StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
simple-gowikimy-helm-chartsVerified publisher0.2.01 of 1See more

simple-gowiki my-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
forchaladtest/mygowiki:1.0.170827eaecad1
stdlib@go1.22.6
1.26.10

Open the chart page →

840
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
rustls-webpki@0.103.13
0.103.16

Open the chart page →

2,267
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
stdlib@go1.18.1
1.26.10

Open the chart page →

4,911
beszelnatpnk-k8s1.0.02 of 2See more

beszel natpnk-k8s 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
henrygd/beszel:latest6b39a8b64f9b
stdlib@go1.27.1
1.26.10
henrygd/beszel-agent:latestf27b1aa2c684
stdlib@go1.27.1
1.26.10

Open the chart page →

467
nats-account-servernatsVerified publisher0.8.11 of 1See more

nats-account-server nats 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
stdlib@go1.16.6
1.26.10

Open the chart page →

3,707
surveyornatsVerified publisher0.20.101 of 1See more

surveyor nats 0.20.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
natsio/nats-surveyor:0.9.117d0ca8d7ec52
stdlib@go1.26.4
1.26.10

Open the chart page →

509
natz-operatornatz-operatorVerified publisher0.9.51 of 1See more

natz-operator natz-operator 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/zeiss/natz-operator/operator:0.9.5187007974540
stdlib@go1.23.3
1.26.10

Open the chart page →

1,316
spring-helmnaveenalla-springboot1.0.01 of 2See more

spring-helm naveenalla-springboot 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:latest74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

1,742
clowder2ncsaVerified publisher1.9.76 of 12See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
stdlib@go1.21.8
1.26.10
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
stdlib@go1.18.2
1.26.10
bitnamilegacy/minio:2023.12.230b60b6565ab2
stdlib@go1.20.13
1.26.10
bitnamilegacy/mongodb:5.0.103bb1deeaf9d0
stdlib@go1.18.4
1.26.10
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
stdlib@go1.21.7
1.26.10
bitnamilegacy/rabbitmq:3.10.88f7161d8ce19
stdlib@go1.16.7
1.26.10

Open the chart page →

120,451
netbox-operatornetboxOfficialVerified publisher1.2.1951 of 1See more

netbox-operator netbox 1.2.195

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox-operator:0.2.75d23e28ef483b
stdlib@go1.27.2
1.26.10

Open the chart page →

5
netobserv-operatornetobservOfficialVerified publisher2.0.11 of 1See more

netobserv-operator netobserv 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/netobserv/network-observability-operatordigest-pinnedc05814f8d633
stdlib@go1.26.8
1.26.10

Open the chart page →

303
cluster-issuersnginx-cert-charts0.3.04 of 4See more

cluster-issuers nginx-cert-charts 0.3.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.19.3eb1df56668b6
stdlib@go1.25.6
1.26.10
quay.io/jetstack/cert-manager-controller:v1.19.3a07125af5e83
stdlib@go1.25.6
1.26.10
quay.io/jetstack/cert-manager-startupapicheck:v1.19.3e51a06251338
stdlib@go1.25.6
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.19.32625754083d5
stdlib@go1.25.6
1.26.10

Open the chart page →

4,064
ngrok-operatorngrok-operator1.1.01 of 2See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
zufardhiyaulhaq/ngrok-operator:v1.3.07cf2ae3fb1fb
stdlib@go1.16.15
1.26.10

Open the chart page →

2,987
cloud9nicholaswildeVerified publisher1.0.01 of 1See more

cloud9 nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
linuxserver/cloud9:version-1.29.245c5fe102ff3
stdlib@go1.17.11
1.26.10

Open the chart page →

13,237
gotifynicholaswildeVerified publisher1.0.01 of 1See more

gotify nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gotify/server-arm7:2.0.23d91e302ad1d0
stdlib@go1.16
1.26.10

Open the chart page →

4,018
installernicholaswildeVerified publisher1.0.01 of 1See more

installer nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/installer:version-0.2.947d8ecd310a9
stdlib@go1.15.3
1.26.10

Open the chart page →

2,295
shiorinicholaswildeVerified publisher1.0.11 of 1See more

shiori nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/shiori:version-v1.5.0e0645abe6777
stdlib@go1.16.5
1.26.10

Open the chart page →

3,526
writefreelynicholaswildeVerified publisher1.0.01 of 1See more

writefreely nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/writefreely:version-0.13.1c3c8481b7e56
stdlib@go1.15.12
1.26.10

Open the chart page →

9,683
node-exporternode-exporterVerified publisher0.1.101 of 1See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/node-exporter:v1.6.0d2e48098c364
stdlib@go1.20.4
1.26.10

