CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,239; of 18,232 indexed, latest versions
Container images: 6,142; deployed by those charts
Fix available: 6 of 9; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+210 more	1.26.10	6,034
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more	20260909-r3	112
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	92
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	64
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more	0.26.11	12
golang-1.19deb	1.19.8-2	no fix listed	1
kineapk	0.17.2-r3	no fix listed	1
kubernetes-1.37apk	1.37.1-r3	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r5	1

OSV records: CGA-32jh-59ph-xj58 CGA-48x4-f6q2-2fc9 CGA-9w23-c7x9-6gcf CGA-pj7v-5f5f-w56q DEBIAN-CVE-2026-111943 GO-2026-6809 RUSTSEC-2026-0381 RUSTSEC-2026-0382 RUSTSEC-2026-0383
Also known as: CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending: Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars

Chart

Latest

Affected images

Radar Score

harvester-cloud-providerrke2-charts

0.2.1600

2 of 2 See more

harvester-cloud-provider rke2-charts 0.2.1600

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
rancher/harvester-cloud-provider :v0.2.9	5fb3954ccef4	stdlib@go1.26.8	1.26.10
rancher/mirrored-kube-vip-kube-vip-iptables :v1.2.4	a071159e19cc	stdlib@go1.27.1	1.26.10

Open the chart page →

532

harvester-csi-driverrke2-charts

0.1.3200

6 of 6 See more

harvester-csi-driver rke2-charts 0.1.3200

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
rancher/harvester-csi-driver :v0.2.10	eb75514c6979	stdlib@go1.26.8	1.26.10
rancher/mirrored-longhornio-csi-attacher :v4.11.0-20260428	fe417c28a6b8	stdlib@go1.25.9	1.26.10
rancher/mirrored-longhornio-csi-node-driver-registrar :v2.16.0-20260428	e82a8c8f800d	stdlib@go1.25.9	1.26.10
rancher/mirrored-longhornio-csi-provisioner :v5.3.0-20260428	9e519a21a77c	stdlib@go1.25.9	1.26.10
rancher/mirrored-longhornio-csi-resizer :v2.1.0-20260428	41cb674d1154	stdlib@go1.25.9	1.26.10
rancher/mirrored-longhornio-csi-snapshotter :v8.5.0-20260428	1975fac3890f	stdlib@go1.25.9	1.26.10

Open the chart page →

4,445

rancher-vsphere-cpirke2-charts

1.16.500

1 See more

rancher-vsphere-cpi rke2-charts 1.16.500

1 container image this version deploys carries CVE-2026-111943.

Container image	Digest	Package	Fixed in
rancher/mirrored-cloud-provider-vsphere :v1.31.1	febfd0517838	stdlib@go1.22.8	1.26.10

Open the chart page →

—

rke2-calicorke2-charts

3.18.1-101

1 of 1 See more

rke2-calico rke2-charts 3.18.1-101

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.15.1	c6591da87aa8	stdlib@go1.15.2	1.26.10

Open the chart page →

3,521

rke2-ciliumrke2-charts

1.20.302

2 of 3 See more

rke2-cilium rke2-charts 1.20.302

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.20.3	95cfa5c2427c	stdlib@go1.26.9	1.26.10
quay.io/cilium/operator-generic :v1.20.3	efdd8d89d6d8	stdlib@go1.26.9	1.26.10

Open the chart page →

746

rke2-ovirt-csi-driverrke2-charts

4.15.0

4 of 5 See more

rke2-ovirt-csi-driver rke2-charts 4.15.0

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
rancher/mirrored-sig-storage-csi-provisioner :v6.0.0	0c537015fe9c	stdlib@go1.24.6	1.26.10
registry.k8s.io/sig-storage/csi-attacher :v4.10.0	be59d0556508	stdlib@go1.24.6	1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	stdlib@go1.24.6	1.26.10
registry.k8s.io/sig-storage/livenessprobe :v2.17.0	9b75b9ade162	stdlib@go1.24.6	1.26.10

Open the chart page →

4,521

rke2-snapshot-validation-webhookrke2-charts

1.9.1

1 of 1 See more

rke2-snapshot-validation-webhook rke2-charts 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
rancher/mirrored-sig-storage-snapshot-validation-webhook :v8.1.0	67ca97fe362b	stdlib@go1.22.5	1.26.10

