CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,575; of 18,219 indexed, latest versions
Container images: 6,494; deployed by those charts
Fix available: 5 of 5; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,575 of 18,219 indexed charts deploy, on 6,494 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+211 more	1.26.10	6,259
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more	20260909-r3	410
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	98
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	66
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more	0.26.11	12

OSV records: CGA-32jh-59ph-xj58 GO-2026-6809 RUSTSEC-2026-0381 RUSTSEC-2026-0382 RUSTSEC-2026-0383
Also known as: CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending: Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,575 by stars

Chart

Latest

Affected images

Radar Score

falcofalcosecurity

9.2.1

3 of 3 See more

falco falcosecurity 9.2.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
falcosecurity/falco :0.45.1	69e957f91b3a	ca-certificates@20260909-r2 stdlib@go1.26.8	20260909-r3 1.26.10
falcosecurity/falco-driver-loader :0.45.1	6cfd7418907e	stdlib@go1.26.8	1.26.10
falcosecurity/falcoctl :0.14.2	90ba9627886e	ca-certificates@20260611-r1 stdlib@go1.27.1	20260909-r3 1.26.10

Open the chart page →

3,631

kubeviewkubeview

2.2.1

1 of 1 See more

kubeview kubeview 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :latest	45b64d7c7016	stdlib@go1.27.1	1.26.10

Open the chart page →

408

alertmanagerprometheus-community

2.1.1

2 of 2 See more

alertmanager prometheus-community 2.1.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.1	06b52bd4dbe3	stdlib@go1.26.8	1.26.10
quay.io/prometheus/alertmanager :v0.34.1	e9733bafb1bd	stdlib@go1.26.8	1.26.10

Open the chart page →

538

kongkong

3.4.1

1 of 2 See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kong/kubernetes-ingress-controller :3.5	979f12864a13	stdlib@go1.25.12	1.26.10

Open the chart page →

1,036

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	stdlib@go1.16.2	1.26.10

Open the chart page →

3,553

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	stdlib@go1.24.1	1.26.10

Open the chart page →

2,197

prometheus-node-exporterprometheus-community

4.60.0

1 of 1 See more

prometheus-node-exporter prometheus-community 4.60.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	stdlib@go1.26.5	1.26.10

Open the chart page →

387

rook-cephrook

1.21.0

2 of 2 See more

rook-ceph rook 1.21.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
rook/ceph :v1.21.0	2c3a65786d3c	stdlib@go1.22.10	1.26.10
quay.io/cephcsi/ceph-csi-operator :v1.1.0	c42c95c36fa2	stdlib@go1.26.8	1.26.10

Open the chart page →

2,124

grafanagrafana-community

14.0.1

1 of 1 See more

grafana grafana-community 14.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.4-distroless	ae3d3add290a	stdlib@go1.26.7	1.26.10

Open the chart page →

410

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	stdlib@go1.25.6	1.26.10

Open the chart page →

1,639

victoria-metrics-k8s-stackvictoriametrics

0.96.0

5 of 7 See more

victoria-metrics-k8s-stack victoriametrics 0.96.0

5 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.3-distroless	202e5d5b3f84	stdlib@go1.26.7	1.26.10
victoriametrics/operator :v0.75.0	78da26b41a81	stdlib@go1.27.1	1.26.10
ghcr.io/victoriametrics/sync-job :v0.0.17	b6f233532a85	stdlib@go1.26.4-X:jsonv2	1.26.10
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	stdlib@go1.26.5	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.20.0	42cfe3723a5f	stdlib@go1.26.6	1.26.10

Open the chart page →

1,913

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	stdlib@go1.19.5	1.26.10

Open the chart page →

2,315

kuredkured

6.1.0

1 of 1 See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kubereboot/kured :1.23.0	8dfd3c2e8893	stdlib@go1.26.4	1.26.10

Open the chart page →

560

home-assistanthelm-hass

0.3.87

1 of 1 See more

home-assistant helm-hass 0.3.87

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2026.10.2	33afb0659d78	rustls-webpki@0.103.14 stdlib@go1.25.6 webpki-root-certs@1.0.9	0.103.16 1.26.10 1.0.10

