StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,728
of 18,208 indexed, latest versions
Container images
6,681
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,728 of 18,208 indexed charts deploy, on 6,681 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.106,438
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+17 more20260909-r3417
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16103
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1070
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1113
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,728 by stars
ChartLatestAffected imagesRadar Score
postgrescloudpirates-postgresVerified publisher0.21.21 of 1See more

postgres cloudpirates-postgres 0.21.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

1,748
vault-secrets-operatorhashicorpVerified publisher1.6.02 of 2See more

vault-secrets-operator hashicorp 1.6.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/vault-secrets-operator:1.6.002a79a046037
stdlib@go1.27.1
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
stdlib@go1.23.0
1.26.10

Open the chart page →

1,789
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
stdlib@go1.21.4
1.26.10

Open the chart page →

2,107
rocketchatrocketchat-server7.0.26 of 12See more

rocketchat rocketchat-server 7.0.2

6 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
stdlib@go1.20.7
1.26.10
library/nats:2.12-alpineb270f5e24283
stdlib@go1.25.12
1.26.10
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.10
natsio/nats-server-config-reloader:0.21.110ff229eaf52
stdlib@go1.25.5
1.26.10
natsio/prometheus-nats-exporter:0.18.002469dc907bc
stdlib@go1.24.6
1.26.10

Open the chart page →

17,033
valkeybitnamiVerified publisher6.3.41 of 1See more

valkey bitnami 6.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/valkey:latest9985c6b0fef4
stdlib@go1.26.9
1.26.10

Open the chart page →

4
trust-managercert-managerOfficialVerified publisher0.25.02 of 2See more

trust-manager cert-manager 0.25.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/trust-manager:v0.25.00521921c2a46
stdlib@go1.27.1
1.26.10
quay.io/jetstack/trust-pkg-debian-trixie:20250419.23093d4f6634f
stdlib@go1.27.1
1.26.10

Open the chart page →

391
gatekeepergatekeeperVerified publisher3.23.12 of 3See more

gatekeeper gatekeeper 3.23.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.23.1dfc6fc78753f
stdlib@go1.26.6
1.26.10
openpolicyagent/gatekeeper-crds:v3.23.1ab3620e6bec9
stdlib@go1.26.6
1.26.10

Open the chart page →

1,132
snapshot-controllerpiraeus-chartsVerified publisher5.4.01 of 1See more

snapshot-controller piraeus-charts 5.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.7.08511f417d007
stdlib@go1.26.9
1.26.10

Open the chart page →

81
zammadzammadOfficialVerified publisher19.2.01 of 5See more

zammad zammad 19.2.0

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.10

Open the chart page →

6,002
podinfopodinfo6.15.01 of 1See more

podinfo podinfo 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stefanprodan/podinfo:6.15.0ec73780a8425
stdlib@go1.27.0
1.26.10

Open the chart page →

532
victoria-metrics-clustervictoriametricsVerified publisher0.53.03 of 3See more

victoria-metrics-cluster victoriametrics 0.53.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/vminsert:v1.154.0-clusterd196c34f5392
stdlib@go1.27.2
1.26.10
victoriametrics/vmselect:v1.154.0-cluster49cb2d3e42c4
stdlib@go1.27.2
1.26.10
victoriametrics/vmstorage:v1.154.0-cluster91a0e2a70d45
stdlib@go1.27.2
1.26.10

Open the chart page →

51
solr-operatorapache-solrVerified publisher0.9.12 of 3See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/solr-operator:v0.9.14db34508137f
stdlib@go1.22.12
1.26.10
pravega/zookeeper-operator:0.2.15b2bc4042fdd8
stdlib@go1.19.7
1.26.10

Open the chart page →

4,340
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
stdlib@go1.21.3
1.26.10

Open the chart page →

2,933
k10kastenVerified publisher9.0.822 of 23See more

k10 kasten 9.0.8

22 of the 23 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/kasten-images/aggregatedapis:9.0.8086193ddd52d
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/auth:9.0.87f923711653d
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/bloblifecyclemanager:9.0.8878268b7e5ac
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/catalog:9.0.87d4d776140cc
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/configmap-reload:9.0.896cf500e332f
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/controllermanager:9.0.861e13b43fcc1
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/crypto:9.0.89bcd43f0b135
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/dashboardbff:9.0.8b39f7b4a32d3
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/events:9.0.89212dccdbd56
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/executor:9.0.898f092525110
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/garbagecollector:9.0.8d4d8bfc6ecb6
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/gateway:9.0.8dbac1fa54894
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/jobs:9.0.8c03dc755d95e
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/kanister:9.0.8b57ee7f25d73
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/kanister-tools:9.0.822efd199d94e
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/logging:9.0.8591e2750d95c
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/metering:9.0.88040f1224114
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/prometheus:9.0.83670eee10e91
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/repositories:9.0.856ac68b6039e
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/state:9.0.819226cf50938
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/upgrade:9.0.8765f930f330f
stdlib@go1.27.2
1.26.10
gcr.io/kasten-images/vbrintegrationapi:9.0.85eee71ec9f5a
stdlib@go1.27.2
1.26.10

