StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
openhumanhelmforgeVerified publisher1.1.01 of 1See more

openhuman helmforge 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/tinyhumansai/openhuman-core:v0.64.15c694baccddb4
stdlib@go1.19.8
1.26.10

Open the chart page →

2,944
openreplayhelmforgeVerified publisher1.1.118 of 24See more

openreplay helmforge 1.1.1

18 of the 24 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/git:2.52.04a0e72d49596
stdlib@go1.25.10
1.26.10
library/caddy:2.10.2-alpine4c6e91c6ed0e
stdlib@go1.25.0
1.26.10
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/openreplay/minio:20258cada3c9458a
ca-certificates@20260413-r0
minio@0.20251015.172955-r10
stdlib@go1.26.3
20260909-r3
0.20260922.192518-r5
1.26.10
ghcr.io/openreplay/postgres:173b49780c0497
ca-certificates@20260413-r0
20260909-r3
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
public.ecr.aws/p1t3u8a3/api:v1.28.512aeda8dbac7
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/assets:v1.28.0fee63ead0e74
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/canvases:v1.28.08d2b3a947a14
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
public.ecr.aws/p1t3u8a3/db:v1.28.02c99078d7957
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/ender:v1.28.00f5806583626
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/frontend:v1.28.3bc4452ef9701
ca-certificates@20260909-r2
20260909-r3
public.ecr.aws/p1t3u8a3/http:v1.28.0cd0e4469cd02
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/images:v1.28.004fadd25a569
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/sink:v1.28.06b80fb10b443
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/spot:v1.28.00ba5cb666370
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/storage:v1.28.02f9784a385ce
stdlib@go1.26.8
1.26.10

Open the chart page →

15,720
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:9.0.4dc28ed5a9d0f
stdlib@go1.26.8
1.26.10

Open the chart page →

69,345
paperless-ngxhelmforgeVerified publisher1.1.12 of 4See more

paperless-ngx helmforge 1.1.1

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
rustls-webpki@0.103.14
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

8,142
paprahelmforgeVerified publisher1.0.21 of 1See more

papra helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
stdlib@go1.23.12
1.26.10

Open the chart page →

3,685
pimcorehelmforgeVerified publisher2.0.72 of 6See more

pimcore helmforge 2.0.7

2 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.2916834e49961
stdlib@go1.26.3
1.26.10
library/mariadb:13.0.20e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

3,677
pocket-idhelmforgeVerified publisher1.0.21 of 2See more

pocket-id helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.14.001540977dcf4
stdlib@go1.26.6
1.26.10

Open the chart page →

742
questdbhelmforgeVerified publisher1.2.01 of 1See more

questdb helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
questdb/questdb:10.0.167eaed863ebb
stdlib@go1.25.14
1.26.10

Open the chart page →

170
reactive-resumehelmforgeVerified publisher1.0.22 of 4See more

reactive-resume helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
stdlib@go1.26.4
1.26.10

Open the chart page →

4,028
ryothelmforgeVerified publisher1.0.22 of 2See more

ryot helmforge 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
stdlib@go1.23.1
1.26.10

Open the chart page →

7,267
siyuanhelmforgeVerified publisher1.0.41 of 1See more

siyuan helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
b3log/siyuan:v3.8.7aced5ce847dc
stdlib@go1.26.9
1.26.10

Open the chart page →

267
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

2,580
strava-statisticshelmforgeVerified publisher1.1.191 of 2See more

strava-statistics helmforge 1.1.19

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
stdlib@go1.26.3
1.26.10

Open the chart page →

1,256
supersethelmforgeVerified publisher1.4.23 of 5See more

superset helmforge 1.4.2

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
0.103.16
1.0.10
helmforge/kubectl:1.35.3c3f97e954c47
stdlib@go1.25.7
1.26.10
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

