CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,365; of 18,232 indexed, latest versions
Container images: 6,268; deployed by those charts
Fix available: 6 of 9; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,365 of 18,232 indexed charts deploy, on 6,268 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+211 more	1.26.10	6,155
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more	20260909-r3	118
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	93
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	65
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more	0.26.11	12
golang-1.19deb	1.19.8-2	no fix listed	1
kineapk	0.17.2-r3	no fix listed	1
kubernetes-1.37apk	1.37.1-r3	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r5	1

OSV records: CGA-32jh-59ph-xj58 CGA-48x4-f6q2-2fc9 CGA-9w23-c7x9-6gcf CGA-pj7v-5f5f-w56q DEBIAN-CVE-2026-111943 GO-2026-6809 RUSTSEC-2026-0381 RUSTSEC-2026-0382 RUSTSEC-2026-0383
Also known as: CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending: Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,365 by stars

Chart

Latest

Affected images

Radar Score

mayastormayastor

2.12.2

28 of 31 See more

mayastor mayastor 2.12.2

28 of the 31 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	stdlib@go1.24.1	1.26.10
grafana/loki :3.4.2	58a6c186ce78	stdlib@go1.23.6	1.26.10
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.26.10
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.26.10
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.26.10
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	stdlib@go1.24.5	1.26.10
openebs/mayastor-agent-core :v2.12.2	00429e487478	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-agent-ha-cluster :v2.12.2	cb2fa3bfc1f8	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-agent-ha-node :v2.12.2	964cbb43c5e5	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-api-rest :v2.12.2	0c646268cd8c	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-csi-controller :v2.12.2	38a82f29f777	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-csi-node :v2.12.2	cbf834303735	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-eventing-aggregator :v2.12.2	4c12f06983b4	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-io-engine :v2.12.2	0161a3e6f902	rustls-webpki@0.103.13	0.103.16
openebs/mayastor-metrics-exporter-io-engine :v2.12.2	a57c47d3e624	rustls-webpki@0.102.8 webpki-roots@0.25.4	0.103.16 0.26.11
openebs/mayastor-obs-callhome :v2.12.2	4c25179ca592	rustls-webpki@0.101.7 webpki-roots@0.25.4	0.103.16 0.26.11
openebs/mayastor-obs-callhome-stats :v2.12.2	cfb042c35b92	rustls-webpki@0.101.7 webpki-roots@0.25.4	0.103.16 0.26.11
openebs/mayastor-operator-diskpool :v2.12.2	7cd50e41324c	rustls-webpki@0.102.8	0.103.16
openebs/mc :RELEASE.2024-11-21T17-21-54Z	4d1b85539919	stdlib@go1.23.4	1.26.10
openebs/minio :RELEASE.2024-12-18T13-15-44Z	bb04e41fc1b8	stdlib@go1.23.4	1.26.10
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	stdlib@go1.25.0	1.26.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.26.10
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	stdlib@go1.23.1	1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	stdlib@go1.23.1	1.26.10
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	stdlib@go1.23.1	1.26.10
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	stdlib@go1.23.1	1.26.10
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	stdlib@go1.23.1	1.26.10
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	stdlib@go1.23.1	1.26.10

Open the chart page →

31,837

eoloplantmca-eoloplaner

0.1.0

2 of 7 See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.26.10
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.26.10

Open the chart page →

34,947

claude-code-apimcp-helm

0.1.1

1 of 1 See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
arbuzov/claude-code-api :0.1.0	2d7dd8070610	stdlib@go1.23.10	1.26.10

Open the chart page →

4,883

mcp-kubernetesmcp-helm

0.2.7

1 of 1 See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mcp/kubernetes :latest	5ffbf7f0a8aa	stdlib@go1.26.3	1.26.10

Open the chart page →

7,539

mdai-event-hubmdai-event-hub

0.1.11

1 of 1 See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub :0.1.11	18cae836e9c7	stdlib@go1.25.11	1.26.10

Open the chart page →

792

mdai-gatewaymdai-gateway

0.1.10

1 of 1 See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/p3k6k6h3/mdai-gateway :0.1.10	0dfb323978f6	stdlib@go1.25.11	1.26.10

