StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,575
of 18,219 indexed, latest versions
Container images
6,494
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,575 of 18,219 indexed charts deploy, on 6,494 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,259
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3410
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1698
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1066
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,575 by stars
ChartLatestAffected imagesRadar Score
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jwilder/dockerize:v0.10.0839cd6793d19
stdlib@go1.25.6
1.26.10
registry.k8s.io/kubectl:v1.32.08ccae74fc039
stdlib@go1.23.3
1.26.10

Open the chart page →

60,938
gitops-promotergitops-promoterOfficialVerified publisher0.24.02 of 2See more

gitops-promoter gitops-promoter 0.24.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
stdlib@go1.27.1
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.23.0a6075902738e
stdlib@go1.27.1
1.26.10

Open the chart page →

3,651
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:latest0e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

13,090
grafana-mcpgrafana-communityVerified publisher0.28.11 of 1See more

grafana-mcp grafana-community 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/mcp-grafana:2.1.171a3f4e6f412
stdlib@go1.27.2
1.26.10

Open the chart page →

932
mariadbgroundhog2k4.44.01 of 1See more

mariadb groundhog2k 4.44.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:11.8.46b848cb24fbb
stdlib@go1.24.6
1.26.10

Open the chart page →

3,789
mongodbgroundhog2k0.8.41 of 1See more

mongodb groundhog2k 0.8.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:8.3.13d0c8f51bb63f
stdlib@go1.26.8
1.26.10

Open the chart page →

1,441
haproxy-ingresshaproxy-ingressVerified publisher0.16.21 of 1See more

haproxy-ingress haproxy-ingress 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.242bcf39842db
stdlib@go1.26.8
1.26.10

Open the chart page →

261
heimdallheimdallOfficialVerified publisher3.3.31 of 2See more

heimdall heimdall 3.3.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10

Open the chart page →

2,823
autheliahelmforgeVerified publisher1.5.171 of 1See more

authelia helmforge 1.5.17

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
authelia/authelia:4.39.28bd97cff4fcbf
stdlib@go1.27.1
1.26.10

Open the chart page →

231
dolibarrhelmforgeVerified publisher1.2.221 of 3See more

dolibarr helmforge 1.2.22

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:26.7.0625f74ddf936
stdlib@go1.24.6
1.26.10

Open the chart page →

4,396
karakeephelmforgeVerified publisher1.2.111 of 3See more

karakeep helmforge 1.2.11

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
stdlib@go1.20.7
1.26.10

Open the chart page →

10,864
postgresqlhelmforgeVerified publisher2.1.11 of 1See more

postgresql helmforge 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

1,748
umamihelmforgeVerified publisher2.4.21 of 3See more

umami helmforge 2.4.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

2,052
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:15c961aa287d86
stdlib@go1.24.6
1.26.10
victoriametrics/victoria-metrics:v1.95.1f52723a08a44
stdlib@go1.21.4
1.26.10

Open the chart page →

17,018
infrahubinfrahubVerified publisher4.34.01See more

infrahub infrahub 4.34.0

1 container image this version deploys carries CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.26.10

Open the chart page →

—
secret-manageritscontainedVerified publisher0.2.11 of 1See more

secret-manager itscontained 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
itscontained/secret-manager:0.3.07ec3e93c6469
stdlib@go1.15.3
1.26.10

Open the chart page →

4,341
jenkinsjenkins-helm-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
stdlib@go1.27.0
1.26.10

Open the chart page →

2,192
kamu-api-serverkamuVerified publisher0.93.01 of 1See more

kamu-api-server kamu 0.93.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.93.0a743ebe54204
stdlib@go1.15.2
1.26.10

Open the chart page →

7,922
kerberneteskerbernetesVerified publisher1.1.111 of 1See more

kerbernetes kerbernetes 1.1.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/froz42/kerbernetes:v1.1.6d5c074be8366
stdlib@go1.27.1
1.26.10

Open the chart page →

426
percona-xtradb-clusterkfirfer1.5.101 of 3See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster:8.0.32-24.21f978ab8912e
stdlib@go1.19.9
1.26.10

Open the chart page →

5,711
permission-managerkfirfer1.0.71 of 1See more

permission-manager kfirfer 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
stdlib@go1.16.8
1.26.10

Open the chart page →

3,434
klusterviewklusterviewVerified publisher0.1.02 of 4See more

klusterview klusterview 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:latestdbbc38ea2110
stdlib@go1.26.9
1.26.10
quay.io/prometheus/prometheus:latestefd719c99d83
stdlib@go1.27.1
1.26.10

