StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,728
of 18,208 indexed, latest versions
Container images
6,681
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,728 of 18,208 indexed charts deploy, on 6,681 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.106,438
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+17 more20260909-r3417
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16103
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1070
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1113
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,728 by stars
ChartLatestAffected imagesRadar Score
nginx-gateway-fabricnginx-gateway-fabricOfficialVerified publisher0.0.0-edge1 of 1See more

nginx-gateway-fabric nginx-gateway-fabric 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:edgee15ba2abf4e6
stdlib@go1.27.2
1.26.10

Open the chart page →

71
rancherrancher-latest2.15.22 of 2See more

rancher rancher-latest 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.20c3d8e570255
stdlib@go1.26.4
1.26.10
rancher/shell:v0.8.21eeed72d4eda
stdlib@go1.26.8
1.26.10

Open the chart page →

2,745
nacosygqygq2Verified publisher2.1.102 of 4See more

nacos ygqygq2 2.1.10

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nacos/nacos-peer-finder-plugin:latesta9c769301fa6
stdlib@go1.13.5
1.26.10
ygqygq2/mysql-exec-sql:latest54f30def1558
stdlib@go1.18.2
1.26.10

Open the chart page →

7,428
sealed-secretsbitnamiVerified publisher2.5.191 of 1See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/sealed-secrets-controller:0.31.0-debian-12-r074eaff41382b
stdlib@go1.24.6
1.26.10

Open the chart page →

1,168
mariadbcloudpirates-mariadbVerified publisher0.16.161 of 1See more

mariadb cloudpirates-mariadb 0.16.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:13.0.2f1bba652ba57
stdlib@go1.26.7
1.26.10

Open the chart page →

2,001
difydoubanVerified publisher0.10.04 of 6See more

dify douban 0.10.0

4 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
stdlib@go1.21.9
1.26.10
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
stdlib@go1.25.5
1.26.10
langgenius/dify-sandbox:0.2.124e65e8a351a2
stdlib@go1.23.3
1.26.10
langgenius/dify-web:1.10.1-fix.1c306ac577912
stdlib@go1.23.5
1.26.10

Open the chart page →

84,023
kubesharkkubeshark-helm-chartsOfficialVerified publisher53.5.02 of 3See more

kubeshark kubeshark-helm-charts 53.5.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshark/hub:v53.50532936678f8
stdlib@go1.27.1
1.26.10
kubeshark/worker:v53.51f3e121224f8
stdlib@go1.26.5
1.26.10

Open the chart page →

1,579
secrets-store-csi-driversecret-store-csi-driver1.6.14 of 4See more

secrets-store-csi-driver secret-store-csi-driver 1.6.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
stdlib@go1.26.8
1.26.10
registry.k8s.io/csi-secrets-store/driver-crds:v1.6.1cdacfdbe8966
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
stdlib@go1.25.7
1.26.10

Open the chart page →

3,323
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.31 of 2See more

stackgres-operator stackgres-charts 1.19.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
stdlib@go1.20.10
1.26.10

Open the chart page →

3,317
victoria-logs-singlevictoriametricsVerified publisher0.13.101 of 1See more

victoria-logs-single victoriametrics 0.13.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/victoria-logs:v1.53.0251121fa882a
stdlib@go1.27.1
1.26.10

Open the chart page →

160
mongodbcloudpirates-mongodbVerified publisher0.20.11 of 1See more

mongodb cloudpirates-mongodb 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:9.0.2bac22ea7710d
stdlib@go1.26.8
1.26.10

Open the chart page →

1,441
kube-image-keeperenixVerified publisher2.3.11 of 1See more

kube-image-keeper enix 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/enix/kube-image-keeper:2.3.1d3ccf28495c3
stdlib@go1.26.6
1.26.10

Open the chart page →

342
mattermost-team-editionmattermostVerified publisher6.6.1091 of 4See more

mattermost-team-edition mattermost 6.6.109

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:12.0.0c213d4eb01c2
stdlib@go1.26.7
1.26.10

Open the chart page →

2,132
code-servernicholaswildeVerified publisher1.1.11 of 1See more

code-server nicholaswilde 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
stdlib@go1.16.4
1.26.10

Open the chart page →

18,515
opensearch-operatoropensearch-operatorVerified publisher3.0.141 of 1See more

opensearch-operator opensearch-operator 3.0.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
opensearchproject/opensearch-operator:3.0.099d4fb8144cd
stdlib@go1.26.8
1.26.10

Open the chart page →

245
pxc-operatorpercona1.20.11 of 1See more

pxc-operator percona 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster-operator:1.20.0ac4d0995c71e
stdlib@go1.26.4
1.26.10

