StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,365
of 18,232 indexed, latest versions
Container images
6,268
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,365 of 18,232 indexed charts deploy, on 6,268 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,155
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3118
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1693
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1065
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,365 by stars
ChartLatestAffected imagesRadar Score
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
stdlib@go1.13.10
1.26.10

Open the chart page →

15,724
conjur-k8s-csi-providerconjure0.2.91 of 1See more

conjur-k8s-csi-provider conjure 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cyberark/conjur-k8s-csi-provider:latest737a967088d9
stdlib@go1.26.5
1.26.10

Open the chart page →

645
consentbbconsentbbVerified publisher2023.12.41 of 5See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
stdlib@go1.18.8
1.26.10

Open the chart page →

4,076
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
stdlib@go1.13.10
1.26.10

Open the chart page →

9,186
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
stdlib@go1.13.10
1.26.10

Open the chart page →

11,108
agent-forge-operatorcontainerooVerified publisher1.2.31 of 1See more

agent-forge-operator containeroo 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/containeroo/agent-forge-operator:v1.2.32cec21162d6d
stdlib@go1.26.0
1.26.10

Open the chart page →

680
autovpacontainerooVerified publisher0.4.21 of 1See more

autovpa containeroo 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/containeroo/autovpa:v0.0.3425b801d8d1f7
stdlib@go1.26.0
1.26.10

Open the chart page →

719
cert-manager-webhook-bluecatcontainerooVerified publisher1.0.21 of 1See more

cert-manager-webhook-bluecat containeroo 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/containeroo/cert-manager-webhook-bluecat:latest96f82d5840d4
stdlib@go1.26.0
1.26.10

Open the chart page →

909
filesystem-exportercontainerooVerified publisher1.5.21 of 1See more

filesystem-exporter containeroo 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/containeroo/filesystem-exporter:v1.5.2a66121e16d4e
stdlib@go1.26.1
1.26.10

Open the chart page →

1,724
kube-ephemeral-container-exportercontainerooVerified publisher0.2.31 of 1See more

kube-ephemeral-container-exporter containeroo 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/containeroo/kube-ephemeral-container-exporter:v0.0.14b238f3c58d83
stdlib@go1.26.0
1.26.10

Open the chart page →

719
terrascalercontainerooVerified publisher0.1.01 of 1See more

terrascaler containeroo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/containeroo/terrascaler:v0.1.0b152a8514bd3
stdlib@go1.26.3
1.26.10

Open the chart page →

507
containers-security-chartscontainers-security0.1.03 of 7See more

containers-security-charts containers-security 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
falcosecurity/falco-driver-loader:0.33.11fe583eee4af
stdlib@go1.18.6
1.26.10
falcosecurity/falco-no-driver:0.33.10d427b8d5fc6
stdlib@go1.18.6
1.26.10
falcosecurity/falcosidekick:2.27.0828ee36cb13a
stdlib@go1.18.1
1.26.10

Open the chart page →

12,421
falcocontainers-security2.4.62 of 2See more

falco containers-security 2.4.6

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
falcosecurity/falco-driver-loader:0.33.11fe583eee4af
stdlib@go1.18.6
1.26.10
falcosecurity/falco-no-driver:0.33.10d427b8d5fc6
stdlib@go1.18.6
1.26.10

Open the chart page →

4,516
homeboxcoo-ops-spaceVerified publisher0.1.61 of 1See more

homebox coo-ops-space 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/hay-kot/homebox:v0.9.2e6e0fbd7cca9
stdlib@go1.20.4
1.26.10

Open the chart page →

2,638
coordimap-agentcoordimap-agentVerified publisher0.4.31 of 1See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
coordimap/coordimap-agent:latest7748fd0fae9f
stdlib@go1.26.4
1.26.10

Open the chart page →

1,203
cortex-proxycortex-proxyVerified publisher0.4.11 of 1See more

cortex-proxy cortex-proxy 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/observability-tenancy/cortex-proxy:0.4.11838720c13b2
ca-certificates@20250619-r5
stdlib@go1.24.6
20260909-r3
1.26.10