Open the chart page →

3,908
gateway-operatorkongOfficialVerified publisher0.6.11 of 1See more

gateway-operator kong 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/gateway-operator:1.603510967482b
stdlib@go1.24.5
1.26.10

Open the chart page →

1,403
kong-meshkong-meshVerified publisher3.0.03 of 3See more

kong-mesh kong-mesh 3.0.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/kuma-cp:3.0.0647075b8a1bd
stdlib@go1.27.2-X:boringcrypto
1.26.10
kong/kumactl:3.0.0da8d46dd68b3
stdlib@go1.27.2-X:boringcrypto
1.26.10
registry.k8s.io/kubectl:v1.37.1b7cab618e281
stdlib@go1.26.8
1.26.10

Open the chart page →

548
kubeflowkubeflow1.6.226 of 45See more

kubeflow kubeflow 1.6.2

26 of the 45 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
stdlib@go1.15.13
1.26.10
istio/proxyv2:1.14.1df69c1a7af7c
stdlib@go1.18.2
1.26.10
kserve/kserve-controller:v0.8.0f0692a9ea09f
stdlib@go1.17.7
1.26.10
kubeflow/training-operator:v1-e1434f6ff847e2b6af0
stdlib@go1.17.11
1.26.10
kubeflownotebookswg/kfam:v1.6.1f226fb44db57
stdlib@go1.17.13
1.26.10
kubeflownotebookswg/notebook-controller:v1.6.185e2e685abd6
stdlib@go1.17.13
1.26.10
kubeflownotebookswg/poddefaults-webhook:v1.6.17d42600e1524
stdlib@go1.17.13
1.26.10
kubeflownotebookswg/profile-controller:v1.6.19f01767a460f
stdlib@go1.17.13
1.26.10
kubeflownotebookswg/tensorboard-controller:v1.6.182ffdd2da285
stdlib@go1.17.13
1.26.10
metacontrollerio/metacontroller:v2.0.4897c9601d2cc
stdlib@go1.16.7
1.26.10
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.2.0f253b82941c2
stdlib@go1.17.6
1.26.10
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.2.0a705c1ea8e9e
stdlib@go1.17.6
1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.2.593ff6e693577
stdlib@go1.17.8
1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.2.5007820fdb75b
stdlib@go1.17.8
1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
stdlib@go1.17.8
1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.2.523baa1932232
stdlib@go1.17.8
1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.2.5847bb97e3844
stdlib@go1.17.8
1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.2.59084ea8498ea
stdlib@go1.17.8
1.26.10
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
stdlib@go1.17.6
1.26.10
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
stdlib@go1.17.6
1.26.10
gcr.io/ml-pipeline/mysql:5.7-debiandf28187b5455
stdlib@go1.16.7
1.26.10
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
stdlib@go1.17.6
1.26.10
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
stdlib@go1.17.6
1.26.10
gcr.io/ml-pipeline/viewer-crd-controller:2.0.0-alpha.534403f9f94be
stdlib@go1.17.6
1.26.10
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
stdlib@go1.17.11
1.26.10
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
stdlib@go1.13.10
1.26.10

Open the chart page →

192,111
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
stdlib@go1.20.6
1.26.10

Open the chart page →

12,337
testkubekubeshop2.14.26 of 6See more

testkube kubeshop 2.14.2

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/bitnami-mongodb:8.3.11e209888ede02
stdlib@go1.26.8
1.26.10
kubeshop/testkube-api-server:2.14.2a87d63dd1632
stdlib@go1.27.1
1.26.10
kubeshop/testkube-kubectl:1.37.15011b74081fa
stdlib@go1.26.8
1.26.10
kubeshop/testkube-minio:2025.10d8e1af6aca99
stdlib@go1.26.0
1.26.10
library/nats:2.15.0-alpineac8f88a6494b
stdlib@go1.27.1
1.26.10
natsio/nats-server-config-reloader:0.24.0d758a82a9c20
stdlib@go1.26.5
1.26.10

Open the chart page →

6,332
openelbkubesphere-stable0.5.02 of 2See more

openelb kubesphere-stable 0.5.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.5.0b5b665c4672c
stdlib@go1.15.15
1.26.10
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
stdlib@go1.16.9
1.26.10

Open the chart page →

6,714
operatorkube-starrocksVerified publisher1.11.71 of 1See more

operator kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
starrocks/operator:v1.11.78c20435a7579
stdlib@go1.22.12
1.26.10