Open the chart page →

1,978
northscopenorthscopeVerified publisher1.2.01 of 1See more

northscope northscope 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/emircanagac/northscope:1.2.0e7477c2bea2a
stdlib@go1.27.2
1.26.10

Open the chart page →

5
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
stdlib@go1.16.7
1.26.10

Open the chart page →

15,746
nri-resource-policy-balloonsnri-pluginsOfficialVerified publisher0.15.01 of 1See more

nri-resource-policy-balloons nri-plugins 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-balloons:v0.15.0bacbef6f002f
stdlib@go1.26.0
1.26.10

Open the chart page →

564
nri-resource-policy-topology-awarenri-pluginsOfficialVerified publisher0.15.01 of 1See more

nri-resource-policy-topology-aware nri-plugins 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/containers/nri-plugins/nri-resource-policy-topology-aware:v0.15.03e7d3aa02b73
stdlib@go1.26.0
1.26.10

Open the chart page →

564
nutanix-csi-snapshotnutanix-helm-releasesOfficialVerified publisher8.3.01 of 1See more

nutanix-csi-snapshot nutanix-helm-releases 8.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v8.3.012c2da094b02
stdlib@go1.24.2
1.26.10

Open the chart page →

957
nvidia-gpu-exporternvidia-gpu-exporterVerified publisher2.15.11 of 1See more

nvidia-gpu-exporter nvidia-gpu-exporter 2.15.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
utkuozdemir/nvidia_gpu_exporter:1.15.17aee2d42836a
stdlib@go1.27.1
1.26.10

Open the chart page →

522
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.34 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats:2.11.9-alpine777787bbb4c7
stdlib@go1.24.7
1.26.10
natsio/nats-box:0.18.0abdc9f9f0120
stdlib@go1.24.3
1.26.10
natsio/nats-server-config-reloader:0.19.181edf32a3680
stdlib@go1.24.5
1.26.10
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
stdlib@go1.24.3
1.26.10

Open the chart page →

8,528
oadaoadaVerified publisher5.0.61 of 11See more

oada oada 5.0.6

1 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
stdlib@go1.19.3
1.26.10

Open the chart page →

15,534
opengistobeoneVerified publisher1.1.61 of 1See more

opengist obeone 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/thomiceli/opengist:1.15.1038d47937d3b
stdlib@go1.26.5
1.26.10

Open the chart page →

850
transfer.shobeoneVerified publisher1.0.51 of 1See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dutchcoders/transfer.sh:v1.6.1-noroot8db9ade72a0d
stdlib@go1.20.11
1.26.10

Open the chart page →

1,892
oci-native-ingress-controlleroci-native-ingress-controller1.0.01 of 1See more

oci-native-ingress-controller oci-native-ingress-controller 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amaanx86/oci-native-ingress-controller:masterd7206ac7a319
stdlib@go1.23.7
1.26.10

Open the chart page →

975
ociregistryociregistryVerified publisher1.20.01 of 1See more

ociregistry ociregistry 1.20.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/appzygy/ociregistry:1.20.052cfc157ed62
stdlib@go1.27.1
1.26.10

Open the chart page →

232
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.10

Open the chart page →

1,437
oom-oracleoom-oracleVerified publisher0.1.21 of 1See more

oom-oracle oom-oracle 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ethan-kane-ops/k8s-pod-oom-oracle:0.1.2538ed30a4c62
stdlib@go1.26.8
1.26.10

Open the chart page →

239
open5gs-hssopen5gs-hssVerified publisher2.3.31 of 2See more

open5gs-hss open5gs-hss 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mongodb:latest101ca7755158
stdlib@go1.26.8
1.26.10

Open the chart page →

417
open5gs-pcrfopen5gs-pcrfVerified publisher2.3.31 of 2See more

open5gs-pcrf open5gs-pcrf 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mongodb:latest101ca7755158
stdlib@go1.26.8
1.26.10

Open the chart page →

417
open5gs-scpopen5gs-scpVerified publisher2.3.41 of 2See more

open5gs-scp open5gs-scp 2.3.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mongodb:latest101ca7755158
stdlib@go1.26.8
1.26.10

Open the chart page →

417
open5gs-udropen5gs-udrVerified publisher2.3.41 of 2See more

open5gs-udr open5gs-udr 2.3.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mongodb:latest101ca7755158
stdlib@go1.26.8
1.26.10

Open the chart page →

417
open5gs-webuiopen5gs-webuiVerified publisher2.3.31 of 2See more

open5gs-webui open5gs-webui 2.3.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:4.4.14fe2bd7b4036
stdlib@go1.15.1
1.26.10

Open the chart page →

7,191
openccuopenccuVerified publisher3.89.111 of 1See more

openccu openccu 3.89.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.11.202609193cfcb30e1921
stdlib@go1.26.6
1.26.10