Open the chart page →

777

mdai-hubmdai-hub

0.10.1

12 of 14 See more

mdai-hub mdai-hub 0.10.1

12 of the 14 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	999d5eb28f40	stdlib@go1.26.8	1.26.10
library/nats :2.14.0-alpine	df3dbf761551	stdlib@go1.26.2	1.26.10
natsio/nats-box :0.19.5	5d513bf0bb82	stdlib@go1.26.2	1.26.10
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	stdlib@go1.25.6	1.26.10
natsio/prometheus-nats-exporter :0.19.2	5387a5923572	stdlib@go1.25.6	1.26.10
ghcr.io/jkroepke/kube-webhook-certgen :1.8.3	8ce13c365c8e	stdlib@go1.26.3	1.26.10
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.148.0	590e50477b76	stdlib@go1.25.8	1.26.10
public.ecr.aws/p3k6k6h3/mdai-event-hub :0.1.11	18cae836e9c7	stdlib@go1.25.11	1.26.10
public.ecr.aws/p3k6k6h3/mdai-gateway :0.1.10	0dfb323978f6	stdlib@go1.25.11	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.91.0	9e53e1313921	stdlib@go1.25.9	1.26.10
quay.io/prometheus/node-exporter :v1.11.1-distroless	6112664fd761	stdlib@go1.26.1	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.0	6b2f0b6f2f86	stdlib@go1.26.2	1.26.10

Open the chart page →

13,431

mdai-s3-logs-readermdai-s3-logs-reader

0.0.8

1 of 1 See more

mdai-s3-logs-reader mdai-s3-logs-reader 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/decisiveai/mdai-s3-logs-reader :0.0.8	d1e35167eec5	stdlib@go1.24.10	1.26.10

Open the chart page →

884

medewerkercatalogusmedewerkercatalogus

1.0.0

1 of 3 See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	stdlib@go1.13.10	1.26.10

Open the chart page →

9,453

pod-cleanupmediamarktsaturn

1.2.1

1 of 1 See more

pod-cleanup mediamarktsaturn 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.k8s.io/kubectl :v1.34.1	59bafa07ff3a	stdlib@go1.24.6	1.26.10

Open the chart page →

940

cleanuparrmedia-servarr

0.20.4

1 of 1 See more

cleanuparr media-servarr 0.20.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/cleanuparr/cleanuparr :2.10.12	d0212e4c66bd	stdlib@go1.22.2	1.26.10

Open the chart page →

1,955

sabnzbdmedia-servarr

1.7.0

1 of 3 See more

sabnzbd media-servarr 1.7.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/onedr0p/exportarr :v1.6.1	60cf3d44aa0b	stdlib@go1.21.6	1.26.10

Open the chart page →

1,105

tinymediamanagermedia-servarr

1.7.1

1 of 2 See more

tinymediamanager media-servarr 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
tinymediamanager/tinymediamanager :5.3.4	48c15784a127	stdlib@go1.24.4	1.26.10

Open the chart page →

10,673

cameramedia-streaming-mesh

0.2.5

1 of 3 See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	stdlib@go1.19.2	1.26.10

Open the chart page →

20,894

crdsmedia-streaming-mesh

0.0.1

1 of 2 See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ciscolabs/msm-nc :07102023	36d02faad958	stdlib@go1.20.5	1.26.10

Open the chart page →

4,731

ingressmedia-streaming-mesh

0.1.8

2 of 2 See more

ingress media-streaming-mesh 0.1.8

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.7.0	7612338342a1	stdlib@go1.20.1	1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	stdlib@go1.20.1	1.26.10

Open the chart page →

4,933

msmmedia-streaming-mesh

0.1.17

5 of 6 See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook :latest	3e811d67189c	stdlib@go1.24.0	1.26.10
ghcr.io/media-streaming-mesh/msm-cni :latest	fe0b89b818a6	stdlib@go1.24.0	1.26.10
ghcr.io/media-streaming-mesh/msm-cp :latest	8cb08fc7010b	stdlib@go1.23.1	1.26.10
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	stdlib@go1.23.1	1.26.10
ghcr.io/media-streaming-mesh/msm-nc :latest	296fe4970e38	stdlib@go1.22.3	1.26.10

Open the chart page →

15,556

msm-rtspmedia-streaming-mesh

0.0.2

1 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	stdlib@go1.19.2	1.26.10

Open the chart page →

20,894

rtspmedia-streaming-mesh

0.0.14

1 of 2 See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	stdlib@go1.19.2	1.26.10

Open the chart page →

20,894

mediawiki-backupmediawiki-backup

0.2.1

1 of 1 See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	stdlib@go1.19.5	1.26.10