Open the chart page →

1,128
sbomscannerkubewardenVerified publisher0.13.05 of 5See more

sbomscanner kubewarden 0.13.0

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats:2.14.6-alpinead7a43eb7e33
stdlib@go1.26.7
1.26.10
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.10
ghcr.io/kubewarden/sbomscanner/controller:v0.13.0611e21c44268
stdlib@go1.27.1
1.26.10
ghcr.io/kubewarden/sbomscanner/storage:v0.13.064929d3a8ecf
stdlib@go1.27.1
1.26.10
ghcr.io/kubewarden/sbomscanner/worker:v0.13.00a8e4e31c890
stdlib@go1.27.1
1.26.10

Open the chart page →

2,327
venti-stackkuossOfficialVerified publisher0.5.08 of 9See more

venti-stack kuoss 0.5.0

8 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kuoss/eventrouter:v0.4.156226040e1346
stdlib@go1.24.10
1.26.10
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
stdlib@go1.24.10
1.26.10
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
stdlib@go1.24.10
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.93.1428f088fe6fe
stdlib@go1.26.5
1.26.10
quay.io/prometheus/alertmanager:v0.34.0690c7b525f43
stdlib@go1.26.6
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.10

Open the chart page →

7,394
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
stdlib@go1.25.7
1.26.10

Open the chart page →

6,891
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestf1bc435659b9
stdlib@go1.26.0
1.26.10

Open the chart page →

4,316
vclustermainVerified publisher0.17.07 of 10See more

vcluster main 0.17.0

7 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
stdlib@go1.20.5
1.26.10
quay.io/kubermatic/operating-system-manager:v1.3.010081473da43
stdlib@go1.20.5
1.26.10
registry.k8s.io/etcd:3.6.4-0e36c08168342
stdlib@go1.23.11
1.26.10
registry.k8s.io/kas-network-proxy/proxy-server:v0.0.37c2f596cae3c6
stdlib@go1.19.6
1.26.10
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
stdlib@go1.19
1.26.10
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
stdlib@go1.19
1.26.10
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
stdlib@go1.19
1.26.10

Open the chart page →

17,433
helm-ai-kernelmindburn-labsOfficialVerified publisher0.11.12 of 2See more

helm-ai-kernel mindburn-labs 0.11.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
stdlib@go1.22.5
1.26.10
ghcr.io/mindburn-labs/helm-ai-kernel:v0.11.10e7a5cd11858
stdlib@go1.25.13
1.26.10

Open the chart page →

3,057
stannatsVerified publisher0.13.01 of 2See more

stan nats 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:latestc623b608e148
stdlib@go1.26.6
1.26.10

Open the chart page →

360
headplanenbcloudVerified publisher0.1.23 of 4See more

headplane nbcloud 0.1.2

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
stdlib@go1.24.5
1.26.10
headscale/headscale:0.25.1a7a8ae9616bb
stdlib@go1.23.4
1.26.10
ghcr.io/tale/headplane:0.5.50dbc52cffc19
stdlib@go1.23.4
1.26.10

Open the chart page →

10,325
netris-operatornetrisai3.0.21 of 2See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
netrisai/netris-operator:v4.0.244f60aa0d898
stdlib@go1.18.10
1.26.10

Open the chart page →

2,466
node-local-dnsnode-local-dns2.4.01 of 1See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
stdlib@go1.21.7
1.26.10

Open the chart page →

3,491
goldpingerokgoloveVerified publisher6.2.01 of 1See more

goldpinger okgolove 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bloomberg/goldpinger:3.10.08520120f5598
stdlib@go1.21.9
1.26.10

Open the chart page →

1,384
geonodeone-acre-fundVerified publisher0.1.161 of 7See more

geonode one-acre-fund 0.1.16

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.10

Open the chart page →

2,844
open5gsopen5gsVerified publisher2.3.83 of 5See more

open5gs open5gs 2.3.8

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mongodb:latestad05bb9a19fa
stdlib@go1.26.8
1.26.10
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
stdlib@go1.15.1
1.26.10
gradiant/open5gs-dbctl:0.10.3332031245fce
stdlib@go1.22.11
1.26.10

Open the chart page →

13,034
psmdb-operatorpercona1.23.21 of 1See more

psmdb-operator percona 1.23.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
percona/percona-server-mongodb-operator:1.23.178c87b933e18
stdlib@go1.26.8
1.26.10

Open the chart page →

323
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
stdlib@go1.20.7
1.26.10

Open the chart page →

10,148
capsuleprojectcapsuleOfficialVerified publisher0.15.01See more

capsule projectcapsule 0.15.0

1 container image this version deploys carries CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10