Open the chart page →

1,957
kruiseopenkruise1.9.22 of 2See more

kruise openkruise 1.9.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openkruise/kruise-helm-hook:v0.1.0edc7cf9428fd
stdlib@go1.20.14
1.26.10
openkruise/kruise-manager:v1.9.29e3a866133b5
stdlib@go1.23.9
1.26.10

Open the chart page →

2,736
openobserveopenobserve1.0.25 of 6See more

openobserve openobserve 1.0.2

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats:2.14.2-alpine952d157e28d5
stdlib@go1.26.3
1.26.10
natsio/nats-box:0.19.7ffce8bd10338
stdlib@go1.26.3
1.26.10
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.10
natsio/prometheus-nats-exporter:0.20.14fbf6dacb847
stdlib@go1.26.3
1.26.10
openfga/openfga:latest9cf9a20af32a
ca-certificates@20260909-r2
stdlib@go1.26.8
20260909-r3
1.26.10

Open the chart page →

4,591
openrouter-botopenrouter-botVerified publisher0.2.01 of 1See more

openrouter-bot openrouter-bot 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lifailon/openrouter-bot:latestea37e4b6b952
stdlib@go1.25.0
1.26.10

Open the chart page →

1,492
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
stdlib@go1.25.7
1.26.10

Open the chart page →

6,893
openstack-kamaji-clusteropenstack-kamaji-clusterVerified publisher0.2.41 of 1See more

openstack-kamaji-cluster openstack-kamaji-cluster 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
stdlib@go1.24.7
1.26.10

Open the chart page →

1,296
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.610 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.6

10 of the 34 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.2-distroless69a5d2d957ca
stdlib@go1.26.7
1.26.10
jaegertracing/jaeger:2.20.046a886260e04
stdlib@go1.26.5
1.26.10
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.10
otel/opentelemetry-collector-contrib:0.160.0799dc6cf12c9
stdlib@go1.26.8
1.26.10
ghcr.io/open-feature/flagd:v0.16.032234e63c1d0
stdlib@go1.25.10
1.26.10
ghcr.io/open-telemetry/demo:3.1.0-cart17c881cf29af
stdlib@go1.26.8
1.26.10
ghcr.io/open-telemetry/demo:3.1.0-opamp-server3b6c6220bf9c
stdlib@go1.27.1
1.26.10
ghcr.io/open-telemetry/demo:3.1.0-product-catalog7578cbf65fa4
stdlib@go1.27.1
1.26.10
ghcr.io/open-telemetry/demo:3.1.0-checkoutd4448ff54129
stdlib@go1.26.8
1.26.10
quay.io/prometheus/prometheus:v3.14.05ce7540c3c00
stdlib@go1.26.6
1.26.10

Open the chart page →

27,946
openvaultopenvaultVerified publisher0.9.01 of 2See more

openvault openvault 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
stdlib@go1.23.7
1.26.10

Open the chart page →

61,541
openvox-operatoropenvox-operatorVerified publisher0.14.01 of 1See more

openvox-operator openvox-operator 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/slauger/openvox-operator:0.14.0178b6dab6c8c
stdlib@go1.27.1
1.26.10

Open the chart page →

296
opikopikOfficialVerified publisher2.2.1136 of 12See more

opik opik 2.2.113

6 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.0862d86046bbc
stdlib@go1.25.5
1.26.10
altinity/clickhouse-operator:0.27.1a802b3a19d20
stdlib@go1.26.3
1.26.10
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
stdlib@go1.25.7
1.26.10
library/mysql:8.4.2ac80b6e09e5b
stdlib@go1.18.2
1.26.10
library/zookeeper:3.9.4dfa9ba46d14b
stdlib@go1.18.1
1.26.10
ghcr.io/comet-ml/opik/opik-python-backend:2.2.113f3a2e4690a27
stdlib@go1.26.8
1.26.10

Open the chart page →

16,715
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest35575d4f2bfe
stdlib@go1.24.13
1.26.10
shaowenchen/ops-server:latest6bac5cebd125
stdlib@go1.24.9
1.26.10

Open the chart page →

97,701
orbitalregorbitalregVerified publisher0.4.23 of 5See more

orbitalreg orbitalreg 0.4.2

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.10
orbitalreg/orbitalreg-api:0.4.2e6e12f7e471a
stdlib@go1.25.14
1.26.10
orbitalreg/orbitalreg-scanner:0.4.27497639e8edd
stdlib@go1.26.4-X:jsonv2
1.26.10

