StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
stdlib@go1.20.5
1.26.10

Open the chart page →

39,444
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
stdlib@go1.21.8
1.26.10

Open the chart page →

13,037
falcofalcosecurity9.2.13 of 3See more

falco falcosecurity 9.2.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
falcosecurity/falco:0.45.169e957f91b3a
ca-certificates@20260909-r2
stdlib@go1.26.8
20260909-r3
1.26.10
falcosecurity/falco-driver-loader:0.45.16cfd7418907e
stdlib@go1.26.8
1.26.10
falcosecurity/falcoctl:0.14.290ba9627886e
ca-certificates@20260611-r1
stdlib@go1.27.1
20260909-r3
1.26.10

Open the chart page →

17,171
kubeviewkubeviewVerified publisher2.2.11 of 1See more

kubeview kubeview 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:latest45b64d7c7016
stdlib@go1.27.1
1.26.10

Open the chart page →

409
alertmanagerprometheus-communityOfficialVerified publisher2.1.12 of 2See more

alertmanager prometheus-community 2.1.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.10
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10

Open the chart page →

540
kongkongOfficialVerified publisher3.4.11 of 2See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.10

Open the chart page →

1,037
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
stdlib@go1.16.2
1.26.10

Open the chart page →

3,553
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
stdlib@go1.24.1
1.26.10

Open the chart page →

2,198
prometheus-node-exporterprometheus-communityOfficialVerified publisher4.60.01 of 1See more

prometheus-node-exporter prometheus-community 4.60.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10

Open the chart page →

387
rook-cephrookOfficialVerified publisher1.21.02 of 2See more

rook-ceph rook 1.21.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rook/ceph:v1.21.02c3a65786d3c
stdlib@go1.22.10
1.26.10
quay.io/cephcsi/ceph-csi-operator:v1.1.0c42c95c36fa2
stdlib@go1.26.8
1.26.10

Open the chart page →

2,124
grafanagrafana-communityVerified publisher14.0.11 of 1See more

grafana grafana-community 14.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.4-distrolessae3d3add290a
stdlib@go1.26.7
1.26.10

Open the chart page →

411
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
stdlib@go1.25.6
1.26.10

Open the chart page →

1,640
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.96.05 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.96.0

5 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.10
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.10
ghcr.io/victoriametrics/sync-job:v0.0.17b6f233532a85
stdlib@go1.26.4-X:jsonv2
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

1,915
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
stdlib@go1.19.5
1.26.10

Open the chart page →

2,316
kuredkuredOfficialVerified publisher6.1.01 of 1See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubereboot/kured:1.23.08dfd3c2e8893
stdlib@go1.26.4
1.26.10

Open the chart page →

561
home-assistanthelm-hassVerified publisher0.3.871 of 1See more

home-assistant helm-hass 0.3.87

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.233afb0659d78
rustls-webpki@0.103.14
stdlib@go1.25.6
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

3,436
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.10

Open the chart page →

1,588
openebsopenebsOfficialVerified publisher4.6.232 of 35See more

openebs openebs 4.6.2

32 of the 35 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
stdlib@go1.24.1
1.26.10
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.26.10
library/nats:2.9.17-alpine1a7b320b2942
stdlib@go1.19.9
1.26.10
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
stdlib@go1.19.4
1.26.10
natsio/prometheus-nats-exporter:0.11.031c02aac089a
stdlib@go1.20.3
1.26.10
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.26.10
openebs/lvm-driver:1.10.141f73aba7f31
stdlib@go1.24.7
1.26.10
openebs/mayastor-agent-core:v2.12.200429e487478
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-agent-ha-cluster:v2.12.2cb2fa3bfc1f8
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-agent-ha-node:v2.12.2964cbb43c5e5
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-api-rest:v2.12.20c646268cd8c
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-csi-controller:v2.12.238a82f29f777
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-csi-node:v2.12.2cbf834303735
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-io-engine:v2.12.20161a3e6f902
rustls-webpki@0.103.13
0.103.16
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
rustls-webpki@0.102.8
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-obs-callhome:v2.12.24c25179ca592
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-obs-callhome-stats:v2.12.2cfb042c35b92
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-operator-diskpool:v2.12.27cd50e41324c
rustls-webpki@0.102.8
0.103.16
openebs/mc:RELEASE.2024-11-21T17-21-54Z4d1b85539919
stdlib@go1.23.4
1.26.10
openebs/minio:RELEASE.2024-12-18T13-15-44Zbb04e41fc1b8
stdlib@go1.23.4
1.26.10
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.26.10
openebs/zfs-driver:2.11.20234692bb4a4
stdlib@go1.26.2
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.26.10