Open the chart page →

960
cortezacorteza1.1.02 of 3See more

corteza corteza 1.1.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
stdlib@go1.24.1
1.26.10
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
stdlib@go1.23.5
1.26.10

Open the chart page →

10,317
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
stdlib@go1.19.13
1.26.10

Open the chart page →

5,777
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
stdlib@go1.25.0
1.26.10

Open the chart page →

2,960
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
stdlib@go1.22.12
1.26.10

Open the chart page →

2,609
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
stdlib@go1.20.3
1.26.10

Open the chart page →

4,550
dev-code-servercosmoVerified publisher0.0.72 of 2See more

dev-code-server cosmo 0.0.7

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/docker:dind3e5756e2b6da
stdlib@go1.26.9
1.26.10
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
stdlib@go1.22.5
1.26.10

Open the chart page →

72,998
cospacecospace0.0.343 of 3See more

cospace cospace 0.0.34

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/redis:latestf4797b37502e
stdlib@go1.26.8
1.26.10
library/mariadb:latestf1bba652ba57
stdlib@go1.26.7
1.26.10
ghcr.io/twigex/cospace:lateste5ecfd607e42
stdlib@go1.24.6
1.26.10

Open the chart page →

5,184
couchbase-monitor-stackcouchbaseVerified publisher2.1.22 of 5See more

couchbase-monitor-stack couchbase 2.1.2

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:8.1.5b7dd9cd0e59d
stdlib@go1.16.1
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
stdlib@go1.16
1.26.10

Open the chart page →

9,587
grafana-mcpcowboysysopVerified publisher2.0.01 of 1See more

grafana-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mcp/grafana:latest9362bcf6aa0e
stdlib@go1.26.5
1.26.10

Open the chart page →

1,702
katibcowboysysopVerified publisher2.4.23 of 4See more

katib cowboysysop 2.4.2

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
stdlib@go1.17.1
1.26.10
kubeflowkatib/katib-db-manager:v0.12.0db88bf09d88e
stdlib@go1.13.3
1.26.10
kubeflowkatib/katib-ui:v0.12.0129f0aaba976
stdlib@go1.17.1
1.26.10

Open the chart page →

10,243
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kfserving/kfserving-controller:v0.6.163d79d04c2e3
stdlib@go1.14.14
1.26.10

Open the chart page →

5,547
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
stdlib@go1.24.5
1.26.10

Open the chart page →

2,608
mariadbcowboysysopVerified publisher20.4.21 of 1See more

mariadb cowboysysop 20.4.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
stdlib@go1.23.7
1.26.10

Open the chart page →

3,836
metacontrollercowboysysopVerified publisher1.2.21 of 1See more

metacontroller cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
metacontrollerio/metacontroller:v2.1.10336993b88e4
stdlib@go1.17.6
1.26.10

Open the chart page →

3,218
mongodbcowboysysopVerified publisher15.1.51 of 1See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
stdlib@go1.20.12
1.26.10

Open the chart page →

8,112
mpi-operatorcowboysysopVerified publisher1.2.21 of 1See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mpioperator/mpi-operator:0.3.03ccfa8d8b7bf
stdlib@go1.15.13
1.26.10

Open the chart page →

3,922
notebook-controllercowboysysopVerified publisher1.1.21 of 1See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller:v1.4cac3ed9a9826
stdlib@go1.15.15
1.26.10

Open the chart page →

3,962
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
stdlib@go1.13.1
1.26.10

Open the chart page →

7,081
rediscowboysysopVerified publisher21.2.61 of 1See more

redis cowboysysop 21.2.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.0.2-debian-12-r4cdc2efa9c306
stdlib@go1.24.4
1.26.10

Open the chart page →

3,225
training-operatorcowboysysopVerified publisher1.2.21 of 1See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
stdlib@go1.14.9
1.26.10