Open the chart page →

1,096

kubernetes-diff-loggerrlex

0.1.2

1 of 1 See more

kubernetes-diff-logger rlex 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/kubernetes-diff-logger :0.0.5	98f6d1cd1e25	stdlib@go1.16.5	1.26.10

Open the chart page →

3,649

runtimeclass-controllerrlex

0.1.0

1 of 1 See more

runtimeclass-controller rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/jlclx/runtimeclass-controller :latest	b3a87f92a963	stdlib@go1.17.13	1.26.10

Open the chart page →

3,179

yopassrlex

0.8.0

1 of 2 See more

yopass rlex 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.15.1	6bca8d5a4914	stdlib@go1.20.5	1.26.10

Open the chart page →

1,759

memosrm3l

0.2.0

1 of 1 See more

2,251

ntfyrm3l

0.2.0

1 of 1 See more

ntfy rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
binwiederhier/ntfy :v2.11.0	4a7d0f0adc6d	stdlib@go1.22.2	1.26.10

Open the chart page →

1,908

olivetinrm3l

0.3.0

1 of 1 See more

olivetin rm3l 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/olivetin/olivetin :2025.2.19	a89958921526	stdlib@go1.22.0	1.26.10

Open the chart page →

2,141

shopwarerobjuz

2.0.0

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	stdlib@go1.20.7	1.26.10

Open the chart page →

3,579

rb-theron-simrobotnik-fluidos-robotic-logistics-use-case

0.0.5

1 of 6 See more

rb-theron-sim robotnik-fluidos-robotic-logistics-use-case 0.0.5

1 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
robotnik/filebrowser :2.24.2-1	43b177ffbb72	stdlib@go1.20.6	1.26.10

Open the chart page →

5,965

krr-enforcerrobusta

0.3.5

1 of 2 See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
alpine/k8s :1.30.0	bd01dae02676	stdlib@go1.21.1	1.26.10

Open the chart page →

4,924

kubewatchrobusta

3.5.0

1 of 1 See more

kubewatch robusta 3.5.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
robustadev/kubewatch :v2.9.0	0457a51e36e8	ca-certificates@20240705-r0 stdlib@go1.23.1	20260909-r3 1.26.10

Open the chart page →

2,509

pagesroccohiggins-pages

1.0.0

1 of 3 See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/mysql :8.0	7dcddc01f13b	stdlib@go1.24.6	1.26.10

Open the chart page →

21,665

bastillion-upstreamrock8s

0.1.0

1 of 1 See more

bastillion-upstream rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
iamdorsah/bastillion :v0.1	db83a0254d81	stdlib@go1.17.13	1.26.10

Open the chart page →

4,297

easy-olm-operatorrock8s

0.0.1

1 of 1 See more

easy-olm-operator rock8s 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/easy-olm-operator :0.0.1	779454fea06c	stdlib@go1.19.10	1.26.10

Open the chart page →

1,690

fleet-vendoredrock8s

6.5.1

1 of 1 See more

fleet-vendored rock8s 6.5.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
fleetdm/fleet :v4.66.0	12e644b7f40e	stdlib@go1.23.4	1.26.10

Open the chart page →

2,424

gitlab-operatorrock8s

0.7.0

1 of 2 See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	stdlib@go1.16.14	1.26.10

Open the chart page →

6,738

imgproxyrock8s

0.8.30

1 of 1 See more

imgproxy rock8s 0.8.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.15.0	40f6eb807444	stdlib@go1.20	1.26.10

Open the chart page →

3,064

mailserverrock8s

0.1.2

1 of 1 See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	stdlib@go1.20.8	1.26.10

Open the chart page →

2,738

matrix-stackrock8s

0.8.1

5 of 7 See more

matrix-stack rock8s 0.8.1

5 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.10
matrixdotorg/synapse :v1.127.1	c3c4a9de2a0b	stdlib@go1.19.8	1.26.10
prometheuscommunity/postgres-exporter :v0.17.0	f8381eb4326a	stdlib@go1.23.6	1.26.10
ghcr.io/element-hq/ess-helm/matrix-tools :0.3.2	0eac0521be29	stdlib@go1.23.7	1.26.10
ghcr.io/element-hq/matrix-authentication-service :0.14.0	834ea54370f0	rustls-webpki@0.102.8 webpki-roots@0.26.8	0.103.16 0.26.11