34,432
temporalhelmforgeVerified publisher1.1.14 of 4See more

temporal helmforge 1.1.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
temporalio/admin-tools:1.32.19ef0dc5b063b
stdlib@go1.26.8
1.26.10
temporalio/server:1.32.1acecbab5b0b8
stdlib@go1.26.8
1.26.10
temporalio/ui:2.56.066d55d383bfb
stdlib@go1.26.9
1.26.10

Open the chart page →

2,630
twentyhelmforgeVerified publisher1.0.91 of 5See more

twenty helmforge 1.0.9

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5486e8fb2069
stdlib@go1.24.6
1.26.10

Open the chart page →

2,792
wallabaghelmforgeVerified publisher1.3.112 of 3See more

wallabag helmforge 1.3.11

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.10

Open the chart page →

3,315
webodmhelmforgeVerified publisher1.1.21 of 4See more

webodm helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
postgis/postgis:17-3.501a6a70e41e6
stdlib@go1.18.2
1.26.10

Open the chart page →

13,271
zookeeperhelmforgeVerified publisher1.1.11 of 1See more

zookeeper helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/zookeeper:3.9.65bad433c7170
stdlib@go1.18.1
1.26.10

Open the chart page →

3,724
harborhelm-harborVerified publisher2.3.75 of 8See more

harbor helm-harbor 2.3.7

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.47d2ba5304a72
stdlib@go1.26.7
1.26.10
goharbor/harbor-jobservice:v2.15.4f143578ef30e
stdlib@go1.26.7
1.26.10
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
stdlib@go1.26.7
1.26.10
goharbor/registry-photon:v2.15.4dc0cb388a644
stdlib@go1.26.7
1.26.10
goharbor/trivy-adapter-photon:v2.15.4813ca81b4a4e
stdlib@go1.26.7
1.26.10

Open the chart page →

1,734
openaevhelm-openbasVerified publisher2.0.151 of 7See more

openaev helm-openbas 2.0.15

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
golang-1.19@1.19.8-2
stdlib@go1.19.8
no fix listed
1.26.10

Open the chart page →

79,005
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
golang-1.19@1.19.8-2
stdlib@go1.19.8
no fix listed
1.26.10

Open the chart page →

83,823
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
stdlib@go1.25.6
1.26.10

Open the chart page →

2,614
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.10

Open the chart page →

21,677
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
stdlib@go1.26.1
1.26.10

Open the chart page →

3,909
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
stdlib@go1.24.3
1.26.10

Open the chart page →

7,357
hermes-operatorhermes-agent-operatorVerified publisher0.2.01 of 1See more

hermes-operator hermes-agent-operator 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/paperclipinc/hermes-operator:v0.2.07a491ec9b0ff
stdlib@go1.27.1
1.26.10

Open the chart page →

257
postgres-backup-localheywood8-helm-chartsVerified publisher0.1.131 of 1See more

postgres-backup-local heywood8-helm-charts 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
stdlib@go1.16
1.26.10

Open the chart page →

3,504
kubefaashfoxy-helm-charts0.1.63 of 4See more

kubefaas hfoxy-helm-charts 0.1.6

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hfoxy4/kubefaas-builder:main-2afc7570bfb65aaad93
stdlib@go1.21.11
1.26.10
hfoxy4/kubefaas-controller:main-2afc7570761fe08f14c
stdlib@go1.22.4
1.26.10
library/docker:27.0.1-dind2416984b43dd
stdlib@go1.21.11
1.26.10

Open the chart page →

8,261
tapo-prometheus-exporterhfoxy-helm-charts0.1.111 of 1See more

tapo-prometheus-exporter hfoxy-helm-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hfoxy4/tapo-prometheus-exporter:v0.1.117e385eef6fc7
stdlib@go1.21.3
1.26.10

Open the chart page →

1,447
goshimmerhiveroad0.2.141 of 1See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
iotaledger/goshimmer:v0.8.6b02a8f77474f
stdlib@go1.17.2
1.26.10

Open the chart page →

3,859
cratedb-adapterhmdmph0.1.01 of 1See more

cratedb-adapter hmdmph 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crate/crate_adapter:latestb8d89fa5d19b
stdlib@go1.16.3
1.26.10