Open the chart page →

3,548
crabka-operatorcrabka0.4.01 of 1See more

crabka-operator crabka 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/robot-head/crabka-operator:0.4.07a79c146bfa7
ca-certificates@20260413-r1
20260909-r3

Open the chart page →

32
crashloop-operatorcrashloop-operator0.0.61 of 1See more

crashloop-operator crashloop-operator 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/yeonghoo2/crashloop-operator:0.0.6565d1115e6bd
stdlib@go1.24.9
1.26.10

Open the chart page →

1,007
chalkularcrashoverride-helm-chartsVerified publisher0.0.81 of 1See more

chalkular crashoverride-helm-charts 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/crashappsec/chalkular-controller:v0.0.8d31986456626
stdlib@go1.26.6
1.26.10

Open the chart page →

298
crossplane-controllerscrossplane0.12.01 of 1See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crossplane/crossplane:v0.12.066666e6963af
stdlib@go1.14.4
1.26.10

Open the chart page →

3,617
oam-kubernetes-runtimecrossplane0.0.3-71.g0f235901 of 2See more

oam-kubernetes-runtime crossplane 0.0.3-71.g0f23590

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crossplane/oam-kubernetes-runtime:v0.0.3-71.g0f235900112171c45e3
stdlib@go1.13.14
1.26.10

Open the chart page →

3,527
oam-kubernetes-runtime-legacycrossplane0.3.1-5.g11e18941 of 1See more

oam-kubernetes-runtime-legacy crossplane 0.3.1-5.g11e1894

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crossplane/oam-kubernetes-runtime:v0.3.1-5.g11e189407b8b410dc76
stdlib@go1.13.15
1.26.10

Open the chart page →

3,498
external-service-operatorcrowdfox0.1.01 of 1See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crowdfox/external-service-operator:v1.1.06fa7e8063d27
stdlib@go1.14.2
1.26.10

Open the chart page →

5,964
electric-mailcryptexlabsVerified publisher0.0.12 of 5See more

electric-mail cryptexlabs 0.0.1

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
stdlib@go1.16.7
1.26.10
hashicorp/vault-k8s:0.13.1bebb03e8e800
stdlib@go1.16.3
1.26.10

Open the chart page →

8,476
iam-zencryptexlabsVerified publisher0.12.231 of 4See more

iam-zen cryptexlabs 0.12.23

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
stdlib@go1.24.5
1.26.10

Open the chart page →

4,786
purple-piecryptexlabsVerified publisher0.0.12 of 4See more

purple-pie cryptexlabs 0.0.1

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
stdlib@go1.16.7
1.26.10
hashicorp/vault-k8s:0.13.1bebb03e8e800
stdlib@go1.16.3
1.26.10

Open the chart page →

8,476
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.10

Open the chart page →

21,665
agent-sandboxcsghubVerified publisher0.5.61 of 1See more

agent-sandbox csghub 0.5.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.6dc23fb0d5624
stdlib@go1.26.6
1.26.10

