6a852d7c6a
stdlib@go1.27.1
1.26.10

Open the chart page →

232
finops-stackcert-managerVerified publisher0.0.57 of 12See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
stdlib@go1.22.4
1.26.10
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
stdlib@go1.21.12
1.26.10

Open the chart page →

17,599
cert-manager-webhook-arvancloudcert-manager-webhook-arvancloudVerified publisher0.1.11 of 1See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
stdlib@go1.24.4
1.26.10

Open the chart page →

1,663
cert-manager-webhook-gandicert-manager-webhook-gandi0.6.01 of 1See more

cert-manager-webhook-gandi cert-manager-webhook-gandi 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
stdlib@go1.22.0
1.26.10

Open the chart page →

1,738
cert-manager-webhook-ionos-cloudcert-manager-webhook-ionos-cloudVerified publisher0.3.41 of 1See more

cert-manager-webhook-ionos-cloud cert-manager-webhook-ionos-cloud 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ionos-cloud/cert-manager-webhook-ionos-cloud:v1.0.5b1b706e10d22
stdlib@go1.27.1
1.26.10

Open the chart page →

248
cert-manager-webhook-porkbuncert-manager-webhook-porkbunVerified publisher2.0.81 of 1See more

cert-manager-webhook-porkbun cert-manager-webhook-porkbun 2.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/octabits-io/cert-manager-webhook-porkbun:2.0.8c0c3231e459b
stdlib@go1.27.2
1.26.10

Open the chart page →

16
cert-vaultcert-vaultOfficialVerified publisher2.12.04 of 7See more

cert-vault cert-vault 2.12.0

4 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
stdlib@go1.23.7
1.26.10
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
stdlib@go1.23.7
1.26.10
bitnamilegacy/redis-exporter:1.69.0-debian-12-r1a006df1fd47e
stdlib@go1.23.7
1.26.10
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10

Open the chart page →

18,901
chatclichatcliVerified publisher1.223.02 of 2See more

chatcli chatcli 1.223.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/diillson/chatcli:1.223.05121a7c00b2d
stdlib@go1.27.2
1.26.10
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
stdlib@go1.23.10
1.26.10

Open the chart page →

1,575
chatcli-operatorchatcli-operatorVerified publisher1.223.02 of 2See more

chatcli-operator chatcli-operator 1.223.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/diillson/chatcli-operator:1.223.0e45fc438881e
stdlib@go1.27.2
1.26.10
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
stdlib@go1.23.10
1.26.10

Open the chart page →

1,568
etcd-defragchristianhuthVerified publisher1.7.01 of 1See more

etcd-defrag christianhuth 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.7.2e9afa62b1e91
stdlib@go1.26.8
1.26.10

Open the chart page →

264
shlink-backendchristianhuthVerified publisher12.0.01 of 1See more

shlink-backend christianhuth 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
shlinkio/shlink:5.1.7844e1f2b6455
stdlib@go1.26.4
1.26.10

Open the chart page →

885
squestchristianhuthVerified publisher7.0.21 of 4See more

squest christianhuth 7.0.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.6-management8dd6e3570dda
stdlib@go1.22.2
1.26.10

Open the chart page →

5,410
typo3christianhuthVerified publisher8.0.11 of 1See more

typo3 christianhuth 8.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crinis/typo3:legacy-13.4.365636db17b924
stdlib@go1.24.4
1.26.10

Open the chart page →

4,711
challengerchronicleVerified publisher0.1.21 of 1See more

challenger chronicle 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/challenger-go:0.1.2c8d5a3c0e966
stdlib@go1.22.12
1.26.10

Open the chart page →

1,409
erpcchronicleVerified publisher0.7.11 of 1See more

erpc chronicle 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/erpc/erpc:0.1.18bfed3d49a08
stdlib@go1.26.4
1.26.10

Open the chart page →

715
spectrechronicleVerified publisher0.3.91 of 1See more

spectre chronicle 0.3.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/spectre:0.68.34e872bc016e8
stdlib@go1.25.5
1.26.10

Open the chart page →

2,102
validatorchronicleVerified publisher0.8.21 of 1See more

validator chronicle 0.8.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/ghost:0.81.0417b664eee72
stdlib@go1.27.1
1.26.10