Open the chart page →

36,834
tigera-operatorprojectcalico3.33.01 of 1See more

tigera-operator projectcalico 3.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.10

Open the chart page →

232
open-webuiopen-webui17.0.01 of 4See more

open-webui open-webui 17.0.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.26.10

Open the chart page →

2,373
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
stdlib@go1.19.1
1.26.10

Open the chart page →

4,546
aws-for-fluent-bitaws0.2.01 of 1See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit:3.2.1a480a1241720
stdlib@go1.25.6
1.26.10

Open the chart page →

568
apisixapisix2.18.21 of 3See more

apisix apisix 2.18.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.26.10

Open the chart page →

3,674
corednscorednsVerified publisher1.49.01 of 1See more

coredns coredns 1.49.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
coredns/coredns:1.14.77efd3c635b03
stdlib@go1.26.6
1.26.10

Open the chart page →

577
vpafairwinds-stableVerified publisher5.1.04 of 4See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.10

Open the chart page →

2,955
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
stdlib@go1.18.8
1.26.10

Open the chart page →

2,990
opentelemetry-operatoropentelemetry-helmOfficialVerified publisher0.126.11 of 1See more

opentelemetry-operator opentelemetry-helm 0.126.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.161.076ac4fa40512
stdlib@go1.27.2
1.26.10

Open the chart page →

5
trinotrino1.45.01 of 1See more

trino trino 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
trinodb/trino:4842704eb53935a
stdlib@go1.26.5
1.26.10

Open the chart page →

379
prometheus-pushgatewayprometheus-communityOfficialVerified publisher3.9.11 of 1See more

prometheus-pushgateway prometheus-community 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.10

Open the chart page →

232
keycloakcloudpirates-keycloakVerified publisher0.21.482 of 3See more

keycloak cloudpirates-keycloak 0.21.48

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
stdlib@go1.24.6
1.26.10
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

5,184
dagsterdagsterVerified publisher1.13.263 of 5See more

dagster dagster 1.13.26

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.26605d41ae6647
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
dagster/user-code-example:1.13.265c98e09b2aeb
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
library/postgres:14.6f565573d74ae
stdlib@go1.18.2
1.26.10

Open the chart page →

4,153
prometheus-redis-exporterprometheus-communityVerified publisher6.34.01 of 1See more

prometheus-redis-exporter prometheus-community 6.34.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.94.00842ef7110e6
stdlib@go1.27.2
1.26.10

Open the chart page →

9
zabbixzabbix-communityVerified publisher7.1.03 of 5See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
stdlib@go1.24.10
1.26.10
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
stdlib@go1.24.10
1.26.10

Open the chart page →

16,616
graylogkong-zVerified publisher3.0.381 of 5See more

graylog kong-z 3.0.38

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.10

Open the chart page →

3,398
netdatanetdataVerified publisher3.7.1761 of 1See more

netdata netdata 3.7.176

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
netdata/netdata:v2.12.15cfa05a5fa56
stdlib@go1.27.0
1.26.10

Open the chart page →

3,055
connectonepassword-connect2.4.22 of 2See more

connect onepassword-connect 2.4.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
1password/connect-api:1.8.3656e4b10df83
ca-certificates@20260611-r1
stdlib@go1.26.8
20260909-r3
1.26.10
1password/connect-sync:1.8.3a760350c941a
ca-certificates@20260611-r1
stdlib@go1.26.8
20260909-r3
1.26.10

Open the chart page →

540
node-problem-detectordeliveryheroVerified publisher2.4.21 of 1See more

node-problem-detector deliveryhero 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
stdlib@go1.25.5
1.26.10

Open the chart page →

2,569
opencostopencostOfficialVerified publisher2.5.331 of 2See more

opencost opencost 2.5.33

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.10

Open the chart page →

564
openfaasopenfaas15.0.146 of 6See more

openfaas openfaas 15.0.14

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
stdlib@go1.20.11
1.26.10
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
stdlib@go1.26.3
1.26.10
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
stdlib@go1.24.13
1.26.10
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
stdlib@go1.23.4
1.26.10
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10
quay.io/prometheus/prometheus:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.10

