StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,601
of 18,219 indexed, latest versions
Container images
6,522
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,601 of 18,219 indexed charts deploy, on 6,522 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,285
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1699
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1067
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,601 by stars
ChartLatestAffected imagesRadar Score
kube-image-keeperenixVerified publisher2.3.11 of 1See more

kube-image-keeper enix 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/enix/kube-image-keeper:2.3.1d3ccf28495c3
stdlib@go1.26.6
1.26.10

Open the chart page →

342
mattermost-team-editionmattermostVerified publisher6.6.1091 of 4See more

mattermost-team-edition mattermost 6.6.109

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:12.0.0c213d4eb01c2
stdlib@go1.26.7
1.26.10

Open the chart page →

2,132
code-servernicholaswildeVerified publisher1.1.11 of 1See more

code-server nicholaswilde 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
stdlib@go1.16.4
1.26.10

Open the chart page →

18,515
opensearch-operatoropensearch-operatorVerified publisher3.0.141 of 1See more

opensearch-operator opensearch-operator 3.0.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
opensearchproject/opensearch-operator:3.0.099d4fb8144cd
stdlib@go1.26.8
1.26.10

Open the chart page →

245
pxc-operatorpercona1.20.11 of 1See more

pxc-operator percona 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster-operator:1.20.0ac4d0995c71e
stdlib@go1.26.4
1.26.10

Open the chart page →

864
akhqakhq0.28.01 of 1See more

akhq akhq 0.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
tchiotludo/akhq:0.28.0c2824dc2ae44
stdlib@go1.26.5
1.26.10

Open the chart page →

2,390
pulsarapache4.8.06 of 10See more

pulsar apache 4.8.0

6 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
stdlib@go1.25.7
1.26.10
grafana/grafana:12.4.1e932bd6ed0e0
stdlib@go1.25.8
1.26.10
rancher/kubectl:v1.25.085a0d1148784
stdlib@go1.19
1.26.10
victoriametrics/operator:v0.68.3f52e1bd679cb
stdlib@go1.25.8
1.26.10
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

14,055
miniocloudpirates-minioVerified publisher0.14.01 of 1See more

minio cloudpirates-minio 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
stdlib@go1.25.7
1.26.10

Open the chart page →

1,780
vertical-pod-autoscalercowboysysopVerified publisher11.1.14 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
stdlib@go1.21.8
1.26.10
registry.k8s.io/autoscaling/vpa-admission-controller:1.5.19928d59477fb
stdlib@go1.24.6
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.5.1e629c61b75eb
stdlib@go1.24.6
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.5.1cba2aa4b3239
stdlib@go1.24.6
1.26.10

Open the chart page →

9,443
eclipse-cheeclipse-cheVerified publisher7.124.01 of 1See more

eclipse-che eclipse-che 7.124.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/eclipse/che-operator:7.124.0489d858cd5d0
stdlib@go1.26.5
1.26.10

Open the chart page →

1,070
pyroscopegrafana2.4.12See more

pyroscope grafana 2.4.1

2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.19.2b8ec653c4423
stdlib@go1.26.7
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
stdlib@go1.25.9
1.26.10

Open the chart page →

—
botkubeinfracloudioVerified publisher1.14.01 of 1See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
stdlib@go1.21.13
1.26.10

Open the chart page →

1,705
operatorminio-operator7.1.11 of 1See more

operator minio-operator 7.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/minio/operator:v7.1.1cd587f60c43d
stdlib@go1.24.2
1.26.10

Open the chart page →

1,474
thanosthanos-communityOfficialVerified publisher0.47.21 of 1See more

thanos thanos-community 0.47.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
stdlib@go1.26.5
1.26.10

Open the chart page →

537
unleashunleash5.6.91 of 2See more

unleash unleash 5.6.9

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.10

Open the chart page →

2,475
tetragonciliumOfficialVerified publisher1.7.12 of 3See more

tetragon cilium 1.7.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
stdlib@go1.26.7
1.26.10
quay.io/cilium/tetragon-operator:v1.7.1cd8b71f6860e
stdlib@go1.26.7
1.26.10

Open the chart page →

716
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
stdlib@go1.15
1.26.10

Open the chart page →

5,702
difydify-helmVerified publisher0.39.05 of 11See more

dify dify-helm 0.39.0

5 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.11-debian-11-r121161dcd293a0
stdlib@go1.19.9
1.26.10
langgenius/dify-agent-local-sandbox:1.17.0316279a82ead
stdlib@go1.26.7
1.26.10
langgenius/dify-api:1.17.052be6088dd84
stdlib@go1.26.5
1.26.10
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
rustls-webpki@0.103.13
stdlib@go1.26.5
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
langgenius/dify-sandbox:0.2.15750e1111426e
stdlib@go1.24.13
1.26.10