Open the chart page →

5,836

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
stdlib@go1.23.10
1.26.10
2
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
stdlib@go1.23.10
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.009a36e2be1db
stdlib@go1.18.3
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.7.0a15ca437f230
stdlib@go1.19.3
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.10.1af8220f53493
stdlib@go1.20.10
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.6.0bdab4e49d71d
stdlib@go1.18.5
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.15.0db384bf43222
stdlib@go1.23.5
1.26.10
2
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.10.0ec5d6f6be228
stdlib@go1.20.7
1.26.10
2
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
stdlib@go1.24.4
1.26.10
2
registry.k8s.io/sig-storage/csi-attacher:v4.9.05aaefc24f315
stdlib@go1.24.2
1.26.10
2
registry.k8s.io/sig-storage/csi-attacher:v3.4.08b9c313c05f5
stdlib@go1.17.3
1.26.10
2
registry.k8s.io/sig-storage/csi-attacher:v4.0.09a685020911e
stdlib@go1.18
1.26.10
2
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
stdlib@go1.25.7
1.26.10
2
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
stdlib@go1.24.6
1.26.10
2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.04fd21f36075b
stdlib@go1.17.3
1.26.10
2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.0cd21e19cd8bb
stdlib@go1.20.5
1.26.10
2
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.0f1c25991bac2
stdlib@go1.18
1.26.10
2
registry.k8s.io/sig-storage/csi-provisioner:v3.1.0122bfb8c1eda
stdlib@go1.17.3
1.26.10
2
registry.k8s.io/sig-storage/csi-provisioner:v6.2.06be9f63ca4ca
stdlib@go1.25.7
1.26.10
2
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
stdlib@go1.24.6
1.26.10
2
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
stdlib@go1.24.6
1.26.10
2
registry.k8s.io/sig-storage/csi-resizer:v2.3.048fb3deb93cd
stdlib@go1.26.6
1.26.10
2
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
stdlib@go1.17.3
1.26.10
2
registry.k8s.io/sig-storage/csi-snapshotter:v8.3.0bc7be893ecc3
stdlib@go1.24.2
1.26.10
2
registry.k8s.io/sig-storage/livenessprobe:v2.15.02c5f9dc4ea5a
stdlib@go1.23.1
1.26.10
2
registry.k8s.io/sig-storage/livenessprobe:v2.12.05baeb4a6d7d5
stdlib@go1.21.5
1.26.10
2
registry.k8s.io/sig-storage/livenessprobe:v2.8.0cacee2b5c36d
stdlib@go1.18
1.26.10
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
stdlib@go1.26.4
1.26.10
2
registry.k8s.io/sig-storage/snapshot-controller:v8.3.012c2da094b02
stdlib@go1.24.2
1.26.10
2
0xpolygon/bor:1.3.7396d3de26d8b
stdlib@go1.22.1
1.26.10
1
0xpolygon/heimdall:1.0.134ddf259993c
stdlib@go1.20.5
1.26.10
1
1dev/server:11.9.0cd5b12fe5471
stdlib@go1.23.8
1.26.10
1
1password/connect-api:1.8.3656e4b10df83
ca-certificates@20260611-r1
stdlib@go1.26.8
20260909-r3
1.26.10
1
1password/connect-api:1.7.26aa94cf713f9
stdlib@go1.20.6
1.26.10
1
1password/connect-sync:1.8.3a760350c941a
ca-certificates@20260611-r1
stdlib@go1.26.8
20260909-r3
1.26.10
1
1password/connect-sync:1.7.2fe527ed9d81f
stdlib@go1.20.6
1.26.10
1
1password/kubernetes-secrets-injector:1.0.25884757f7879
stdlib@go1.20.5
1.26.10
1
42wim/matterircd:lateste758126fef91
stdlib@go1.27.2
1.26.10
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
stdlib@go1.26.3
1.26.10
1
aavishay/right-sizer:0.6.23d7c4d79595c
stdlib@go1.25.8
1.26.10
1
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
stdlib@go1.25.1
1.26.10
1
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
stdlib@go1.21.4
1.26.10
1
aboogie/login_test_backend:new9c41a4483ac8
stdlib@go1.22.5
1.26.10
1
absaoss/terraform-controller:v0.0.20ad538a1285a0
stdlib@go1.14.8
1.26.10
1
acryldata/datahub-actions:v1.7.0.1c5fd70130157
ca-certificates@20260611-r1
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
20260909-r3
0.103.16
1.0.10
1
acryldata/datahub-frontend-react:v1.7.0.199513cc1c45e
ca-certificates@20260611-r1
20260909-r3
1
acryldata/datahub-upgrade:v1.7.0.1c3db54d8fb94
ca-certificates@20260611-r1
20260909-r3
1
activepieces/activepieces:0.92.326daa5e1807f
stdlib@go1.23.5
1.26.10
1
adeptiainc/adeptia-connect-rabbitmq-cluster-operator:4.823d259e0c93e
stdlib@go1.23.5
1.26.10
1
adeptiainc/adeptia-connect-rabbitmq-cluster-operator:5.2cf610f8c614c
stdlib@go1.25.7
1.26.10
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.