Open the chart page →

697

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
stdlib@go1.25.1
1.26.10
2
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
stdlib@go1.19.4
1.26.10
2
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
stdlib@go1.19.1
1.26.10
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
stdlib@go1.23.0
1.26.10
2
quay.io/cephcsi/cephcsi:v3.18.1a8c0653a9565
stdlib@go1.26.4
1.26.10
2
quay.io/cephcsi/cephcsi:v3.14.2dc4bbac6efe1
stdlib@go1.23.4
1.26.10
2
quay.io/cephcsi/ceph-csi-operator:v1.1.0c42c95c36fa2
stdlib@go1.26.8
1.26.10
2
quay.io/cilium/cilium-envoy:v1.38.6-1791537840-00e749f11f69334c625e53fc1ce2fc6c7f34a51fd6c8c0c91954
stdlib@go1.27.2
1.26.10
2
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
stdlib@go1.26.7
1.26.10
2
quay.io/cilium/tetragon-operator:v1.7.1cd8b71f6860e
stdlib@go1.26.7
1.26.10
2
quay.io/coreos/etcd:v3.5.628cb0630cb85
stdlib@go1.16.15
1.26.10
2
quay.io/coreos/etcd:v3.6.12702d7b4881c6
stdlib@go1.25.10
1.26.10
2
quay.io/coreos/etcd:v3.7.2e9afa62b1e91
stdlib@go1.26.8
1.26.10
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
stdlib@go1.13.10
1.26.10
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
stdlib@go1.19.3
1.26.10
2
quay.io/hedgedoc/hedgedoc:1.12.0cd66986a2a49
stdlib@go1.24.4
1.26.10
2
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
stdlib@go1.18.1
1.26.10
2
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
stdlib@go1.18.2
1.26.10
2
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
stdlib@go1.18.2
1.26.10
2
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
stdlib@go1.18.2
1.26.10
2
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
stdlib@go1.18.2
1.26.10
2
quay.io/jetstack/cert-manager-cainjector:v1.11.05c3eb25b0854
stdlib@go1.19.5
1.26.10
2
quay.io/jetstack/cert-manager-cainjector:v1.13.2858fee0c4af0
stdlib@go1.20.10
1.26.10
2
quay.io/jetstack/cert-manager-cainjector:v1.14.39395dec77fcf
stdlib@go1.21.7
1.26.10
2
quay.io/jetstack/cert-manager-cainjector:v1.15.3e0ce8ae280c8
stdlib@go1.22.5
1.26.10
2
quay.io/jetstack/cert-manager-cainjector:v1.17.2ec56edb1161d
stdlib@go1.23.8
1.26.10
2
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
stdlib@go1.23.8
1.26.10
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
stdlib@go1.21.7
1.26.10
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
stdlib@go1.20.10
1.26.10
2
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
stdlib@go1.19.5
1.26.10
2
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
stdlib@go1.22.5
1.26.10
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
stdlib@go1.19.5
1.26.10
2
quay.io/jetstack/cert-manager-startupapicheck:v1.15.34cbc1b022a23
stdlib@go1.22.5
1.26.10
2
quay.io/jetstack/cert-manager-startupapicheck:v1.14.3df8677135139
stdlib@go1.21.7
1.26.10
2
quay.io/jetstack/cert-manager-startupapicheck:v1.17.2e18989b4f912
stdlib@go1.23.8
1.26.10
2
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
stdlib@go1.20.10
1.26.10
2
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
stdlib@go1.23.8
1.26.10
2
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
stdlib@go1.19.5
1.26.10
2
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
stdlib@go1.21.7
1.26.10
2
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
stdlib@go1.22.5
1.26.10
2
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
stdlib@go1.15.2
1.26.10
2
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
stdlib@go1.24.13
1.26.10
2
quay.io/kubevirt/kubevirt-csi-driver:latestbbc43bc25025
stdlib@go1.24.13
1.26.10
2
quay.io/metallb/controller:v0.16.1f51ab515de9c
stdlib@go1.25.9
1.26.10
2
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
stdlib@go1.25.8
1.26.10
2
quay.io/metallb/speaker:v0.13.1000406ccb1fa0
stdlib@go1.19.5
1.26.10
2
quay.io/metallb/speaker:v0.16.116561e96531e
stdlib@go1.25.9
1.26.10
2
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
stdlib@go1.23.4
1.26.10
2
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.10
2
quay.io/oauth2-proxy/oauth2-proxy:v7.15.58498b0d0ef0a
stdlib@go1.26.8
1.26.10
2

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.