Open the chart page →

269
csghubcsghubVerified publisher2.6.026 of 35See more

csghub csghub 2.6.0

26 of the 35 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
stdlib@go1.25.8
1.26.10
envoyproxy/gateway:v1.7.5156b7d32c73b
stdlib@go1.26.5
1.26.10
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.26.10
library/nats:2.12.150764f1952d72
stdlib@go1.25.12
1.26.10
library/registry:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.26.10
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
stdlib@go1.19.8
1.26.10
opencsghq/csgbot:v0.6.9-ee7d0271e26521
rustls-webpki@0.103.13
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
opencsghq/csghub-portal:v2.6.0-eeea2b372053a5
stdlib@go1.23.3
1.26.10
opencsghq/csghub-server:v2.6.0-ee6dcb37a52db3
stdlib@go1.26.0
1.26.10
opencsghq/csghub-xnet:v2.6.0-ee2aefb4393ddf
stdlib@go1.24.10
1.26.10
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
stdlib@go1.22.7
1.26.10
opencsghq/gitlab-shell:v19.2.580a65ac370da
stdlib@go1.26.4
1.26.10
opencsghq/kube-state-metrics:v2.19.15ea147562ec8
stdlib@go1.26.4
1.26.10
opencsghq/lws:v0.6.1de15437db41b
stdlib@go1.24.0
1.26.10
opencsghq/minio:RELEASE.2025-09-07T16-13-09Z47f08843cf13
stdlib@go1.24.6
1.26.10
opencsghq/postgres:15.19b98600564e07
stdlib@go1.24.6
1.26.10
opencsghq/prometheus:v3.13.00aac0d04749e
stdlib@go1.26.4
1.26.10
opencsghq/prometheus-config-reloader:v0.92.144e6ec00729b
stdlib@go1.26.4
1.26.10
opencsghq/stakater-reloader:v1.4.190491782f7bac
stdlib@go1.26.4
1.26.10
temporalio/admin-tools:1.32.0a9f84fb9a374
stdlib@go1.26.8
1.26.10
temporalio/server:1.32.0c3e752127759
stdlib@go1.26.8
1.26.10
gcr.io/knative-releases/knative.dev/operator/cmd/operator:v1.22.3733f21dc06f9
stdlib@go1.26.4
1.26.10
gcr.io/knative-releases/knative.dev/operator/cmd/webhook:v1.22.366ae76179a80
stdlib@go1.26.4
1.26.10
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
stdlib@go1.25.5
1.26.10
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
stdlib@go1.25.5
1.26.10
registry.k8s.io/agent-sandbox/agent-sandbox-controller:v0.5.4be477ba317d8
stdlib@go1.26.5
1.26.10

Open the chart page →

69,602
csgshipcsghubVerified publisher0.4.74 of 10See more

csgship csghub 0.4.7

4 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
stdlib@go1.25.8
1.26.10
envoyproxy/gateway:v1.7.5156b7d32c73b
stdlib@go1.26.5
1.26.10
opencsghq/postgres:15.19b98600564e07
stdlib@go1.24.6
1.26.10
opencsghq/stakater-reloader:v1.4.190491782f7bac
stdlib@go1.26.4
1.26.10