Open the chart page →

3,196

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	stdlib@go1.22.2	1.26.10

Open the chart page →

1,587

openebsopenebs

4.6.2

32 of 35 See more

openebs openebs 4.6.2

32 of the 35 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	stdlib@go1.24.1	1.26.10
grafana/loki :3.4.2	58a6c186ce78	stdlib@go1.23.6	1.26.10
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.26.10
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.26.10
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.26.10
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	stdlib@go1.24.5	1.26.10
openebs/lvm-driver :1.10.1	41f73aba7f31	stdlib@go1.24.7	1.26.10
openebs/mayastor-agent-core :v2.12.2	00429e487478	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-agent-ha-cluster :v2.12.2	cb2fa3bfc1f8	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-agent-ha-node :v2.12.2	964cbb43c5e5	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-api-rest :v2.12.2	0c646268cd8c	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-csi-controller :v2.12.2	38a82f29f777	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-csi-node :v2.12.2	cbf834303735	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-eventing-aggregator :v2.12.2	4c12f06983b4	rustls-webpki@0.102.8	0.103.16
openebs/mayastor-io-engine :v2.12.2	0161a3e6f902	rustls-webpki@0.103.13	0.103.16
openebs/mayastor-metrics-exporter-io-engine :v2.12.2	a57c47d3e624	rustls-webpki@0.102.8 webpki-roots@0.25.4	0.103.16 0.26.11
openebs/mayastor-obs-callhome :v2.12.2	4c25179ca592	rustls-webpki@0.101.7 webpki-roots@0.25.4	0.103.16 0.26.11
openebs/mayastor-obs-callhome-stats :v2.12.2	cfb042c35b92	rustls-webpki@0.101.7 webpki-roots@0.25.4	0.103.16 0.26.11
openebs/mayastor-operator-diskpool :v2.12.2	7cd50e41324c	rustls-webpki@0.102.8	0.103.16
openebs/mc :RELEASE.2024-11-21T17-21-54Z	4d1b85539919	stdlib@go1.23.4	1.26.10
openebs/minio :RELEASE.2024-12-18T13-15-44Z	bb04e41fc1b8	stdlib@go1.23.4	1.26.10
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	stdlib@go1.25.0	1.26.10
openebs/zfs-driver :2.11.2	0234692bb4a4	stdlib@go1.26.2	1.26.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.26.10
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	stdlib@go1.23.1	1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	stdlib@go1.23.1	1.26.10
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	stdlib@go1.23.1	1.26.10
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	stdlib@go1.24.6	1.26.10
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	stdlib@go1.24.6	1.26.10
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	stdlib@go1.23.1	1.26.10
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	stdlib@go1.23.1	1.26.10
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	stdlib@go1.23.1	1.26.10

Open the chart page →

36,827

tigera-operatorprojectcalico

3.33.0

1 of 1 See more

tigera-operator projectcalico 3.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.44.0	066c2e8d6745	stdlib@go1.27.1-X:boringcrypto	1.26.10

Open the chart page →

231

open-webuiopen-webui

17.0.0

1 of 4 See more

open-webui open-webui 17.0.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.26.10

Open the chart page →

2,372

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	stdlib@go1.20.7	1.26.10
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	stdlib@go1.19.1	1.26.10

Open the chart page →

4,546

aws-for-fluent-bitaws

0.2.0

1 of 1 See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit :3.2.1	a480a1241720	stdlib@go1.25.6	1.26.10

Open the chart page →

568

apisixapisix

2.18.2

1 of 3 See more

apisix apisix 2.18.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	stdlib@go1.23.10	1.26.10

Open the chart page →

3,674

corednscoredns

1.49.0

1 of 1 See more

coredns coredns 1.49.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
coredns/coredns :1.14.7	7efd3c635b03	stdlib@go1.26.6	1.26.10

Open the chart page →

576

vpafairwinds-stable

5.1.0

4 of 4 See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.k8s.io/autoscaling/vpa-admission-controller :1.7.1	be29624f7f12	stdlib@go1.26.5	1.26.10
registry.k8s.io/autoscaling/vpa-recommender :1.7.1	89cea705535f	stdlib@go1.26.5	1.26.10
registry.k8s.io/autoscaling/vpa-updater :1.7.1	feb42a526970	stdlib@go1.26.5	1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	stdlib@go1.20.1	1.26.10

Open the chart page →

2,951

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	stdlib@go1.18.8	1.26.10

Open the chart page →

2,989

opentelemetry-operatoropentelemetry-helm

0.126.1

1 of 1 See more

opentelemetry-operator opentelemetry-helm 0.126.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.161.0	76ac4fa40512	stdlib@go1.27.2	1.26.10