Open the chart page →

5,702
prometheus-elasticsearch-exporterprometheus-communityVerified publisher7.4.01 of 1See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/elasticsearch-exporter:v1.11.0a056739b095d
stdlib@go1.26.5
1.26.10

Open the chart page →

413
flux2fluxcd-community2.19.17 of 7See more

flux2 fluxcd-community 2.19.1

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
fluxcd/flux-cli:v2.9.5704d55295355
stdlib@go1.26.2
1.26.10
ghcr.io/fluxcd/helm-controller:v1.6.48ff15409e46d
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/image-automation-controller:v1.2.5e1a2720d3951
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/kustomize-controller:v1.9.5a3a955eb2bc4
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/source-controller:v1.9.56f20d232d596
stdlib@go1.26.7
1.26.10

Open the chart page →

4,743
gitlab-agentgitlabVerified publisher2.33.01 of 1See more

gitlab-agent gitlab 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk:v19.5.049dd7b857f3e
stdlib@go1.27.1
1.26.10

Open the chart page →

232
policy-reporterpolicy-reporterOfficialVerified publisher3.11.11 of 1See more

policy-reporter policy-reporter 3.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kyverno/policy-reporter:3.11.1a95ef6394c4d
stdlib@go1.27.2
1.26.10

Open the chart page →

75
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
stdlib@go1.18.2
1.26.10

Open the chart page →

6,790
jaeger-operatorjaegertracingOfficialVerified publisher2.57.01 of 1See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/jaeger-operator:1.61.03f036ec60e61
stdlib@go1.22.3
1.26.10

Open the chart page →

1,187
netboxnetboxOfficialVerified publisher8.3.933 of 5See more

netbox netbox 8.3.93

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/valkey:latest9985c6b0fef4
stdlib@go1.26.9
1.26.10
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.26.10
ghcr.io/netbox-community/netbox:v4.7.31d6e0b5fbd48
rustls-webpki@0.103.14
stdlib@go1.27.1
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

1,889
postgrescloudpirates-postgresVerified publisher0.21.21 of 1See more

postgres cloudpirates-postgres 0.21.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

1,742
vault-secrets-operatorhashicorpVerified publisher1.6.21 of 2See more

vault-secrets-operator hashicorp 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
stdlib@go1.23.0
1.26.10

Open the chart page →

1,562
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
stdlib@go1.21.4
1.26.10

Open the chart page →

2,107
rocketchatrocketchat-server7.1.06 of 12See more

rocketchat rocketchat-server 7.1.0

6 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
stdlib@go1.20.7
1.26.10
library/nats:2.12-alpineb270f5e24283
stdlib@go1.25.12
1.26.10
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.10
natsio/nats-server-config-reloader:0.21.110ff229eaf52
stdlib@go1.25.5
1.26.10
natsio/prometheus-nats-exporter:0.18.002469dc907bc
stdlib@go1.24.6
1.26.10