Open the chart page →

12,612

resource-binding-operatorrock8s

0.1.0

1 of 1 See more

resource-binding-operator rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.gitlab.com/bitspur/rock8s/resource-binding-operator :0.1.0	63cf51392ce7	stdlib@go1.19.13	1.26.10

Open the chart page →

1,645

zentaorock8s

0.0.1

1 of 1 See more

zentao rock8s 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
easysoft/quickon-zentao :18.5	592ad5df1f8b	stdlib@go1.20.3	1.26.10

Open the chart page →

2,486

monitoringrocketchat-server

0.0.17

6 of 9 See more

monitoring rocketchat-server 0.0.17

6 of the 9 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/loki :3.6.3	cd6e176883a9	stdlib@go1.24.11	1.26.10
otel/opentelemetry-collector-contrib :0.143.0	3bc07732530c	stdlib@go1.25.5	1.26.10
ghcr.io/grafana/grafana-operator :v5.18.0	0af2faec9d6f	ca-certificates@20241121-r40 stdlib@go1.24.2	20260909-r3 1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.83.0	b6a89b8ec08f	stdlib@go1.24.3	1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	stdlib@go1.24.4	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	stdlib@go1.24.4	1.26.10

Open the chart page →

11,110

rocketchat-livekitrocketchat-server

0.1.1

1 of 1 See more

rocketchat-livekit rocketchat-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.13.9	d0c04791bf63	stdlib@go1.26.7	1.26.10

Open the chart page →

232

jaegerromanow-helm-charts

1.7.3

1 of 1 See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.9.0	e128b9adbb29	stdlib@go1.24.5	1.26.10

Open the chart page →

2,208

ai-agentromholdings

0.0.1

1 of 1 See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/ai-agent :0.0.1	6545dac92173	stdlib@go1.22.4	1.26.10

Open the chart page →

11,029

argocdromholdings

1.8.1

2 of 3 See more

argocd romholdings 1.8.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	stdlib@go1.14.12	1.26.10
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	stdlib@go1.14.9	1.26.10

Open the chart page →

14,278

argocd-certificate-refreshromholdings

0.10.8

1 of 1 See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	stdlib@go1.17.13	1.26.10

Open the chart page →

14,819

argo-workflowromholdings

0.1.6

1 of 1 See more

argo-workflow romholdings 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	stdlib@go1.19.8	1.26.10

Open the chart page →

2,376

calertromholdings

0.0.1

1 of 1 See more

calert romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	stdlib@go1.18	1.26.10

Open the chart page →

5,877

calicoromholdings

0.1.1

4 of 4 See more

calico romholdings 0.1.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	stdlib@go1.15.2	1.26.10
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	stdlib@go1.15.2	1.26.10
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	stdlib@go1.15.2	1.26.10
quay.io/devtron/calico-networking :pod2daemon-flexvol-v3.19.1	c1f36b6e18e0	stdlib@go1.15.2	1.26.10

Open the chart page →

15,041

clairromholdings

0.1.14

1 of 2 See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	stdlib@go1.17.6	1.26.10

Open the chart page →

8,193

devtron-enterpriseromholdings

48.0.0

22 of 28 See more

devtron-enterprise romholdings 48.0.0

22 of the 28 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	stdlib@go1.18.2	1.26.10
quay.io/devtron/casbin :172ef62b-9450794d-464-39422	5bf041aacadd	stdlib@go1.24.0	1.26.10
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	stdlib@go1.25.0	1.26.10
quay.io/devtron/cost-sync :172ef62b-1159-39429	edf210d763ca	stdlib@go1.24.13	1.26.10
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	stdlib@go1.25.0	1.26.10
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.26.10
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	stdlib@go1.16.6	1.26.10
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	stdlib@go1.25.5	1.26.10
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	stdlib@go1.25.5	1.26.10
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	stdlib@go1.14.15	1.26.10
quay.io/devtron/kubectl :latest	2ad610626658	stdlib@go1.18.5	1.26.10
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	stdlib@go1.25.0	1.26.10
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	stdlib@go1.25.5	1.26.10
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	stdlib@go1.25.5	1.26.10
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	stdlib@go1.19.9	1.26.10
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.26.10
quay.io/devtron/nats-box :latest	48cdd3054b20	stdlib@go1.19.2	1.26.10
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.26.10
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.26.10
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	stdlib@go1.17.6	1.26.10
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.26.10
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	stdlib@go1.21.5	1.26.10