Open the chart page →

4,159
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
stdlib@go1.21.5
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10

Open the chart page →

13,200
imageproxyhmphuVerified publisher0.1.11 of 1See more

imageproxy hmphu 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
willnorris/imageproxy:latest21d0c90f4c31
stdlib@go1.16.8
1.26.10

Open the chart page →

3,353
holmesholmes0.1.01 of 1See more

holmes holmes 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:master39081bf0c4a9
stdlib@go1.19
1.26.10

Open the chart page →

2,957
homeboxhomebox-helmVerified publisher0.3.01 of 2See more

homebox homebox-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
sysadminsmedia/homebox:0.26.056e880b62309
stdlib@go1.26.4
1.26.10

Open the chart page →

1,188
homecharthomechartVerified publisher1.0.11 of 1See more

homechart homechart 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/candiddev/homechart:latest582a76ccdd9f
stdlib@go1.27.2
1.26.10

Open the chart page →

12
adguardhomeenterpriseinc0.12.01 of 1See more

adguard homeenterpriseinc 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.0-b.5a9668737b1d6
stdlib@go1.16.6
1.26.10

Open the chart page →

3,749
cert-managerhomeenterpriseinc1.10.13 of 3See more

cert-manager homeenterpriseinc 1.10.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.10.1b5657161d2c2
stdlib@go1.19.3
1.26.10
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
stdlib@go1.19.3
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.10.164121721c665
stdlib@go1.19.3
1.26.10

Open the chart page →

7,396
homeassistanthomeenterpriseinc0.3.01 of 1See more

homeassistant homeenterpriseinc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2022.3.5565751f33794
stdlib@go1.17.1
1.26.10

Open the chart page →

9,543
photoprismhomeenterpriseinc0.8.01 of 1See more

photoprism homeenterpriseinc 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
photoprism/photoprism:20211010f4687352985a
stdlib@go1.17.1
1.26.10

Open the chart page →

3,266
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
stdlib@go1.19.8
1.26.10

Open the chart page →

18,925
honeydipperhoneydipperVerified publisher0.1.111 of 2See more

honeydipper honeydipper 0.1.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redis:5fc5ecd863862
stdlib@go1.16.7
1.26.10

Open the chart page →

2,873
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
stdlib@go1.21.10
1.26.10

Open the chart page →

4,639
universal-web-apphotrungnhanVerified publisher0.2.61 of 2See more

universal-web-app hotrungnhan 0.2.6

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
traefik/whoami:latestc4717a8d1f01
stdlib@go1.26.5
1.26.10

Open the chart page →

387
hoverflyhoverflyVerified publisher0.2.01 of 1See more

hoverfly hoverfly 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
spectolabs/hoverfly:v1.12.13250986d58ed4
stdlib@go1.27.0
1.26.10

Open the chart page →

326
paperlesshpVerified publisher0.1.23 of 5See more

paperless hp 0.1.2

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
stdlib@go1.26.2
1.26.10
gotenberg/gotenberg:8.3467097317623a
stdlib@go1.26.2
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls-webpki@0.103.13
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

38,296
wallabaghpVerified publisher0.1.71 of 1See more

wallabag hp 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.10

Open the chart page →

1,573
hammerspace-csihscsi1.2.86 of 6See more

hammerspace-csi hscsi 1.2.8

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
stdlib@go1.24.4
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.0a399393ff5bd
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.0.25f051159c95f
stdlib@go1.22.5
1.26.10

Open the chart page →

8,009
eoloplanthttpd-eoloplant0.1.03 of 7See more

eoloplant httpd-eoloplant 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
stdlib@go1.18.10
1.26.10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.10
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.10