Open the chart page →

63,506
k6-operatorgrafana4.7.01 of 1See more

k6-operator grafana 4.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/grafana/k6-operator:controller-v1.7.0f56440a22e8f
stdlib@go1.27.1
1.26.10

Open the chart page →

160
telegrafinfluxdata1.8.781 of 1See more

telegraf influxdata 1.8.78

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/telegraf:1.40-alpined3b22c2bd211
stdlib@go1.27.1
1.26.10

Open the chart page →

244
kiali-serverkiali2.33.01 of 1See more

kiali-server kiali 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kiali/kiali:v2.33.0082246cfc99f
stdlib@go1.26.3
1.26.10

Open the chart page →

602
ingresskongOfficialVerified publisher0.24.01 of 2See more

ingress kong 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.10

Open the chart page →

1,036
vela-corekubevela1.11.03 of 3See more

vela-core kubevela 1.11.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oamdev/cluster-gateway:v1.9.0-alpha.25591e29d66a2
stdlib@go1.19.8
1.26.10
oamdev/kube-webhook-certgen:v2.4.1231c423c2b17
stdlib@go1.17.11
1.26.10
oamdev/vela-core:v1.11.095fa412c934e
stdlib@go1.23.8
1.26.10

Open the chart page →

7,083
oktetooktetoOfficialVerified publisher0.0.0-2026-09-286See more

okteto okteto 0.0.0-2026-09-28

6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/okteto/buildkit:0.0.0-2026-09-2814527ca5d2a9
stdlib@go1.25.7
1.26.10
ghcr.io/okteto/daemon:0.0.0-2026-09-28a5ca067cb895
stdlib@go1.26.6
1.26.10
ghcr.io/okteto/ingress-nginx-chroot:0.0.0-2026-09-28d6730eb9831b
stdlib@go1.26.6
1.26.10
ghcr.io/okteto/okteto:3.23.1be99de7f8139
stdlib@go1.26.5
1.26.10
ghcr.io/okteto/registry:0.0.0-2026-09-2869131511501f
stdlib@go1.26.5
1.26.10
ghcr.io/okteto/reloader:0.0.0-2026-09-2804a3fce657c4
stdlib@go1.26.4
1.26.10

Open the chart page →

—
openbaoopenbaoVerified publisher0.30.12 of 2See more

openbao openbao 0.30.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:1.7.2ae3d307658b7
stdlib@go1.25.5
1.26.10
quay.io/openbao/openbao:2.7.071156a1c6623
stdlib@go1.27.1
1.26.10

Open the chart page →

1,923
hydraory0.64.02 of 2See more

hydra ory 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/hydra:v26.2.0ff67c7fb5f95
stdlib@go1.26.0
1.26.10
oryd/hydra-maester:v0.0.420a7a2bfd0e7d
stdlib@go1.26.3
1.26.10

Open the chart page →

2,174
prometheus-msteamsprometheus-msteams1.3.61 of 1See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
stdlib@go1.24.9
1.26.10

Open the chart page →

1,457
proxmox-csi-pluginproxmox-csi0.5.137 of 7See more

proxmox-csi-plugin proxmox-csi 0.5.13

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/proxmox-csi-controller:v0.21.08f344b70785f
stdlib@go1.27.2
1.26.10
ghcr.io/sergelogvinov/proxmox-csi-node:v0.21.03895d75356d5
stdlib@go1.27.2
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10

Open the chart page →

3,261
victoria-metrics-singlevictoriametricsVerified publisher0.49.01 of 1See more

victoria-metrics-single victoriametrics 0.49.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.154.04bd592341587
stdlib@go1.27.2
1.26.10

Open the chart page →

17
yourlsyourlsOfficialVerified publisher8.10.51 of 2See more

yourls yourls 8.10.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mariadb:latest2c14d1572dd0
stdlib@go1.26.9
1.26.10

Open the chart page →

2,348
apisix-ingress-controllerapisix1.4.01 of 2See more

apisix-ingress-controller apisix 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
stdlib@go1.26.5
1.26.10

Open the chart page →

2,277
volsyncbackube-helm-chartsVerified publisher0.16.01 of 1See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/backube/volsync:0.16.00d03a6aad575
stdlib@go1.25.11
1.26.10