Open the chart page →

217,262

devtron-in-clustercdromholdings

0.10.2

2 of 2 See more

devtron-in-clustercd romholdings 0.10.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	stdlib@go1.15.7	1.26.10
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	stdlib@go1.20.7	1.26.10

Open the chart page →

7,104

devtron-logs-dumpromholdings

0.1.0

1 of 1 See more

devtron-logs-dump romholdings 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	stdlib@go1.20.4	1.26.10

Open the chart page →

6,026

devtron-operatorromholdings

0.23.3

10 of 11 See more

devtron-operator romholdings 0.23.3

10 of the 11 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	stdlib@go1.18.2	1.26.10
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	stdlib@go1.25.0	1.26.10
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.26.10
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	stdlib@go1.16.6	1.26.10
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	stdlib@go1.25.6	1.26.10
quay.io/devtron/kubectl :latest	2ad610626658	stdlib@go1.18.5	1.26.10
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	stdlib@go1.25.0	1.26.10
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	stdlib@go1.19.9	1.26.10
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.26.10
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	stdlib@go1.17.6	1.26.10

Open the chart page →

119,877

dgraphromholdings

0.0.20

1 of 1 See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	stdlib@go1.17.3	1.26.10

Open the chart page →

13,673

discord-alertmanagerromholdings

0.10.0

1 of 1 See more

discord-alertmanager romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/discord-alertmanager :ceceb475-65-352	03586419ca31	stdlib@go1.18.1	1.26.10

Open the chart page →

1,821

jcmhproxy-ingressromholdings

0.14.6

1 of 1 See more

jcmhproxy-ingress romholdings 0.14.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	stdlib@go1.19.13	1.26.10

Open the chart page →

2,120

kube-prometheus-stackromholdings

19.3.0

3 of 6 See more

kube-prometheus-stack romholdings 19.3.0

3 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	stdlib@go1.17	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	stdlib@go1.16	1.26.10
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	stdlib@go1.16.7	1.26.10

Open the chart page →

12,379

migrantromholdings

0.0.3

1 of 1 See more

migrant romholdings 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
migrate/migrate :latest	76cc2074cb66	stdlib@go1.26.7	1.26.10

Open the chart page →

399

migration-incluster-cdromholdings

0.10.0

1 of 1 See more

migration-incluster-cd romholdings 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.26.10

Open the chart page →

4,984

securityromholdings

0.2.2

1 of 1 See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	stdlib@go1.16.10	1.26.10

Open the chart page →

3,571

winter-soldierromholdings

0.10.6

1 of 1 See more

winter-soldier romholdings 0.10.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	stdlib@go1.18.10	1.26.10

Open the chart page →

2,033

zincromholdings

0.1.2

1 of 1 See more

zinc romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	stdlib@go1.19.7	1.26.10