Open the chart page →

1,761
mariadb-operatormariadb-operator26.10.11 of 1See more

mariadb-operator mariadb-operator 26.10.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/mariadb-operator/mariadb-operator:26.10.137714fb240a5
stdlib@go1.27.1
1.26.10

Open the chart page →

581
ceph-csi-cephfsceph-csiOfficialVerified publisher3.18.16 of 6See more

ceph-csi-cephfs ceph-csi 3.18.1

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.18.1a8c0653a9565
stdlib@go1.26.4
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.13.0d1a26170efed
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.18.0b7fefd08651f
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10

Open the chart page →

3,098
ceph-csi-rbdceph-csiOfficialVerified publisher3.18.16 of 6See more

ceph-csi-rbd ceph-csi 3.18.1

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.18.1a8c0653a9565
stdlib@go1.26.4
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.13.0d1a26170efed
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.18.0b7fefd08651f
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10

Open the chart page →

3,098
chaos-meshchaos-meshVerified publisher2.8.54 of 4See more

chaos-mesh chaos-mesh 2.8.5

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
stdlib@go1.25.5
1.26.10
ghcr.io/chaos-mesh/chaos-daemon:v2.8.5d794bf427ab1
stdlib@go1.25.11
1.26.10
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.5a6724412fe74
stdlib@go1.25.11
1.26.10
ghcr.io/chaos-mesh/chaos-mesh:v2.8.5942bff26d591
stdlib@go1.25.11
1.26.10

Open the chart page →

7,751
rabbitmqcloudpirates-rabbitmqVerified publisher0.21.311 of 2See more

rabbitmq cloudpirates-rabbitmq 0.21.31

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.6-management8dd6e3570dda
stdlib@go1.22.2
1.26.10

Open the chart page →

1,409
csi-driver-nfscsi-driver-nfsVerified publisher4.13.56 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.5

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/nfsplugin:v4.13.519162ec4fb3f
stdlib@go1.26.5
1.26.10

Open the chart page →

4,591
datahubdatahubVerified publisher1.1.73 of 4See more

datahub datahub 1.1.7

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
ca-certificates@20260611-r1
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
20260909-r3
0.103.16
1.0.10
acryldata/datahub-frontend-react:v1.7.0.199513cc1c45e
ca-certificates@20260611-r1
20260909-r3
acryldata/datahub-upgrade:v1.7.0.1c3db54d8fb94
ca-certificates@20260611-r1
20260909-r3

Open the chart page →

1,747
portainerportainer245.2.01 of 1See more

portainer portainer 245.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.45.203f94a406496
stdlib@go1.26.6
1.26.10

Open the chart page →

612
victoria-metrics-operatorvictoriametricsVerified publisher0.68.11 of 1See more

victoria-metrics-operator victoriametrics 0.68.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.10

Open the chart page →

231
atlantisatlantis6.16.11 of 1See more

atlantis atlantis 6.16.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.48.142bde40e38ec
stdlib@go1.26.6
1.26.10

Open the chart page →

919
codercoder-v2OfficialVerified publisher2.38.11 of 1See more

coder coder-v2 2.38.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/coder/coder:v2.38.1fcddd64d5f08
stdlib@go1.26.8
1.26.10

Open the chart page →

192
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
stdlib@go1.19.4
1.26.10

Open the chart page →

3,422
milvusmilvus4.0.313 of 5See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.5-r2102aac62827b
stdlib@go1.18.2
1.26.10
milvusdb/milvus:v2.2.13a3a55e1c1497
stdlib@go1.18.3
1.26.10
milvusdb/milvus-config-tool:v0.1.12212dfb61401
stdlib@go1.16.15
1.26.10

Open the chart page →

174,044
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
stdlib@go1.25.5
1.26.10

Open the chart page →

3,574
flaggerflagger1.45.01 of 1See more

flagger flagger 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger:1.45.015b372d35012
stdlib@go1.26.7
1.26.10

Open the chart page →

523
grafana-agentgrafana0.44.22 of 2See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
stdlib@go1.22.11
1.26.10
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
stdlib@go1.21.1
1.26.10