Open the chart page →

37,945

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.26.10
5
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
4
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
stdlib@go1.24.6
1.26.10
4
bitnami/mongodb:latestad05bb9a19fa
stdlib@go1.26.8
1.26.10
4
bitnamisecure/kubectl:latest26837860fa03
stdlib@go1.26.9
1.26.10
4
cloudflare/cloudflared:2026.10.1:latesta15a3b50b8da
stdlib@go1.27.2
1.26.10
4
cockroachdb/cockroach-self-signer-cert:1.114c02c4cfe7b8
stdlib@go1.26.2
1.26.10
4
goharbor/harbor-core:v2.15.47d2ba5304a72
stdlib@go1.26.7
1.26.10
4
goharbor/harbor-jobservice:v2.15.4f143578ef30e
stdlib@go1.26.7
1.26.10
4
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
stdlib@go1.26.7
1.26.10
4
goharbor/registry-photon:v2.15.4dc0cb388a644
stdlib@go1.26.7
1.26.10
4
goharbor/trivy-adapter-photon:v2.15.4813ca81b4a4e
stdlib@go1.26.7
1.26.10
4
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.10
4
grafana/loki:3.6.73c8fd3570dd9
stdlib@go1.24.13
1.26.10
4
hyperledger/fabric-ca:latesta70b6ba64a08
stdlib@go1.26.4
1.26.10
4
hyperledger/fabric-orderer:2.46ec3fe59ea55
stdlib@go1.18.10
1.26.10
4
hyperledger/fabric-peer:2.46ff36af21eb1
stdlib@go1.18.10
1.26.10
4
hyperledger/fabric-tools:2.4b1194f509085
stdlib@go1.18.10
1.26.10
4
jaegertracing/all-in-one:latestab6f1a1f0fb4
stdlib@go1.25.4
1.26.10
4
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
stdlib@go1.21.5
1.26.10
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
stdlib@go1.18.2
1.26.10
4
jaegertracing/jaeger-collector:1.53.07f1269222903
stdlib@go1.21.5
1.26.10
4
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
stdlib@go1.21.5
1.26.10
4
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
stdlib@go1.14.4
1.26.10
4
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.26.10
4
library/mongo:5.0-focal5e15a3f014ed
stdlib@go1.25.9
1.26.10
4
library/mongo:4.4.66efa05203990
stdlib@go1.16.3
1.26.10
4
library/mysql:876f0358884cb
stdlib@go1.24.6
1.26.10
4
library/postgres:134689940c6838
stdlib@go1.24.6
1.26.10
4
library/postgres:169e2cf6287f25
stdlib@go1.24.6
1.26.10
4
library/postgres:15c961aa287d86
stdlib@go1.24.6
1.26.10
4
library/redis:7.2.4-alpinec8bb255c3559
stdlib@go1.18.2
1.26.10
4
library/ubuntu:latestc098726dd9b9
stdlib@go1.27.1
1.26.10
4
migrate/migrate:latest76cc2074cb66
stdlib@go1.26.7
1.26.10
4
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.10
4
natsio/nats-server-config-reloader:0.21.110ff229eaf52
stdlib@go1.25.5
1.26.10
4
natsio/nats-server-config-reloader:0.24.0d758a82a9c20
stdlib@go1.26.5
1.26.10
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
stdlib@go1.15.6
1.26.10
4
prom/statsd-exporter:v0.28.04e7a1f00b9b2
stdlib@go1.23.2
1.26.10
4
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
stdlib@go1.21.7
1.26.10
4
ghcr.io/akash-network/provider:0.6.88c780ae8d1bb
stdlib@go1.23.5
1.26.10
4
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
stdlib@go1.22.5
1.26.10
4
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
stdlib@go1.21.1
1.26.10
4
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
stdlib@go1.27.2
1.26.10
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
stdlib@go1.18.10
1.26.10
4
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
rustls-webpki@0.103.14
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
4
ghcr.io/sigstore/scaffolding/createtree:v0.7.334c845ced03d8
stdlib@go1.25.0
1.26.10
4
ghcr.io/stakater/reloader:v1.4.22def2480040ad
stdlib@go1.26.8
1.26.10
4
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
stdlib@go1.22.4
1.26.10
4
quay.io/argoproj/argocd:v3.5.513db7b10db23
stdlib@go1.26.2
1.26.10
4

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.