Open the chart page →

864
akhqakhq0.28.01 of 1See more

akhq akhq 0.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
tchiotludo/akhq:0.28.0c2824dc2ae44
stdlib@go1.26.5
1.26.10

Open the chart page →

2,390
pulsarapache4.8.06 of 10See more

pulsar apache 4.8.0

6 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
stdlib@go1.25.7
1.26.10
grafana/grafana:12.4.1e932bd6ed0e0
stdlib@go1.25.8
1.26.10
rancher/kubectl:v1.25.085a0d1148784
stdlib@go1.19
1.26.10
victoriametrics/operator:v0.68.3f52e1bd679cb
stdlib@go1.25.8
1.26.10
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

14,055
miniocloudpirates-minioVerified publisher0.14.01 of 1See more

minio cloudpirates-minio 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
stdlib@go1.25.7
1.26.10

Open the chart page →

1,780
vertical-pod-autoscalercowboysysopVerified publisher11.1.14 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
stdlib@go1.21.8
1.26.10
registry.k8s.io/autoscaling/vpa-admission-controller:1.5.19928d59477fb
stdlib@go1.24.6
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.5.1e629c61b75eb
stdlib@go1.24.6
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.5.1cba2aa4b3239
stdlib@go1.24.6
1.26.10

Open the chart page →

9,443
eclipse-cheeclipse-cheVerified publisher7.124.01 of 1See more

eclipse-che eclipse-che 7.124.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/eclipse/che-operator:7.124.0489d858cd5d0
stdlib@go1.26.5
1.26.10

Open the chart page →

1,070
pyroscopegrafana2.4.03 of 3See more

pyroscope grafana 2.4.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.19.2b8ec653c4423
stdlib@go1.26.7
1.26.10
grafana/pyroscope:2.4.0b7e62699a274
stdlib@go1.26.9
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
stdlib@go1.25.9
1.26.10

Open the chart page →

2,042
botkubeinfracloudioVerified publisher1.14.01 of 1See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
stdlib@go1.21.13
1.26.10

Open the chart page →

1,705
operatorminio-operator7.1.11 of 1See more

operator minio-operator 7.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/minio/operator:v7.1.1cd587f60c43d
stdlib@go1.24.2
1.26.10

Open the chart page →

1,474
thanosthanos-communityOfficialVerified publisher0.47.21 of 1See more

thanos thanos-community 0.47.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
stdlib@go1.26.5
1.26.10

Open the chart page →

537
unleashunleash5.6.91 of 2See more

unleash unleash 5.6.9

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.10

Open the chart page →

2,475
tetragonciliumOfficialVerified publisher1.7.12 of 3See more

tetragon cilium 1.7.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
stdlib@go1.26.7
1.26.10
quay.io/cilium/tetragon-operator:v1.7.1cd8b71f6860e
stdlib@go1.26.7
1.26.10

Open the chart page →

716
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
stdlib@go1.15
1.26.10

Open the chart page →

5,702
difydify-helmVerified publisher0.39.05 of 11See more

dify dify-helm 0.39.0

5 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.11-debian-11-r121161dcd293a0
stdlib@go1.19.9
1.26.10
langgenius/dify-agent-local-sandbox:1.17.0316279a82ead
stdlib@go1.26.7
1.26.10
langgenius/dify-api:1.17.052be6088dd84
stdlib@go1.26.5
1.26.10
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
rustls-webpki@0.103.13
stdlib@go1.26.5
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
langgenius/dify-sandbox:0.2.15750e1111426e
stdlib@go1.24.13
1.26.10

Open the chart page →

63,506
k6-operatorgrafana4.7.01 of 1See more

k6-operator grafana 4.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/grafana/k6-operator:controller-v1.7.0f56440a22e8f
stdlib@go1.27.1
1.26.10

Open the chart page →

160
rabbitmqgroundhog2k2.3.91 of 2See more

rabbitmq groundhog2k 2.3.9

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.6720afe694c40
stdlib@go1.22.2
1.26.10

Open the chart page →

1,409
telegrafinfluxdata1.8.781 of 1See more

telegraf influxdata 1.8.78

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/telegraf:1.40-alpined3b22c2bd211
stdlib@go1.27.1
1.26.10

Open the chart page →

244
kiali-serverkiali2.33.01 of 1See more

kiali-server kiali 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kiali/kiali:v2.33.0082246cfc99f
stdlib@go1.26.3
1.26.10