Open the chart page →

17,042

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
documenso/documenso:v1.8.17f16a9449f18
stdlib@go1.20.12
1.26.10
1
dollarshaveclub/furan2:master14a257836529
stdlib@go1.17.2
1.26.10
1
dollarshaveclub/thermite:0.0.31663cbf25fcfe
stdlib@go1.17.1
1.26.10
1
dolthub/dolt-sql-server:2.5.04388e6a6fb12
stdlib@go1.26.2
1.26.10
1
don616/k8s-file-explorer-backend:v1.8.13e228fadb3a8
stdlib@go1.26.8
1.26.10
1
donetick/donetick:v0.1.79a1cc21dd5a37
stdlib@go1.24.13
1.26.10
1
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
stdlib@go1.19.12
1.26.10
1
dongjiang1989/cpusets-controller:v1.1.1dc5bd483874c
stdlib@go1.19.10
1.26.10
1
dongjiang1989/cpusets-device-plugin:v1.1.1923085c65123
stdlib@go1.19.10
1.26.10
1
dongjiang1989/crane-scheduler-controller:mainf0055c05dbee
stdlib@go1.19.9
1.26.10
1
dongjiang1989/lxcfs-webhook:latestc1f19557bdcb
stdlib@go1.26.0
1.26.10
1
dongjiang1989/node-metrics:latest3f1f266190bb
stdlib@go1.26.7
1.26.10
1
dongjiang1989/ns-node-affinity:latest451f7823723c
stdlib@go1.18.5
1.26.10
1
dongjiang1989/pingmesh-agent:latest355fa4be8e97
stdlib@go1.22.9
1.26.10
1
dongjiang1989/pingmesh-agent:v1.2.2c82de0272da0
stdlib@go1.22.9
1.26.10
1
doorcloud/apim-operator:v3.0.44e6ef8d72c3e
stdlib@go1.22.12
1.26.10
1
dossif/redminebot:0.2.296dcd2c0e9f2
stdlib@go1.17.13
1.26.10
1
douz/overlord:latestf2bc7fc068c1
stdlib@go1.14.5
1.26.10
1
dragonflyoss/client:v1.5.59fe2a1d6206f
stdlib@go1.26.5
1.26.10
1
dragonflyoss/client:v0.1.82edf3e921f4e0
stdlib@go1.21.5
1.26.10
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
stdlib@go1.21.1
1.26.10
1
dragonflyoss/scheduler:v2.1.49523785c77787
stdlib@go1.21.1
1.26.10
1
dragonflyoss/scheduler:v2.5.2d5dea9e662cd
stdlib@go1.25.5
1.26.10
1
drone/drone:2.28.255897c8fb22d
stdlib@go1.24.13
1.26.10
1
drone/drone-runner-docker:1.8.1137e79c5e23c
stdlib@go1.16.15
1.26.10
1
drone/kubernetes-secrets:latest206df2280ecf
stdlib@go1.13.15
1.26.10
1
drorivry4/rego:lateste035d49b15ca
stdlib@go1.22.0
1.26.10
1
drumsergio/duplicacy-container:0.1.0dd3ee9703969
stdlib@go1.21.13
1.26.10
1
dserio83/velero-api:0.3.16b3d9115fee2
stdlib@go1.22.5
1.26.10
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
stdlib@go1.23.7
1.26.10
1
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
stdlib@go1.19.6
1.26.10
1
duplicati/duplicati:2.0.5.111_canary_2020-09-268660f0eda7c9
stdlib@go1.14.4
1.26.10
1
durellirsd/security-smells-api:v17398aca4fc2e
stdlib@go1.22.4
1.26.10
1
dutchcoders/transfer.sh:v1.6.1-noroot8db9ade72a0d
stdlib@go1.20.11
1.26.10
1
duyetdev/applause-btn:latest25e59d223eaa
stdlib@go1.14.9
1.26.10
1
dysnix/gke-upgrade-notification-handler:latestc166f958f86a
stdlib@go1.17.7
1.26.10
1
easysoft/quickon-zentao:18.5592ad5df1f8b
stdlib@go1.20.3
1.26.10
1
ebrianne/cert-manager-webhook-duckdns:v1.2.39cd17700c9ec
stdlib@go1.15.13
1.26.10
1
ecadlabs/tezos_exporter:latest4bcbe5d1cdd2
stdlib@go1.16.5
1.26.10
1
eclipseaerios/federator:1.1.018c7f0d101c0
stdlib@go1.22.12
1.26.10
1
eclipseaerios/iota-tangle-peerer:latest99d7ff18d416
stdlib@go1.22.12
1.26.10
1
eclipseaerios/llo-api:1.2.0ab7a04182191
stdlib@go1.21.13
1.26.10
1
eclipseaerios/llo-docker-operator:1.1.2d7ec28bfe735
stdlib@go1.23.12
1.26.10
1
eclipseaerios/llo-k8s-operator:1.4.12b2c0cf26fd2
stdlib@go1.21.13
1.26.10
1
eclipseaerios/openldap:2.6.30208743f315e
stdlib@go1.18.2
1.26.10
1
eginnovations/agent:7.6.005d8d2da700a
stdlib@go1.25.7
1.26.10
1
eginnovations/universal-agent-operator:0.0.11b8e3e26dca1b
stdlib@go1.24.6
1.26.10
1
ekofr/pihole-exporter:0.0.109fdad6f352e0
stdlib@go1.14.7
1.26.10
1
elastic/apm-server:7.17.6c7a1c63257d0
stdlib@go1.18.2
1.26.10
1
elastiflow/flow-collector:7.27.0bdf8e7701384
stdlib@go1.26.9
1.26.10
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.