Open the chart page →

2,810

medik8smedik8s

0.2.0

3 of 3 See more

medik8s medik8s 0.2.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/medik8s/fence-agents-remediation-operator :v0.8.0	fab0089a9d65	stdlib@go1.26.3	1.26.10
quay.io/medik8s/node-healthcheck-operator :v0.12.0	5b048ad5d2b8	stdlib@go1.25.9	1.26.10
quay.io/medik8s/self-node-remediation-operator :v0.13.0	9ad002dca9ea	stdlib@go1.25.9	1.26.10

Open the chart page →

3,753

memgptmemgpt

0.3.19

1 of 2 See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ankane/pgvector :v0.5.1	d3a9d8ac27bb	stdlib@go1.18.2	1.26.10

Open the chart page →

6,935

memgraph-mcpmemgraph

1.0.0

1 of 1 See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
memgraph/mcp-memgraph :0.1.13	ecdf7faea3f7	rustls-webpki@0.103.13 webpki-root-certs@1.0.7	0.103.16 1.0.10

Open the chart page →

2,152

memo-componentmemo-component

1.0.0

1 of 3 See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	stdlib@go1.13.10	1.26.10

Open the chart page →

9,596

merge-pilotmerge-pilot

1.6.0

1 of 2 See more

merge-pilot merge-pilot 1.6.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jhonbrownn/merge-pilot-backend :1.6.0	68d6223ea366	stdlib@go1.25.7	1.26.10

Open the chart page →

3,314

dex-k8s-authenticatormesosphere

1.4.3

1 of 1 See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mesosphere/dex-k8s-authenticator :v1.4.1-d2iq	f3d9982cc2fd	stdlib@go1.23.0	1.26.10

Open the chart page →

1,633

docker-registrymesosphere

2.3.5

1 of 1 See more

docker-registry mesosphere 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/registry :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.26.10

Open the chart page →

1,102

flaggermesosphere

0.21.0

2 of 2 See more

flagger mesosphere 0.21.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
weaveworks/flagger :0.19.0	a9c2e9df4227	stdlib@go1.13.1	1.26.10
weaveworks/flagger-loadtester :0.9.0	3cdac6928a63	stdlib@go1.13.1	1.26.10

Open the chart page →

8,746

gatekeepermesosphere

0.6.11

1 of 2 See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	stdlib@go1.16.2	1.26.10

Open the chart page →

4,665

istiomesosphere

1.25.1

1 of 2 See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	stdlib@go1.21.7	1.26.10

Open the chart page →

6,423

istio-helm-cnimesosphere

1.25.1

1 of 1 See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
istio/install-cni :1.29.0	ce27c9ce43c8	stdlib@go1.25.7	1.26.10

Open the chart page →

3,295

istio-helm-istiodmesosphere

1.25.1

2 of 2 See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
istio/pilot :1.29.0	325156535773	stdlib@go1.25.7	1.26.10
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	stdlib@go1.25.5	1.26.10

Open the chart page →

5,247

kafka-operatormesosphere

0.20.2

1 of 2 See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	stdlib@go1.17.6	1.26.10

Open the chart page →

3,024

karmamesosphere

1.3.0

1 of 1 See more

karma mesosphere 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
lmierzwa/karma :v0.50	3751e5eed656	stdlib@go1.13.4	1.26.10

Open the chart page →

3,519

kubeaddons-catalogmesosphere

0.1.16

1 of 2 See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	stdlib@go1.15.2	1.26.10

Open the chart page →

13,819

kubefedmesosphere

0.5.2

1 of 1 See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mesosphere/kubefed :proxyurl	4fd8889195fe	stdlib@go1.15.3	1.26.10

Open the chart page →

4,418

kube-oidc-proxymesosphere

0.3.4

1 of 1 See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/jetstack/kube-oidc-proxy :v0.3.0	e045b26eb6df	stdlib@go1.14.1	1.26.10

Open the chart page →

4,480

kube-prometheus-stackmesosphere

87.16.0

6 of 7 See more

kube-prometheus-stack mesosphere 87.16.0

6 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	stdlib@go1.21.7	1.26.10
grafana/grafana :13.1.0	121a7a9ece6d	stdlib@go1.25.7	1.26.10
ghcr.io/jkroepke/kube-webhook-certgen :1.8.4	76a2170cd0c9	stdlib@go1.26.4	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.92.1	7d9247d23514	stdlib@go1.26.4	1.26.10
quay.io/prometheus/node-exporter :v1.12.0-distroless	843ed23bb564	stdlib@go1.26.5	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	stdlib@go1.26.4	1.26.10