Open the chart page →

1,993
concourseconcourseVerified publisher20.3.12 of 2See more

concourse concourse 20.3.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
concourse/concourse:8.3.1c9d48dfbf4f9
ca-certificates@20260909-r1
stdlib@go1.27.1
20260909-r3
1.26.10
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10

Open the chart page →

2,193
dynatrace-operatordynatraceVerified publisher1.11.01 of 1See more

dynatrace-operator dynatrace 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/dynatrace/dynatrace-operator:v1.11.05b772cfaad48
stdlib@go1.27.1
1.26.10

Open the chart page →

265
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
stdlib@go1.16.8
1.26.10

Open the chart page →

5,520
headscalegabe565Verified publisher0.16.01 of 2See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
stdlib@go1.23.4
1.26.10

Open the chart page →

2,523
gocdgocdOfficialVerified publisher2.18.12 of 2See more

gocd gocd 2.18.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gocd/gocd-agent-wolfi:v26.1.0753b9f696f45
ca-certificates@20260413-r0
20260909-r3
gocd/gocd-server:v26.1.0720d1012b93f
ca-certificates@20260413-r0
20260909-r3

Open the chart page →

1,821
oncallgrafana1.16.57 of 12See more

oncall grafana 1.16.5

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
stdlib@go1.22.4
1.26.10
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
stdlib@go1.17.8
1.26.10
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
stdlib@go1.18.2
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
stdlib@go1.16.9
1.26.10

Open the chart page →

24,506
k8sgpt-operatork8sgptOfficialVerified publisher0.2.292 of 2See more

k8sgpt-operator k8sgpt 0.2.29

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/k8sgpt-ai/k8sgpt-operator:v0.2.2982d0adcce816
stdlib@go1.26.5
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.10

Open the chart page →

1,880
node-feature-discoverynode-feature-discoveryOfficialVerified publisher0.20.01 of 1See more

node-feature-discovery node-feature-discovery 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/nfd/node-feature-discovery:v0.20.03f600513a463
stdlib@go1.27.2
1.26.10

Open the chart page →

140
openprojectopenproject-helm-chartsOfficialVerified publisher13.15.11 of 5See more

openproject openproject-helm-charts 13.15.1

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10

Open the chart page →

21,775
kratosory0.64.01 of 1See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/kratos:v26.2.02a13bb8d362c
stdlib@go1.26.0
1.26.10

Open the chart page →

1,338
sftpgosftpgoOfficialVerified publisher0.48.01 of 1See more

sftpgo sftpgo 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/drakkan/sftpgo:v2.7.59011fe608d33
stdlib@go1.25.12
1.26.10

Open the chart page →

1,756
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
stdlib@go1.14.12
1.26.10

Open the chart page →

13,801
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
stdlib@go1.21.5
1.26.10

Open the chart page →

2,286
zabbixcetic3.1.33 of 5See more

zabbix cetic 3.1.3

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:1414bfab572eec
stdlib@go1.24.6
1.26.10
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
stdlib@go1.18.1
1.26.10
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
stdlib@go1.18.1
1.26.10

Open the chart page →

38,163
chatwootchatwootVerified publisher2.0.272 of 3See more

chatwoot chatwoot 2.0.27

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:6.2.7-debian-11-r37788b908dd0d
stdlib@go1.18.2
1.26.10
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
stdlib@go1.16.7
1.26.10

Open the chart page →

9,199
plugin-barman-cloudcloudnative-pgVerified publisher0.8.11 of 1See more

plugin-barman-cloud cloudnative-pg 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/plugin-barman-cloud:v0.15.1c75acad19a36
stdlib@go1.26.6
1.26.10

Open the chart page →

249
csi-driver-smbcsi-driver-smbVerified publisher1.20.35 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
stdlib@go1.26.4
1.26.10

Open the chart page →

4,999
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
stdlib@go1.15
1.26.10