Open the chart page →

15,332

Container images carrying it

6,268 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
agentarea/agentarea-events:0.1.1:latesta2e96fe8ebd0
stdlib@go1.26.9
1.26.10
1
agentarea/agentarea-mcp-manager:0.1.1:latest377d326784f9
stdlib@go1.22.5
1.26.10
1
agentarea/agentarea-mcp-runner:0.1.1:latest066fa4a71695
stdlib@go1.19.8
1.26.10
1
aibrix/controller-manager:v0.8.0e60852f2bffb
stdlib@go1.22.12
1.26.10
1
aibrix/gateway-plugins:v0.8.0ef677998057d
stdlib@go1.22.12
1.26.10
1
airbyte/db:2.4.091f7b485f019
stdlib@go1.24.6
1.26.10
1
airbyte/minio:RELEASE.2023-11-20T22-40-07Zfdae972eaf0e
stdlib@go1.21.4
1.26.10
1
airbyte/pod-sweeper:1.5.198d2c39d512e
stdlib@go1.23.4
1.26.10
1
ajilaag/clamav-rest:latestad689c7b75b1
stdlib@go1.26.0
1.26.10
1
akeyless/akeyless-csi-provider:lateste48bddc5dd72
stdlib@go1.26.4
1.26.10
1
akeyless/base:latest759e4289fae8
stdlib@go1.26.3
1.26.10
1
akeyless/base-rhel:0.0.14ba8900a0061
stdlib@go1.22.1
1.26.10
1
akeyless/gateway:5.5.30f582fc294a0
stdlib@go1.26.6
1.26.10
1
akeyless/k8s-webhook-server:0.39.0996cd9afb3b4
stdlib@go1.26.4
1.26.10
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
stdlib@go1.22.5
1.26.10
1
aktosecurity/akto-threat-detection-backend:1.18.75a0c66e59678
stdlib@go1.26.7
1.26.10
1
aktosecurity/akto-threat-detection-backend:latestbdf060b0c11b
stdlib@go1.27.1
1.26.10
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
stdlib@go1.26.3
1.26.10
1
aktosecurity/guardrails-service:2.40.875f8d87ec4d9
stdlib@go1.25.14
1.26.10
1
aktosecurity/guardrails-service:2.14.8a6218d07e84f
stdlib@go1.25.14
1.26.10
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
stdlib@go1.26.5
1.26.10
1
aktosecurity/mirror-api-logging:api-gateway-logging-openapi12ed2544756f
stdlib@go1.23.3
1.26.10
1
aktosecurity/mirror-api-logging:api-gateway-logging-multi-logging1a1bc76d50fe
stdlib@go1.23.3
1.26.10
1
aktosecurity/mirror-api-logging:k8s_ebpf3e506f5e5f47
stdlib@go1.26.5
1.26.10
1
alazidis/stornx:1.1.1602d4f7f090c
stdlib@go1.25.7
1.26.10
1
alcounit/browser-controller:v1.0.1c64222f9e663
stdlib@go1.25.0
1.26.10
1
alcounit/browser-service:v0.0.94bd10defc324
stdlib@go1.25.0
1.26.10
1
alcounit/browser-ui:v1.0.0668e7aee5e5c
stdlib@go1.25.0
1.26.10
1
alcounit/selenosis:v2.1.2f0964cda6da6
stdlib@go1.25.0
1.26.10
1
alex6021710/ai-scale-auth:latest6c7a47e470c3
stdlib@go1.16.12
1.26.10
1
alex6021710/ai-scale-doer:latest31e533cf7cd3
stdlib@go1.16.10
1.26.10
1
alex6021710/ai-scale-migrator:latest744b8a924f35
stdlib@go1.17.2
1.26.10
1
alex6021710/ai-scale-provider:latest5837d9b30cc7
stdlib@go1.15.8
1.26.10
1
alex6021710/ai-scale-saver:latestf73e8d60fd03
stdlib@go1.17
1.26.10
1
alireza7/s-ui:1.5.302aa86983cdb
stdlib@go1.26.4
1.26.10
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
stdlib@go1.18.1
1.26.10
1
almasood/book-server:latest6ffac9b63cdf
stdlib@go1.24.6
1.26.10
1
almir/webhook:2.8.01698346f6077
stdlib@go1.14.7
1.26.10
1
almorgv/gitlab-code-review-notifier:0.1.25f2a7d2b44d8
stdlib@go1.14.15
1.26.10
1
alpine/git:2.47.2062a01ad7a0e
stdlib@go1.23.9
1.26.10
1
alpine/git:2.52.04a0e72d49596
stdlib@go1.25.10
1.26.10
1
alpine/git:2.36.366b210a97bc0
stdlib@go1.18.7
1.26.10
1
alpine/git:v2.49.1c0280cf95723
stdlib@go1.24.8
1.26.10
1
alpine/helm105741fa6621
stdlib@go1.22.5
1.26.10
1
alpine/helm:4.1.0905a068da431
stdlib@go1.25.6
1.26.10
1
alpine/k8s:1.22.600ac10bcb759
stdlib@go1.17.6
1.26.10
1
alpine/k8s:1.27.321b24e6bf801
stdlib@go1.20.4
1.26.10
1
alpine/k8s:1.31.106dbe6f391eda
stdlib@go1.22.7
1.26.10
1
alpine/k8s:1.31.137a319b15cfc9
stdlib@go1.23.12
1.26.10
1
alpine/k8s:1.32.47e1e7d5b7a96
stdlib@go1.20.4
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.