Open the chart page →

602
ingresskongOfficialVerified publisher0.24.01 of 2See more

ingress kong 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.10

Open the chart page →

1,036
vela-corekubevela1.11.03 of 3See more

vela-core kubevela 1.11.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oamdev/cluster-gateway:v1.9.0-alpha.25591e29d66a2
stdlib@go1.19.8
1.26.10
oamdev/kube-webhook-certgen:v2.4.1231c423c2b17
stdlib@go1.17.11
1.26.10
oamdev/vela-core:v1.11.095fa412c934e
stdlib@go1.23.8
1.26.10

Open the chart page →

7,083
oktetooktetoOfficialVerified publisher0.0.0-2026-09-217 of 10See more

okteto okteto 0.0.0-2026-09-21

7 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/okteto/backend:0.0.0-2026-09-213264af50b7d1
stdlib@go1.26.7
1.26.10
ghcr.io/okteto/buildkit:0.0.0-2026-09-2114527ca5d2a9
stdlib@go1.25.7
1.26.10
ghcr.io/okteto/daemon:0.0.0-2026-09-21a5ca067cb895
stdlib@go1.26.6
1.26.10
ghcr.io/okteto/ingress-nginx-chroot:0.0.0-2026-09-21d6730eb9831b
stdlib@go1.26.6
1.26.10
ghcr.io/okteto/okteto:3.23.1be99de7f8139
stdlib@go1.26.5
1.26.10
ghcr.io/okteto/registry:0.0.0-2026-09-2169131511501f
stdlib@go1.26.5
1.26.10
ghcr.io/okteto/reloader:0.0.0-2026-09-2104a3fce657c4
stdlib@go1.26.4
1.26.10

Open the chart page →

8,439
openbaoopenbaoVerified publisher0.30.12 of 2See more

openbao openbao 0.30.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:1.7.2ae3d307658b7
stdlib@go1.25.5
1.26.10
quay.io/openbao/openbao:2.7.071156a1c6623
stdlib@go1.27.1
1.26.10

Open the chart page →

1,923
hydraory0.64.02 of 2See more

hydra ory 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/hydra:v26.2.0ff67c7fb5f95
stdlib@go1.26.0
1.26.10
oryd/hydra-maester:v0.0.420a7a2bfd0e7d
stdlib@go1.26.3
1.26.10

Open the chart page →

2,174
prometheus-msteamsprometheus-msteams1.3.61 of 1See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
stdlib@go1.24.9
1.26.10

Open the chart page →

1,457
proxmox-csi-pluginproxmox-csi0.5.137 of 7See more

proxmox-csi-plugin proxmox-csi 0.5.13

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/proxmox-csi-controller:v0.21.08f344b70785f
stdlib@go1.27.2
1.26.10
ghcr.io/sergelogvinov/proxmox-csi-node:v0.21.03895d75356d5
stdlib@go1.27.2
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10

Open the chart page →

3,261
victoria-metrics-singlevictoriametricsVerified publisher0.49.01 of 1See more

victoria-metrics-single victoriametrics 0.49.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.154.04bd592341587
stdlib@go1.27.2
1.26.10

Open the chart page →

17
yourlsyourlsOfficialVerified publisher8.10.51 of 2See more

yourls yourls 8.10.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mariadb:latest2c14d1572dd0
stdlib@go1.26.9
1.26.10

Open the chart page →

2,348
apisix-ingress-controllerapisix1.4.01 of 2See more

apisix-ingress-controller apisix 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
stdlib@go1.26.5
1.26.10

Open the chart page →

2,277
volsyncbackube-helm-chartsVerified publisher0.16.01 of 1See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/backube/volsync:0.16.00d03a6aad575
stdlib@go1.25.11
1.26.10

Open the chart page →

1,993
concourseconcourseVerified publisher20.3.12 of 2See more

concourse concourse 20.3.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
concourse/concourse:8.3.1c9d48dfbf4f9
ca-certificates@20260909-r1
stdlib@go1.27.1
20260909-r3
1.26.10
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10

Open the chart page →

2,193
dynatrace-operatordynatraceVerified publisher1.11.01 of 1See more

dynatrace-operator dynatrace 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/dynatrace/dynatrace-operator:v1.11.05b772cfaad48
stdlib@go1.27.1
1.26.10

Open the chart page →

265
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
stdlib@go1.16.8
1.26.10

Open the chart page →

5,520
headscalegabe565Verified publisher0.16.01 of 2See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
stdlib@go1.23.4
1.26.10

Open the chart page →

2,523
gocdgocdOfficialVerified publisher2.18.12 of 2See more

gocd gocd 2.18.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gocd/gocd-agent-wolfi:v26.1.0753b9f696f45
ca-certificates@20260413-r0
20260909-r3
gocd/gocd-server:v26.1.0720d1012b93f
ca-certificates@20260413-r0
20260909-r3