Open the chart page →

10,437

kudomesosphere

0.1.4

1 of 1 See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kudobuilder/controller :v0.9.0	69072d979708	stdlib@go1.13	1.26.10

Open the chart page →

7,275

local-path-provisionermesosphere

0.0.22

1 of 1 See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	stdlib@go1.16.15	1.26.10

Open the chart page →

3,428

nfs-server-provisionermesosphere

0.6.1

1 of 1 See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	stdlib@go1.13.4	1.26.10

Open the chart page →

4,146

nvidiamesosphere

0.4.4

1 of 2 See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
nvidia/dcgm-exporter :2.2.9-2.4.1-ubuntu20.04	91b20b66d1cd	stdlib@go1.14.2	1.26.10

Open the chart page →

12,258

prometheus-operatormesosphere

12.11.13

5 of 8 See more

prometheus-operator mesosphere 12.11.13

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.3	9e1e77ade304	stdlib@go1.25.7	1.26.10
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	stdlib@go1.15.3	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	stdlib@go1.14.12	1.26.10
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	stdlib@go1.14.4	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	stdlib@go1.25.5	1.26.10

Open the chart page →

16,812

registry-syncermesosphere

0.1.0

1 of 1 See more

registry-syncer mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
regclient/regsync :v0.8.3	3d8d8e40afb7	stdlib@go1.24.2	1.26.10

Open the chart page →

787

traefik2mesosphere

9.18.0

1 of 1 See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/traefik :2.4.8	eda951fd29a8	stdlib@go1.16.2	1.26.10

Open the chart page →

4,686

azuredisk-csi-drivermesosphere-stable

0.8.1

6 of 6 See more

azuredisk-csi-driver mesosphere-stable 0.8.1

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	stdlib@go1.15.4	1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	stdlib@go1.14	1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar :v2.0.1	fc5d14e9f26f	stdlib@go1.15	1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	stdlib@go1.15.2	1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	stdlib@go1.15.2	1.26.10
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe :v2.2.0	b7d82802cca8	stdlib@go1.15.6	1.26.10

Open the chart page →

22,166

cert-manager-setupmesosphere-stable

0.2.10

4 of 5 See more

cert-manager-setup mesosphere-stable 0.2.10

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.11.0	5c3eb25b0854	stdlib@go1.19.5	1.26.10
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	stdlib@go1.19.5	1.26.10
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	stdlib@go1.19.5	1.26.10
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	stdlib@go1.19.5	1.26.10

Open the chart page →

11,338

cosimesosphere-stable

0.2.2

1 of 1 See more

cosi mesosphere-stable 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller :v0.2.2	3c708e508197	stdlib@go1.24.11	1.26.10

Open the chart page →

765

dexmesosphere-stable

2.14.2

4 of 5 See more

dex mesosphere-stable 2.14.2

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	stdlib@go1.21.7	1.26.10
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	stdlib@go1.20.4	1.26.10
mesosphere/dex-controller :v0.16.1	1b2dd9c0b0fc	ca-certificates@20240705-r0 stdlib@go1.22.7	20260909-r3 1.26.10
quay.io/brancz/kube-rbac-proxy :v0.21.1	8ee55a15d8b0	stdlib@go1.25.8	1.26.10

Open the chart page →

23,038

gatekeepermesosphere-stable

0.6.11

1 of 2 See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	stdlib@go1.16.2	1.26.10