Open the chart page →

4,939
tempografana-communityVerified publisher3.2.01 of 1See more

tempo grafana-community 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/tempo:3.1.03076b8dcdfb3
stdlib@go1.27.1
1.26.10

Open the chart page →

278
mesherymesheryOfficialVerified publisher1.0.711 of 1See more

meshery meshery 1.0.71

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
meshery/meshery:stable-latestb3816d0c691d
stdlib@go1.26.4
1.26.10

Open the chart page →

1,944
prometheus-mysql-exporterprometheus-communityVerified publisher2.15.01 of 1See more

prometheus-mysql-exporter prometheus-community 2.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/mysqld-exporter:v0.20.0abed8dac117b
stdlib@go1.26.5
1.26.10

Open the chart page →

387
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10

Open the chart page →

12,160
tomcatbitnamiVerified publisher13.6.341 of 1See more

tomcat bitnami 13.6.34

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/tomcat:lateste73323c30d09
stdlib@go1.26.9
1.26.10

Open the chart page →

85
cockroachdbcockroachdbVerified publisher22.0.41 of 3See more

cockroachdb cockroachdb 22.0.4

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cockroachdb/cockroach-self-signer-cert:1.10b0fcc6c8147a
stdlib@go1.26.2
1.26.10

Open the chart page →

820
local-path-provisionercontainerooVerified publisher0.0.381 of 1See more

local-path-provisioner containeroo 0.0.38

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.37e757967a5ec3
stdlib@go1.26.5
1.26.10

Open the chart page →

357
mailpitjouveVerified publisher0.37.01 of 1See more

mailpit jouve 0.37.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
axllent/mailpit:v1.31.198b916bd3c8d
stdlib@go1.27.1
1.26.10

Open the chart page →

244
signozsignoz0.146.05 of 5See more

signoz signoz 0.146.0

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.21.2cd9252644ce0
stdlib@go1.19.10
1.26.10
altinity/metrics-exporter:0.21.2df3d57215356
stdlib@go1.19.10
1.26.10
signoz/signoz:v0.146.0cd3ca6950df3
stdlib@go1.25.7
1.26.10
signoz/signoz-otel-collector:v0.144.14b08671f56f31
stdlib@go1.25.0
1.26.10
signoz/zookeeper:3.7.1fcc4a3288154
stdlib@go1.21.2
1.26.10

Open the chart page →

10,851
weblateweblateOfficialVerified publisher0.5.432 of 3See more

weblate weblate 0.5.43

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:latest5927ff3702df
stdlib@go1.24.5
1.26.10
weblate/weblate:2026.10.1.1b0f200f38d70
rustls-webpki@0.103.14
stdlib@go1.26.7
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

7,734
postgresgroundhog2k1.6.81 of 1See more

postgres groundhog2k 1.6.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

1,748
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
stdlib@go1.19.8
1.26.10

Open the chart page →

5,684
keelkeel1.2.31 of 1See more

keel keel 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keel-hq/keel:0.22.409872633675d
stdlib@go1.26.5
1.26.10

Open the chart page →

1,196
community-operatormongodb-helm-charts0.13.01 of 1See more

community-operator mongodb-helm-charts 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.10

Open the chart page →

1,749
openfgaopenfgaOfficialVerified publisher0.3.161 of 1See more

openfga openfga 0.3.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openfga/openfga:v1.22.09cf9a20af32a
ca-certificates@20260909-r2
stdlib@go1.26.8
20260909-r3
1.26.10

Open the chart page →

231
prometheus-kafka-exporterprometheus-communityVerified publisher4.0.11 of 1See more

prometheus-kafka-exporter prometheus-community 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
danielqsj/kafka-exporter:v1.9.04150e46b2e96
stdlib@go1.24.0
1.26.10

Open the chart page →

1,284
prometheus-mongodb-exporterprometheus-communityVerified publisher3.22.01 of 1See more

prometheus-mongodb-exporter prometheus-community 3.22.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
percona/mongodb_exporter:0.53.00214e482b2cd
stdlib@go1.26.2
1.26.10

Open the chart page →

637
node-local-dnsdeliveryheroVerified publisher2.9.31 of 1See more

node-local-dns deliveryhero 2.9.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.27.16748acde83ac
stdlib@go1.26.8
1.26.10

Open the chart page →

1,657
dragonflydragonflyVerified publisher1.8.62 of 3See more

dragonfly dragonfly 1.8.6

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.59fe2a1d6206f
stdlib@go1.26.5
1.26.10
dragonflyoss/scheduler:v2.5.2d5dea9e662cd
stdlib@go1.25.5
1.26.10