Open the chart page →

1,821
oncallgrafana1.16.57 of 12See more

oncall grafana 1.16.5

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
stdlib@go1.22.4
1.26.10
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
stdlib@go1.17.8
1.26.10
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
stdlib@go1.18.2
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
stdlib@go1.16.9
1.26.10

Open the chart page →

24,506

Container images carrying it

6,681 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
6
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
6
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
6
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10
6
alpine/kubectl:1.34.18413f8890d19
stdlib@go1.24.6
1.26.10
5
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.26.10
5
bitnami/mariadb:latest2c14d1572dd0
stdlib@go1.26.9
1.26.10
5
bitnami/mongodb:latest101ca7755158
stdlib@go1.26.8
1.26.10
5
containous/whoami:latest:v1.5.07d6a3c8f9147
stdlib@go1.14
1.26.10
5
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.26.10
5
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.26.10
5
grafana/grafana:11.0.00dc5a246ab16
stdlib@go1.21.10
1.26.10
5
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.26.10
5
grafana/tempo:2.9.065a578975943
stdlib@go1.25.1
1.26.10
5
keelhq/keel:latest73714afb4443
stdlib@go1.23.4
1.26.10
5
library/mariadb:10.110d0945c57f75
stdlib@go1.24.6
1.26.10
5
library/mongo:4.44be76f674fc4
stdlib@go1.21.12
1.26.10
5
library/postgres:122f2a8c2a7d10
stdlib@go1.18.2
1.26.10
5
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.26.10
5
library/redis:7.4.2-alpine:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.26.10
5
library/redis:5:5.0fc5ecd863862
stdlib@go1.16.7
1.26.10
5
library/ubuntu:latestf144425ff09b
stdlib@go1.26.7
1.26.10
5
natsio/nats-box:0.14.1a67913df95f1
stdlib@go1.21.3
1.26.10
5
outcoldsolutions/collectorforkubernetes:26.04.5b2577b85aa71
stdlib@go1.26.8
1.26.10
5
prom/prometheus:v2.13.10a8caa2e9f19
stdlib@go1.13.1
1.26.10
5
rancher/rancher:v2.15.20c3d8e570255
stdlib@go1.26.4
1.26.10
5
rancher/shell:v0.8.21eeed72d4eda
stdlib@go1.26.8
1.26.10
5
sigma2as/goidc-proxy:next656ac798963a
stdlib@go1.25.7
1.26.10
5
ghcr.io/dexidp/dex:v2.46.0933fcd3f5233
stdlib@go1.27.1
1.26.10
5
ghcr.io/home-assistant/home-assistant:2026.10.2:latest33afb0659d78
rustls-webpki@0.103.14
stdlib@go1.25.6
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
5
ghcr.io/quenchworks/images/mariadb7f436d3b5f96
ca-certificates@20260909-r2
20260909-r3
5
ghcr.io/quenchworks/images/mysql38ff1de5c9de
ca-certificates@20260909-r2
20260909-r3
5
ghcr.io/quenchworks/images/redis828627d61c06
ca-certificates@20260909-r2
20260909-r3
5
ghcr.io/quenchworks/images/valkeyda2b2d24bdd3
ca-certificates@20260909-r2
20260909-r3
5
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.10
5
quay.io/openshift/origin-cli:latest486bf8e8f5b5
stdlib@go1.24.11
1.26.10
5
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
stdlib@go1.16.7
1.26.10
5
quay.io/prometheus/mysqld-exporter:latest:v0.20.0abed8dac117b
stdlib@go1.26.5
1.26.10
5
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
stdlib@go1.23.7
1.26.10
5
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
stdlib@go1.22.3
1.26.10
5
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
stdlib@go1.20.1
1.26.10
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.4a9f03b34a3cb
stdlib@go1.22.8
1.26.10
5
registry.k8s.io/sig-storage/csi-attacher:v4.13.0d1a26170efed
stdlib@go1.26.6
1.26.10
5
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.18.0b7fefd08651f
stdlib@go1.26.6
1.26.10
5
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0:v2.8.1f6717ce72a26
stdlib@go1.20.3
1.26.10
5
registry.k8s.io/sig-storage/csi-provisioner:v4.0.1bf5a235b67d8
stdlib@go1.21.5
1.26.10
5
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.26.10
5
adguard/adguardhome:v0.107.79aba9e3bf0613
stdlib@go1.26.6
1.26.10
4

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.