Open the chart page →

trinotrino

1.45.0

1 of 1 See more

378

prometheus-pushgatewayprometheus-community

3.9.1

1 of 1 See more

prometheus-pushgateway prometheus-community 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/prometheus/pushgateway :v1.11.4	91a56b89b97d	stdlib@go1.27.1	1.26.10

Open the chart page →

231

keycloakcloudpirates-keycloak

0.21.48

2 See more

keycloak cloudpirates-keycloak 0.21.48

2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :18.0	073e7c8b84e2	stdlib@go1.24.6	1.26.10
library/postgres :18.6	74935e722416	stdlib@go1.24.6	1.26.10

Open the chart page →

—

dagsterdagster

1.13.26

3 of 5 See more

dagster dagster 1.13.26

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
dagster/dagster-celery-k8s :1.13.26	605d41ae6647	rustls-webpki@0.103.14 webpki-root-certs@1.0.9	0.103.16 1.0.10
dagster/user-code-example :1.13.26	5c98e09b2aeb	rustls-webpki@0.103.14 webpki-root-certs@1.0.9	0.103.16 1.0.10
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.26.10

Open the chart page →

4,162

prometheus-redis-exporterprometheus-community

6.34.0

1 of 1 See more

prometheus-redis-exporter prometheus-community 6.34.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.94.0	0842ef7110e6	stdlib@go1.27.2	1.26.10

Open the chart page →

zabbixzabbix-community

7.1.0

3 of 5 See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :16	ca0bd484cb98	stdlib@go1.24.6	1.26.10
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	stdlib@go1.24.10	1.26.10
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	stdlib@go1.24.10	1.26.10

Open the chart page →

16,569

graylogkong-z

3.0.38

1 of 5 See more

graylog kong-z 3.0.38

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	stdlib@go1.24.2	1.26.10

Open the chart page →

3,396

netdatanetdata

3.7.176

1 of 1 See more

netdata netdata 3.7.176

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.12.1	5cfa05a5fa56	stdlib@go1.27.0	1.26.10

Open the chart page →

3,061

connectonepassword-connect

2.4.2

2 of 2 See more

connect onepassword-connect 2.4.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.3	656e4b10df83	ca-certificates@20260611-r1 stdlib@go1.26.8	20260909-r3 1.26.10
1password/connect-sync :1.8.3	a760350c941a	ca-certificates@20260611-r1 stdlib@go1.26.8	20260909-r3 1.26.10

Open the chart page →

538

node-problem-detectordeliveryhero

2.4.2

1 of 1 See more

node-problem-detector deliveryhero 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	stdlib@go1.25.5	1.26.10

Open the chart page →

2,569

opencostopencost

2.5.33

1 of 2 See more

opencost opencost 2.5.33

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.3	4cdd173253e5	stdlib@go1.27.1	1.26.10

Open the chart page →

563

openfaasopenfaas

15.0.14

6 of 6 See more

openfaas openfaas 15.0.14

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.26.10
ghcr.io/openfaas/faas-netes :0.18.17	6cfe35401d25	stdlib@go1.26.3	1.26.10
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	stdlib@go1.24.13	1.26.10
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.26.10
quay.io/prometheus/alertmanager :v0.34.1	e9733bafb1bd	stdlib@go1.26.8	1.26.10
quay.io/prometheus/prometheus :v3.15.0	efd719c99d83	stdlib@go1.27.1	1.26.10

Open the chart page →

5,697

prometheus-elasticsearch-exporterprometheus-community

7.4.0

1 of 1 See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/elasticsearch-exporter :v1.11.0	a056739b095d	stdlib@go1.26.5	1.26.10

Open the chart page →

413

flux2fluxcd-community

2.19.1

7 of 7 See more

flux2 fluxcd-community 2.19.1

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
fluxcd/flux-cli :v2.9.5	704d55295355	stdlib@go1.26.2	1.26.10
ghcr.io/fluxcd/helm-controller :v1.6.4	8ff15409e46d	stdlib@go1.26.7	1.26.10
ghcr.io/fluxcd/image-automation-controller :v1.2.5	e1a2720d3951	stdlib@go1.26.7	1.26.10
ghcr.io/fluxcd/image-reflector-controller :v1.2.5	c83ce5c06fed	stdlib@go1.26.7	1.26.10
ghcr.io/fluxcd/kustomize-controller :v1.9.5	a3a955eb2bc4	stdlib@go1.26.7	1.26.10
ghcr.io/fluxcd/notification-controller :v1.9.4	840f318265ee	stdlib@go1.26.7	1.26.10
ghcr.io/fluxcd/source-controller :v1.9.5	6f20d232d596	stdlib@go1.26.7	1.26.10