Open the chart page →

4,665

Container images carrying it

6,268 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
antrea/antrea-ui-backend :v0.8.0	19f3c0113330	stdlib@go1.26.8	1.26.10	1
antrea/flow-aggregator :v2.7.0	065193e7572f	stdlib@go1.26.6	1.26.10	1
anujarosha/hello-go :v1.0.1	ed60e46870b6	stdlib@go1.18.3	1.26.10	1
anujdatar/cups :25.07.01	685df04a643b	stdlib@go1.19.8	1.26.10	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	stdlib@go1.21.8	1.26.10	1
apache/airflow :airflow-pgbouncer-exporter-2025.03.05-0.18.0	adf7260c2c5f	stdlib@go1.23.7	1.26.10	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	stdlib@go1.22.7	1.26.10	1
apache/airflow :2.8.1	e5560ad0b86e	stdlib@go1.19.8	1.26.10	1
apache/answer :2.0.3	0863470d8293	stdlib@go1.25.14	1.26.10	1
apache/apisix-dashboard :2.9.0	c010ea7d1694	stdlib@go1.14.15	1.26.10	1
apache/apisix-ingress-controller :1.3.0	412f92cde0b3	stdlib@go1.13.8	1.26.10	1
apache/camel-k :1.10.4	3bb13d14f64a	stdlib@go1.17.13	1.26.10	1
apache/camel-k :2.11.0	d173e7efe258	stdlib@go1.26.5	1.26.10	1
apache/shardingsphere-operator :0.3.0	ffe68d6b99c0	stdlib@go1.19.10	1.26.10	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	stdlib@go1.16.9	1.26.10	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	stdlib@go1.16.9	1.26.10	1
apache/solr-operator :v0.9.1	4db34508137f	stdlib@go1.22.12	1.26.10	1
apache/tika :3.3.1.0	90b7fa1dc018	stdlib@go1.26.2	1.26.10	1
apache/tika :latest-full	d69fab827fa0	stdlib@go1.26.7	1.26.10	1
apache/yunikorn :scheduler-1.10.0	49fc54894fdf	stdlib@go1.26.7	1.26.10	1
apache/yunikorn :web-1.10.0	90e6a62a578a	stdlib@go1.26.7	1.26.10	1
apache/yunikorn :admission-1.10.0	95c6b951f38a	stdlib@go1.26.7	1.26.10	1
apecloud/dt-platform :0.1.1	d48bcbd38066	stdlib@go1.19.11	1.26.10	1
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	stdlib@go1.22.7	1.26.10	1
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	stdlib@go1.20.11	1.26.10	1
apecloud/kubeblocks-csi-driver :0.1.3	c93655ccb2d7	stdlib@go1.19.13	1.26.10	1
apecloud/kubetran-platform :latest	32bd92c7f7fa	stdlib@go1.20.8	1.26.10	1
apecloud/pyroscope :0.37.2	dbca95a15bc1	stdlib@go1.19.6	1.26.10	1
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	stdlib@go1.19.13	1.26.10	1
appwrite/appwrite :2.5.0	00bf6b9a0be8	stdlib@go1.26.8	1.26.10	1
appwrite/appwrite :1.9.0	1aaa70127114	stdlib@go1.25.7	1.26.10	1
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	stdlib@go1.22.3	1.26.10	1
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	stdlib@go1.16.4	1.26.10	1
aquasec/kube-bench :v0.6.17	6672264accce	stdlib@go1.20.4	1.26.10	1
aquasec/kube-bench :v0.15.0	7a8fa32dce21	stdlib@go1.26.0	1.26.10	1
aquasec/kube-bench :v0.6.9	c329d73fea58	stdlib@go1.19	1.26.10	1
aquasec/postee :2.12.0-amd64	0795cba777e7	stdlib@go1.18.10	1.26.10	1
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	stdlib@go1.18.10	1.26.10	1
aquasec/starboard-operator :0.15.4	be34f709e1ce	stdlib@go1.17.8	1.26.10	1
aquasec/starboard-operator :0.15.38	e0b1c7ddc843	stdlib@go1.26.3	1.26.10	1
aquasec/tracee :0.24.1	cfbbfee972e6	stdlib@go1.24.9	1.26.10	1
aquasec/trivy :0.74.0	62b1e65e8869	stdlib@go1.26.6-X:jsonv2	1.26.10	1
aquasec/trivy :0.43.1	944a04445179	stdlib@go1.19.10	1.26.10	1
aquasec/trivy :0.32.0	973d0df16189	stdlib@go1.19	1.26.10	1
aquasec/trivy :0.69.3	bcc376de8d77	stdlib@go1.25.7	1.26.10	1
arangodb/kube-arangodb :1.2.41	08d1720cec3b	stdlib@go1.22.3	1.26.10	1
arbuzov/claude-code-api :0.1.0	2d7dd8070610	stdlib@go1.23.10	1.26.10	1
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	stdlib@go1.22.10	1.26.10	1
arigaio/atlas-operator :0.7.11	1c4caa13c92b	stdlib@go1.24.5	1.26.10	1
aristidetm/basic-notebook :3.6.5	469dbc951224	stdlib@go1.22.5	1.26.10	1