StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.26.10
5
ethpandaops/xatu:latestbe2c8904cd70
stdlib@go1.26.9
1.26.10
5
grafana/grafana:11.0.00dc5a246ab16
stdlib@go1.21.10
1.26.10
5
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.26.10
5
grafana/tempo:2.9.065a578975943
stdlib@go1.25.1
1.26.10
5
keelhq/keel:latest73714afb4443
stdlib@go1.23.4
1.26.10
5
library/mongo:4.44be76f674fc4
stdlib@go1.21.12
1.26.10
5
library/postgres:122f2a8c2a7d10
stdlib@go1.18.2
1.26.10
5
library/postgres:18:18.6-trixie:latest5486e8fb2069
stdlib@go1.24.6
1.26.10
5
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.10
5
library/postgres:17b8faeff77126
stdlib@go1.24.6
1.26.10
5
library/postgres:16.15-alpine:16-alpinedeb28ee47118
stdlib@go1.24.6
1.26.10
5
library/postgres:16-alpinef46107955874
stdlib@go1.24.6
1.26.10
5
library/redis:7.4.2-alpine:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.26.10
5
library/redis:5:5.0fc5ecd863862
stdlib@go1.16.7
1.26.10
5
natsio/nats-box:0.14.1a67913df95f1
stdlib@go1.21.3
1.26.10
5
prom/prometheus:v2.13.10a8caa2e9f19
stdlib@go1.13.1
1.26.10
5
rancher/rancher:v2.15.20c3d8e570255
stdlib@go1.26.4
1.26.10
5
rancher/shell:v0.8.21eeed72d4eda
stdlib@go1.26.8
1.26.10
5
sigma2as/goidc-proxy:next656ac798963a
stdlib@go1.25.7
1.26.10
5
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
stdlib@go1.27.1
1.26.10
5
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.10
5
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
stdlib@go1.16.7
1.26.10
5
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
stdlib@go1.22.3
1.26.10
5
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
stdlib@go1.20.1
1.26.10
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
stdlib@go1.22.8
1.26.10
5
registry.k8s.io/sig-storage/csi-attacher:v4.13.0d1a26170efed
stdlib@go1.26.6
1.26.10
5
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0:v2.8.1f6717ce72a26
stdlib@go1.20.3
1.26.10
5
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
stdlib@go1.21.5
1.26.10
5
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.26.10
5
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
4
bitnamisecure/kubectl:latest26837860fa03
stdlib@go1.26.9
1.26.10
4
cockroachdb/cockroach-self-signer-cert:1.114c02c4cfe7b8
stdlib@go1.26.2
1.26.10
4
goharbor/harbor-core:v2.15.47d2ba5304a72
stdlib@go1.26.7
1.26.10
4
goharbor/harbor-jobservice:v2.15.4f143578ef30e
stdlib@go1.26.7
1.26.10
4
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
stdlib@go1.26.7
1.26.10
4
goharbor/registry-photon:v2.15.4dc0cb388a644
stdlib@go1.26.7
1.26.10
4
goharbor/trivy-adapter-photon:v2.15.4813ca81b4a4e
stdlib@go1.26.7
1.26.10
4
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.10
4
grafana/loki:3.6.73c8fd3570dd9
stdlib@go1.24.13
1.26.10
4
hyperledger/fabric-ca:latesta70b6ba64a08
stdlib@go1.26.4
1.26.10
4
hyperledger/fabric-orderer:2.46ec3fe59ea55
stdlib@go1.18.10
1.26.10
4
hyperledger/fabric-peer:2.46ff36af21eb1
stdlib@go1.18.10
1.26.10
4
hyperledger/fabric-tools:2.4b1194f509085
stdlib@go1.18.10
1.26.10
4
jaegertracing/all-in-one:latestab6f1a1f0fb4
stdlib@go1.25.4
1.26.10
4
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
stdlib@go1.21.5
1.26.10
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
stdlib@go1.18.2
1.26.10
4
jaegertracing/jaeger-collector:1.53.07f1269222903
stdlib@go1.21.5
1.26.10
4

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.