Open the chart page →

4,739

gitlab-agentgitlab

2.33.0

1 of 1 See more

gitlab-agent gitlab 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk :v19.5.0	49dd7b857f3e	stdlib@go1.27.1	1.26.10

Open the chart page →

231

policy-reporterpolicy-reporter

3.11.1

1 of 1 See more

policy-reporter policy-reporter 3.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kyverno/policy-reporter :3.11.1	a95ef6394c4d	stdlib@go1.27.2	1.26.10

Open the chart page →

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	stdlib@go1.18.2	1.26.10

Open the chart page →

6,813

jaeger-operatorjaegertracing

2.57.0

1 of 1 See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	stdlib@go1.22.3	1.26.10

Open the chart page →

1,186

netboxnetbox

8.3.93

3 of 5 See more

netbox netbox 8.3.93

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnami/valkey :latest	9985c6b0fef4	stdlib@go1.26.9	1.26.10
rancher/kubectl :v1.36.2	06c7a7a97727	stdlib@go1.26.4	1.26.10
ghcr.io/netbox-community/netbox :v4.7.3	1d6e0b5fbd48	rustls-webpki@0.103.14 stdlib@go1.27.1 webpki-root-certs@1.0.9	0.103.16 1.26.10 1.0.10

Open the chart page →

1,666

postgrescloudpirates-postgres

0.21.2

1 of 1 See more

postgres cloudpirates-postgres 0.21.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :18.6	74935e722416	stdlib@go1.24.6	1.26.10

Open the chart page →

1,748

vault-secrets-operatorhashicorp

1.6.2

1 See more

vault-secrets-operator hashicorp 1.6.2

1 container image this version deploys carries CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	stdlib@go1.23.0	1.26.10

Open the chart page →

—

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	stdlib@go1.21.4	1.26.10

Open the chart page →

2,107

rocketchatrocketchat-server

7.1.0

6 See more

rocketchat rocketchat-server 7.1.0

6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.26.10
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	stdlib@go1.20.7	1.26.10
library/nats :2.12-alpine	b270f5e24283	stdlib@go1.25.12	1.26.10
natsio/nats-box :0.19.2	8031d190c7ee	stdlib@go1.25.2	1.26.10
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.26.10
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	stdlib@go1.24.6	1.26.10

Open the chart page →

—

valkeybitnami

6.3.4

1 of 1 See more

valkey bitnami 6.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnami/valkey :latest	9985c6b0fef4	stdlib@go1.26.9	1.26.10

Open the chart page →

trust-managercert-manager

0.25.0

2 of 2 See more

trust-manager cert-manager 0.25.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/jetstack/trust-manager :v0.25.0	0521921c2a46	stdlib@go1.27.1	1.26.10
quay.io/jetstack/trust-pkg-debian-trixie :20250419.2	3093d4f6634f	stdlib@go1.27.1	1.26.10