Open the chart page →

6,433

Container images carrying it

6,522 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
aquasec/trivy:0.32.0973d0df16189
stdlib@go1.19
1.26.10
1
aquasec/trivy:0.69.3bcc376de8d77
stdlib@go1.25.7
1.26.10
1
arangodb/kube-arangodb:1.2.4108d1720cec3b
stdlib@go1.22.3
1.26.10
1
arbuzov/claude-code-api:0.1.02d7dd8070610
stdlib@go1.23.10
1.26.10
1
arconixforge/mongodb-secure-backup:v1.1c08d7c438966
stdlib@go1.22.10
1.26.10
1
arequs/beaverdeck:1.6.4a4c74b34a6d9
stdlib@go1.27.2
1.26.10
1
arigaio/atlas-operator:0.7.111c4caa13c92b
stdlib@go1.24.5
1.26.10
1
aristidetm/basic-notebook:3.6.5469dbc951224
stdlib@go1.22.5
1.26.10
1
articomio/articom-cx-operator:v2.0.503f3e1935d24
stdlib@go1.25.14
1.26.10
1
artifacthub/db-migrator:v1.23.028c13565ac5c
stdlib@go1.26.4
1.26.10
1
artifacthub/db-migrator:v1.19.02a746b289fcd
stdlib@go1.22.4
1.26.10
1
artifacthub/hub:v1.19.0111918d8c399
stdlib@go1.22.4
1.26.10
1
artifacthub/hub:v1.23.07d3a91c539dc
stdlib@go1.26.4
1.26.10
1
artifacthub/scanner:v1.23.02d8365601f0e
stdlib@go1.25.7
1.26.10
1
artifacthub/scanner:v1.19.0323d026e78c3
stdlib@go1.21.8
1.26.10
1
artifacthub/tracker:v1.23.05368d21a6e5c
stdlib@go1.24.4
1.26.10
1
artifacthub/tracker:v1.19.06596c8c4d955
stdlib@go1.22.4
1.26.10
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
stdlib@go1.22.4
1.26.10
1
arunvelsriram/utils:latest655ad18fd8d6
stdlib@go1.23.8
1.26.10
1
ashupednekar535/litefunctions-ingestor:latestcb293720e66e
stdlib@go1.27.2
1.26.10
1
ashupednekar535/litefunctions-operator:latest80ad0954b9d9
stdlib@go1.24.13
1.26.10
1
ashupednekar535/litefunctions-portal:latest460f010659fe
stdlib@go1.26.1
1.26.10
1
assistiot/authorization_db:latestc3adbab6a3e7
stdlib@go1.18.2
1.26.10
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
stdlib@go1.14.12
1.26.10
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
stdlib@go1.18.2
1.26.10
1
assistiot/data_integrity_verification:1.0.0eb7f5d765ab6
stdlib@go1.17.13
1.26.10
1
assistiot/distributed_broker:1.0.033e02dad168f
stdlib@go1.17.13
1.26.10
1
assistiot/dlt_based_fl:1.1.04bc3d92788ed
stdlib@go1.17.13
1.26.10
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
stdlib@go1.17.10
1.26.10
1
assistiot/identity-manager_db:latest0d3e6d35f168
stdlib@go1.18.2
1.26.10
1
assistiot/logging_auditing:1.0.0790dbb198e86
stdlib@go1.17.13
1.26.10
1
assistiot/open_api_backend:1.1.230812ba93555
stdlib@go1.18.6
1.26.10
1
assistiot/smart-orchestrator_helm:latest9bb46ea14e8e
stdlib@go1.22.1
1.26.10
1
astarte/astarte-kubernetes-operator:26.5.1e3ff1b3c0c98
stdlib@go1.24.13
1.26.10
1
authelia/authelia:4.39.28bd97cff4fcbf
stdlib@go1.27.1
1.26.10
1
authzed/spicedb:latesta170d372c9f6
ca-certificates@20260413-r1
stdlib@go1.27.2
20260909-r3
1.26.10
1
automatischio/automatisch:0.15.03bace7a12d5f
stdlib@go1.23.8
1.26.10
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
stdlib@go1.22.5
1.26.10
1
aveshasystems/spiffe-csi-driver:0.2.753fc6d009e04
stdlib@go1.22.2
1.26.10
1
axllent/mailpit:v1.31.198b916bd3c8d
stdlib@go1.27.1
1.26.10
1
axllent/mailpit:v1.31.0c96991d9bef7
stdlib@go1.27.0
1.26.10
1
ayushsobti/kube-monkey:v0.7.0fc181870c60f
stdlib@go1.26.8
1.26.10
1
b3log/siyuan:v3.1.2595c0d129bc19
stdlib@go1.24.1
1.26.10
1
b3log/siyuan:v3.8.7aced5ce847dc
stdlib@go1.26.9
1.26.10
1
basa/spki-fingerprint-exporter:0.7.234cadcaa29c4
stdlib@go1.26.7
1.26.10
1
baserow/backend:2.4.1497347d0ba74
stdlib@go1.27.2
1.26.10
1
baserow/backend:1.31.1e0b3c8130b91
stdlib@go1.19.8
1.26.10
1
baserow/baserow:1.30.1df0c42eb67e8
stdlib@go1.21.5
1.26.10
1
bbernhard/signal-cli-rest-api:latest2cf09d66a86f
stdlib@go1.26.8
1.26.10
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
stdlib@go1.17.8
1.26.10
1

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.