Open the chart page →

5,509
fission-allfission-chartsOfficialVerified publisher1.27.03 of 3See more

fission-all fission-charts 1.27.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/fission/fission-bundle:v1.27.0d353720b037a
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
ghcr.io/fission/pre-upgrade-checks:v1.27.0b053fc3539b4
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
ghcr.io/fission/reporter:v1.27.0c77cc925debe
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10

Open the chart page →

1,318

Container images carrying it

6,681 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/open-cluster-management/argocd-pull-integration:0.30.0683ae238f351
stdlib@go1.26.8
1.26.10
2
quay.io/open-cluster-management/registration-operator:v1.4.0dd9699e34ce7
stdlib@go1.26.8
1.26.10
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
stdlib@go1.15.14
1.26.10
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
stdlib@go1.16.12
1.26.10
2
quay.io/openshift/origin-cli:lateste7965645fac6
stdlib@go1.26.7
1.26.10
2
quay.io/openshift/origin-csi-livenessprobe:latesta6341950c413
stdlib@go1.24.6
1.26.10
2
quay.io/opstree/redis-operator:v0.22.2464ac61a6eb4
stdlib@go1.23.12
1.26.10
2
quay.io/prometheus/blackbox-exporter:v0.24.03af31f8bd1ad
stdlib@go1.20.4
1.26.10
2
quay.io/prometheus/blackbox-exporter:latest:v0.28.0e753ff9f3fc4
stdlib@go1.25.5
1.26.10
2
quay.io/prometheuscommunity/elasticsearch-exporter:v1.11.0a056739b095d
stdlib@go1.26.5
1.26.10
2
quay.io/prometheuscommunity/json-exporter:v0.7.03a777171d39a
stdlib@go1.23.6
1.26.10
2
quay.io/prometheus/node-exporter:v1.3.023ff46c728b9
stdlib@go1.17.3
1.26.10
2
quay.io/prometheus/node-exporter:v1.11.1-distroless6112664fd761
stdlib@go1.26.1
1.26.10
2
quay.io/prometheus/node-exporter:v1.0.08a3a33cad0bd
stdlib@go1.14.3
1.26.10
2
quay.io/prometheus/node-exporter:v1.3.1f2269e73124d
stdlib@go1.17.3
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
stdlib@go1.20.6
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
stdlib@go1.23.4
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
stdlib@go1.23.3
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
stdlib@go1.23.2
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
stdlib@go1.25.6
1.26.10
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
stdlib@go1.22.3
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
stdlib@go1.14.12
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
stdlib@go1.25.9
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
stdlib@go1.23.2
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.83.0b6a89b8ec08f
stdlib@go1.24.3
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.88.1d3d65efa3bee
stdlib@go1.25.6
1.26.10
2
quay.io/prometheus-operator/prometheus-operator:v0.77.1dde69a8b6f4b
stdlib@go1.23.1
1.26.10
2
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
stdlib@go1.22.4
1.26.10
2
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
stdlib@go1.26.5
1.26.10
2
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
stdlib@go1.23.4
1.26.10
2
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
stdlib@go1.15.3
1.26.10
2
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
stdlib@go1.21.0
1.26.10
2
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
stdlib@go1.18.3
1.26.10
2
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
stdlib@go1.25.3
1.26.10
2
quay.io/prometheus/pushgateway:v1.6.2979a69ab4a40
stdlib@go1.21.1
1.26.10
2
quay.io/prometheus/pushgateway:v1.11.099392035ae99
stdlib@go1.23.4
1.26.10
2
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
stdlib@go1.15.15
1.26.10
2
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
stdlib@go1.24.0
1.26.10
2
quay.io/zncdatadev/sig-storage/livenessprobe:v2.14.033692aed26aa
stdlib@go1.22.5
1.26.10
2
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
stdlib@go1.22.6
1.26.10
2
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk:v19.5.049dd7b857f3e
stdlib@go1.27.1
1.26.10
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
stdlib@go1.24.11
1.26.10
2
registry.k8s.io/etcd:3.5.6-0dd75ec974b0a
stdlib@go1.16.15
1.26.10
2
registry.k8s.io/ingress-nginx/controller:v1.9.45b161f051d01
stdlib@go1.21.3
1.26.10
2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
stdlib@go1.24.4
1.26.10
2
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
stdlib@go1.21.5
1.26.10
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
stdlib@go1.24.1
1.26.10
2
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.10
2
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
stdlib@go1.19.5
1.26.10
2
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
stdlib@go1.19.5
1.26.10
2

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.