Open the chart page →

—
prometheus-consul-exporterprometheus-communityVerified publisher1.1.11 of 1See more

prometheus-consul-exporter prometheus-community 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/consul-exporter:v0.13.04e4cfd809e96
stdlib@go1.23.2
1.26.10

Open the chart page →

1,363
prometheus-json-exporterprometheus-communityOfficialVerified publisher0.20.11 of 1See more

prometheus-json-exporter prometheus-community 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/json-exporter:v0.7.03a777171d39a
stdlib@go1.23.6
1.26.10

Open the chart page →

1,288
prometheus-nginx-exporterprometheus-communityVerified publisher1.23.11 of 1See more

prometheus-nginx-exporter prometheus-community 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nginx/nginx-prometheus-exporter:1.5.385666e7fde7e
stdlib@go1.26.6
1.26.10

Open the chart page →

280
prometheus-smartctl-exporterprometheus-communityVerified publisher0.17.11 of 1See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/smartctl-exporter:v0.14.0cfe22c36d7d2
stdlib@go1.23.7
1.26.10

Open the chart page →

1,840
prometheus-statsd-exporterprometheus-communityVerified publisher1.0.01 of 1See more

prometheus-statsd-exporter prometheus-community 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.28.04e7a1f00b9b2
stdlib@go1.23.2
1.26.10

Open the chart page →

1,363

Container images carrying it

6,494 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus/node-exporter:v1.3.1f2269e73124d
stdlib@go1.17.3
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
stdlib@go1.20.6
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
stdlib@go1.23.4
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
stdlib@go1.23.3
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
stdlib@go1.23.2
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
stdlib@go1.25.6
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
stdlib@go1.22.3
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
stdlib@go1.14.12
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
stdlib@go1.25.9
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
stdlib@go1.23.2
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
stdlib@go1.24.3
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.88.1d3d65efa3bee
stdlib@go1.25.6
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.77.1dde69a8b6f4b
stdlib@go1.23.1
1.26.10
2
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
stdlib@go1.22.4
1.26.10
2
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
stdlib@go1.26.5
1.26.10
2
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
stdlib@go1.23.4
1.26.10
2
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
stdlib@go1.15.3
1.26.10
2
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
stdlib@go1.21.0
1.26.10
2
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
stdlib@go1.18.3
1.26.10
2
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
stdlib@go1.25.3
1.26.10
2
quay.io/prometheus/pushgateway:v1.6.2979a69ab4a40
stdlib@go1.21.1
1.26.10
2
quay.io/prometheus/pushgateway:v1.11.099392035ae99
stdlib@go1.23.4
1.26.10
2
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
stdlib@go1.15.15
1.26.10
2
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
stdlib@go1.24.0
1.26.10
2
quay.io/zncdatadev/sig-storage/livenessprobe:v2.14.033692aed26aa
stdlib@go1.22.5
1.26.10
2
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
stdlib@go1.22.6
1.26.10
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
stdlib@go1.24.11
1.26.10
2
registry.k8s.io/etcd:3.5.6-0dd75ec974b0a
stdlib@go1.16.15
1.26.10
2
registry.k8s.io/ingress-nginx/controller:v1.9.45b161f051d01
stdlib@go1.21.3
1.26.10
2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
stdlib@go1.24.4
1.26.10
2
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
stdlib@go1.21.5
1.26.10
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
stdlib@go1.24.1
1.26.10
2
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.10
2
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
stdlib@go1.19.5
1.26.10
2
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
stdlib@go1.19.5
1.26.10
2
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
stdlib@go1.23.10
1.26.10
2
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
stdlib@go1.23.10
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.009a36e2be1db
stdlib@go1.18.3
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.7.0a15ca437f230
stdlib@go1.19.3
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.10.1af8220f53493
stdlib@go1.20.10
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.6.0bdab4e49d71d
stdlib@go1.18.5
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.15.0db384bf43222
stdlib@go1.23.5
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.10.0ec5d6f6be228
stdlib@go1.20.7
1.26.10
2
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
stdlib@go1.24.4
1.26.10
2
registry.k8s.io/sig-storage/csi-attacher:v4.9.05aaefc24f315
stdlib@go1.24.2
1.26.10
2
registry.k8s.io/sig-storage/csi-attacher:v3.4.08b9c313c05f5
stdlib@go1.17.3
1.26.10
2
registry.k8s.io/sig-storage/csi-attacher:v4.0.09a685020911e
stdlib@go1.18
1.26.10
2
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
stdlib@go1.25.7
1.26.10
2
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
stdlib@go1.24.6
1.26.10
2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.04fd21f36075b
stdlib@go1.17.3
1.26.10
2

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.