Open the chart page →

391

Container images carrying it

6,494 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
clastix/capsule-rancher-addon :v0.1.1	43d301afbca8	stdlib@go1.19.2	1.26.10	1
clastix/kamaji :latest	13990b4b8141	stdlib@go1.26.5	1.26.10	1
clastix/kubectl :v1.30	42f20542be8a	stdlib@go1.22.2	1.26.10	1
cleanstart/minio :latest	f1156f7fd14a	stdlib@go1.26.4	1.26.10	1
clickhouse/clickhouse-server :23.8	512bb8a21483	stdlib@go1.19.10	1.26.10	1
clickhouse/clickhouse-server :23.4.2.11	dc5658853ce1	stdlib@go1.19.5	1.26.10	1
cloud37io/s3-encryption-gateway :0.12.3	10e791e98b62	stdlib@go1.27.1	1.26.10	1
cloudbees/cert-requester :2.3.3	1d44fb4f799b	stdlib@go1.20.1	1.26.10	1
cloudbees/sidecar-injector :2.3.3	8f102ef0383a	stdlib@go1.20.1	1.26.10	1
cloudecho/hello :0.1.0	f76ede067ab9	stdlib@go1.16.6	1.26.10	1
cloudentity/openbanking-quickstart-bank :1.11.1	9402ec4b5016	stdlib@go1.15.14	1.26.10	1
cloudentity/openbanking-quickstart-configuration :1.11.1	8a1890eb8265	stdlib@go1.15.14	1.26.10	1
cloudentity/openbanking-quickstart-consent-admin-portal :1.11.1	ee83cdd45b7b	stdlib@go1.15.2	1.26.10	1
cloudentity/openbanking-quickstart-consent-page :1.11.1	5728654cecb7	stdlib@go1.16.6	1.26.10	1
cloudentity/openbanking-quickstart-consent-self-service-portal :1.11.1	8ca94ae6acf4	stdlib@go1.15.2	1.26.10	1
cloudentity/openbanking-quickstart-financroo-tpp :1.11.1	c04eb10c77b7	stdlib@go1.15.2	1.26.10	1
cloudflare/cloudflared :2024.8.3	14d9c6b01b29	stdlib@go1.22.2-devel-cf	1.26.10	1
cloudflare/cloudflared :2024.5.0	5d5f70a59d5e	stdlib@go1.22.2-devel-cf	1.26.10	1
cloudflare/cloudflared :2024.11.1	665dda65335e	stdlib@go1.22.5-devel-cf	1.26.10	1
cloudflare/cloudflared :2026.6.1	6d91c121b803	stdlib@go1.26.4	1.26.10	1
cloudflare/cloudflared :2023.10.0	c18744ae1767	stdlib@go1.20.6	1.26.10	1
cloudnativelabs/kube-router :v1.6.0	0ec7cd73f43f	stdlib@go1.19.5	1.26.10	1
cloudposse/bastion :latest	0d9507e8a760	stdlib@go1.13.3	1.26.10	1
cloudreve/cloudreve :3.8.0	09093aec5a20	stdlib@go1.20	1.26.10	1
cloudreve/cloudreve :4.19.1	5c6c5baf7fa5	stdlib@go1.26.5	1.26.10	1
cloudreve/cloudreve :4.18.0	f7a464100bf6	stdlib@go1.25.5	1.26.10	1
cmacrae/d2-prometheus-exporter :v0.1.0	fc5fecba436e	stdlib@go1.15	1.26.10	1
cmacrae/lgtm :0.1.0	dec8d490fe40	stdlib@go1.14.1	1.26.10	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	stdlib@go1.13.14	1.26.10	1
codecov/self-hosted-gateway :24.4.1	de483faad6e5	stdlib@go1.22.0	1.26.10	1
codenotary/immudb :1.9.7	7c85d7cc4f22	stdlib@go1.18.10	1.26.10	1
codercom/code-server :4.11.0-debian	1e2cc688008e	stdlib@go1.14.4	1.26.10	1
codercom/code-server :3.10.2	47605610ad8d	stdlib@go1.14.4	1.26.10	1
coderenvs/coder-service :1.44.6	1deffc4670e6	stdlib@go1.21.9	1.26.10	1
codeskyblue/gohttpserver :latest	caa862590e34	stdlib@go1.16.3	1.26.10	1
codiacimages/codiac-deployment-bundle :0.0.15	d7d1e91eccde	stdlib@go1.24.11	1.26.10	1
cometbft/cometbft :v0.38.17	22c2ac018f40	stdlib@go1.22.11	1.26.10	1
concourse/concourse :8.3.1	c9d48dfbf4f9	ca-certificates@20260909-r1 stdlib@go1.27.1	20260909-r3 1.26.10	1
conduction/agendaservice-php :latest	9cfeeb6c7c20	stdlib@go1.13.10	1.26.10	1
conduction/balance-registration-php :dev	c36094a41369	stdlib@go1.13.10	1.26.10	1
conduction/betaalservice-php :latest	ece1ab544c57	stdlib@go1.13.10	1.26.10	1
conduction/cgrc-php :dev	25415534d245	stdlib@go1.13.10	1.26.10	1
conduction/checkin-component-php :dev	3423845692c1	stdlib@go1.13.10	1.26.10	1
conduction/conduction-ui-php :dev	2744565516e8	stdlib@go1.13.10	1.26.10	1
conduction/contactmoment-component-php :dev	e1d4ad1e22a8	stdlib@go1.13.10	1.26.10	1
conduction/docparser-php :dev	b6f95c8ead7d	stdlib@go1.13.10	1.26.10	1
conduction/kvk-php :dev	8f177f9f8a7b	stdlib@go1.13.10	1.26.10	1
conduction/pan-php :dev	24f03c57568f	stdlib@go1.13.10	1.26.10	1
confluentinc/cp-kafka :latest	5e8f3ab5b497	stdlib@go1.27.1	1.26.10	1
confluentinc/cp-schema-registry :latest	482d3048b3f6	stdlib@go1.27.1	1.26.10	1