Open the chart page →

2,368

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
conduction/betaalservice-php :latest	ece1ab544c57	stdlib@go1.13.10	1.26.10	1
conduction/cgrc-php :dev	25415534d245	stdlib@go1.13.10	1.26.10	1
conduction/checkin-component-php :dev	3423845692c1	stdlib@go1.13.10	1.26.10	1
conduction/conduction-ui-php :dev	2744565516e8	stdlib@go1.13.10	1.26.10	1
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	stdlib@go1.13.10	1.26.10	1
conduction/docparser-php :dev	b6f95c8ead7d	stdlib@go1.13.10	1.26.10	1
conduction/kvk-php :dev	8f177f9f8a7b	stdlib@go1.13.10	1.26.10	1
conduction/pan-php :dev	24f03c57568f	stdlib@go1.13.10	1.26.10	1
confluentinc/cp-kafka :latest	5e8f3ab5b497	stdlib@go1.27.1	1.26.10	1
confluentinc/cp-schema-registry :latest	482d3048b3f6	stdlib@go1.27.1	1.26.10	1
consensys/web3signer :latest	6d5e92aa95c7	stdlib@go1.26.7	1.26.10	1
containous/maesh :v1.3.2	587162516502	stdlib@go1.14.4	1.26.10	1
contentsquareplatform/chproxy :v1.26.5	24555f22d4be	stdlib@go1.22.7	1.26.10	1
coordimap/coordimap-agent :latest	7748fd0fae9f	stdlib@go1.26.4	1.26.10	1
coredns/coredns :1.12.0	40384aa1f5ea	stdlib@go1.23.3	1.26.10	1
coredns/coredns :1.7.0	73ca82b4ce82	stdlib@go1.14.4	1.26.10	1
coredns/coredns :1.11.3	9caabbf6238b	stdlib@go1.21.11	1.26.10	1
coredns/coredns :1.10.1	a0ead06651cf	stdlib@go1.20	1.26.10	1
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	stdlib@go1.24.1	1.26.10	1
cortezaproject/corteza :2024.9.0	8eb7a26605c9	stdlib@go1.19.13	1.26.10	1
cortezaproject/corteza :2024.9.4	cb9f200de5d2	stdlib@go1.24.1	1.26.10	1
cortezaproject/corteza-server-corredor :2024.9.4	4ea78dfe5364	stdlib@go1.23.5	1.26.10	1
couchbase/admission-controller :2.9.3	bf2d2e87e45f	stdlib@go1.26.5	1.26.10	1
couchbase/operator :2.9.3	69a385b49e1f	stdlib@go1.26.5	1.26.10	1
countly/api :25.05.4	f4cc7447c4f5	stdlib@go1.19.4	1.26.10	1
countly/countly-server :25.05.4	e3c238248f99	stdlib@go1.21.11	1.26.10	1
countly/frontend :25.05.4	2acbc11499b6	stdlib@go1.19.4	1.26.10	1
craftypath/sops-operator :v0.8.0	402a0024c732	stdlib@go1.16.5	1.26.10	1
crinis/typo3 :legacy-13.4.36	5636db17b924	stdlib@go1.24.4	1.26.10	1
crocodilestick/calibre-web-automated :v4.0.6	c31a738b6d5e	stdlib@go1.17.8	1.26.10	1
crossplane/crossplane :v0.12.0	66666e6963af	stdlib@go1.14.4	1.26.10	1
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	stdlib@go1.13.14	1.26.10	1
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	stdlib@go1.13.15	1.26.10	1
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	stdlib@go1.14.2	1.26.10	1
csepulvedab/secret-sync :0.5	227a6f2b0ff8	stdlib@go1.19.4	1.26.10	1
ctolon17/owui-cee-proxy :0.8.0	6023888bf007	stdlib@go1.26.3	1.26.10	1
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	stdlib@go1.16.13	1.26.10	1
cube8021/push-to-k8s :v1.2.2	c5d1a1ec4c5e	stdlib@go1.22.4	1.26.10	1
curtismager20/mcp-envoy :1.38.1	0ae2ba784a5e	ca-certificates@20260909-r2	20260909-r3	1
cyberark/conjur-k8s-csi-provider :latest	737a967088d9	stdlib@go1.26.5	1.26.10	1
cybrarist/discount-bandit :v4.0.5	bc327406db74	stdlib@go1.25.4	1.26.10	1
cyverse/irods-csi-driver :v0.12.2	c5877ea80e0e	stdlib@go1.26.8	1.26.10	1
czerwonk/ping_exporter :v1.2.0	2a35a0584608	stdlib@go1.26.0	1.26.10	1
czerwonk/ping_exporter :v1.1.3	94f51e1ef1e2	stdlib@go1.22.1	1.26.10	1
dabealu/zookeeper-exporter :latest	86106fec315f	stdlib@go1.14.15	1.26.10	1
dagster/dagster-celery-k8s :1.13.26	605d41ae6647	rustls-webpki@0.103.14 webpki-root-certs@1.0.9	0.103.16 1.0.10	1
dagster/dagster-cloud-agent :1.13.26	c9320c34f7ed	rustls-webpki@0.103.14 stdlib@go1.25.7 webpki-root-certs@1.0.9	0.103.16 1.26.10 1.0.10	1
dalf/filtron :latest	b19cbf5b2f37	stdlib@go1.18.2	1.26.10	1
dalf/morty :latest	248a4849c350	stdlib@go1.18.2	1.26.10	1
danielfm/kube-ecr-cleanup-controller :0.1.10	12485563b1d0	stdlib@go1.19.6	1.26.10	1