StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
ghostkubernetes-homelab-helm-chartsVerified publisher0.2.52 of 2See more

ghost kubernetes-homelab-helm-charts 0.2.5

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/ghost:6.71.0-alpine8e07c5ec63d9
stdlib@go1.24.6
1.26.10
library/mysql:876f0358884cb
stdlib@go1.24.6
1.26.10

Open the chart page →

2,022
k8s-debug-podkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

k8s-debug-pod kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/harish2k01/k8s-debug-pod:0.1.16e8627c23f0b
stdlib@go1.26.2
1.26.10

Open the chart page →

5,275
navidromekubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

navidrome kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
deluan/navidrome:0.64.238dc2727bfcf
stdlib@go1.27.1
1.26.10

Open the chart page →

597
pocket-idkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

pocket-id kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.18.0323e7ef5bfac
stdlib@go1.27.1
1.26.10

Open the chart page →

251
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16-alpinedeb28ee47118
stdlib@go1.24.6
1.26.10

Open the chart page →

1,998
qbittorrent-exporterkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

qbittorrent-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/martabal/qbittorrent-exporter:v2.0.1ddf2bff9b357
stdlib@go1.26.3
1.26.10

Open the chart page →

695
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.42 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/influxdb:2.9.18f106f7ff126
stdlib@go1.25.9
1.26.10
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
stdlib@go1.25.5
1.26.10

Open the chart page →

6,319
syncthingkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

syncthing kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.64d0281bdcb4e
stdlib@go1.27.1
1.26.10

Open the chart page →

317
tailscalekubernetes-homelab-helm-chartsVerified publisher0.1.51 of 2See more

tailscale kubernetes-homelab-helm-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
tailscale/tailscale:v1.104.187c55d6be56a
stdlib@go1.27.1
1.26.10

Open the chart page →

244
tor-proxykubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
peterdavehello/tor-socks-proxy:latest0cc12d36d312
stdlib@go1.26.2
1.26.10

Open the chart page →

1,927
umamikubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

umami kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:17-alpine1bcc18d81671
stdlib@go1.24.6
1.26.10

Open the chart page →

1,008
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.2.11 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
stdlib@go1.20.5
1.26.10

Open the chart page →

6,582
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest46519c818f44
stdlib@go1.26.5-X:boringcrypto
1.26.10

Open the chart page →

39,902
kubernetes-nmstatekubernetes-nmstateVerified publisher0.87.01 of 1See more

kubernetes-nmstate kubernetes-nmstate 0.87.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/nmstate/kubernetes-nmstate-operator:v0.87.04dce694f01ea
stdlib@go1.26.0
1.26.10

Open the chart page →

908
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
stdlib@go1.19.13
1.26.10

Open the chart page →

4,497
harbor-operatorkubernetes-replicator1.6.31 of 1See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
stdlib@go1.22.2
1.26.10

Open the chart page →

1,879
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
stdlib@go1.24.4
1.26.10

Open the chart page →

58,452
kubernetes-secret-generatorkubernetes-replicator3.4.11 of 1See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-secret-generator:v3.4.1465b8e6d0462
stdlib@go1.23.1
1.26.10

Open the chart page →

1,437
servicegatewaykubernetes-replicator2.3.31 of 1See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/servicegateway:v2.3.3fa948df30d44
stdlib@go1.21.5
1.26.10

Open the chart page →

1,301
kubernetesweeklykubernetesweekly2.1.01 of 1See more

kubernetesweekly kubernetesweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
zufardhiyaulhaq/kubernetesweekly:v2.1.0a287ada277c6
stdlib@go1.16.15
1.26.10

Open the chart page →

2,561
kube-secrets-exporterkube-secrets-exporter0.1.01 of 1See more

kube-secrets-exporter kube-secrets-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/dcristobalhmad/kube-secrets-exporter:latesta9043737cb73
stdlib@go1.22.3
1.26.10

Open the chart page →

1,149
api-serverkubeshop0.11.161 of 2See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:0.11.160ad97f07a78b
stdlib@go1.17.8
1.26.10

Open the chart page →

3,462
kusk-gatewaykubeshop0.0.651 of 2See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
stdlib@go1.19.4
1.26.10

Open the chart page →

2,549
kusk-gateway-apikubeshop0.1.282 of 2See more

kusk-gateway-api kubeshop 0.1.28

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway-api:v1.5.4126c713cf7d8
stdlib@go1.18.10
1.26.10
kubeshop/kusk-gateway-api-websocket:v1.5.43b4f8345ca5c
stdlib@go1.18.10
1.26.10

Open the chart page →

4,078
testkube-apikubeshop2.1.1621 of 2See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
stdlib@go1.23.10
1.26.10

Open the chart page →

2,251
testkube-logskubeshop0.2.21 of 1See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/testkube-logs-server:latest094186b19698
stdlib@go1.24.1
1.26.10

Open the chart page →

2,084
testkube-operatorkubeshop2.1.1542 of 3See more

testkube-operator kubeshop 2.1.154

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/kube-webhook-certgen:0.0.7866827c379ae
stdlib@go1.23.6
1.26.10
kubeshop/testkube-operator:2.1.154def0d0f0d4ab
stdlib@go1.23.9
1.26.10

Open the chart page →

2,096
testkube-runnerkubeshop2.14.21 of 1See more

testkube-runner kubeshop 2.14.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.14.2a87d63dd1632
stdlib@go1.27.1
1.26.10

Open the chart page →

272
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
stdlib@go1.21.13
1.26.10

Open the chart page →

2,196
cloudnative-pgkube-site-follower0.23.01 of 1See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
stdlib@go1.23.4
1.26.10

Open the chart page →

1,493
kubeskoopkubeskoop1.0.22 of 2See more

kubeskoop kubeskoop 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeskoop/agent:v1.0.0-rc.19031d9f74832
stdlib@go1.22.1
1.26.10
kubeskoop/controller:v1.0.0-rc.137a3eb73325d
stdlib@go1.22.1
1.26.10

Open the chart page →

5,728
apisix-dashboardkubesphereVerified publisher0.3.01 of 1See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/apisix-dashboard:2.9.0c010ea7d1694
stdlib@go1.14.15
1.26.10

Open the chart page →

3,828
apisix-ingress-controllerkubesphereVerified publisher0.8.01 of 2See more

apisix-ingress-controller kubesphere 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:1.3.0412f92cde0b3
stdlib@go1.13.8
1.26.10

Open the chart page →

3,678
fluentbit-operatorkubesphereVerified publisher0.1.01 of 2See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/fluentbit-operator:v0.9.0b87db3c57cb3
stdlib@go1.13.15
1.26.10

Open the chart page →

4,169
gitlabkubesphereVerified publisher4.2.36 of 17See more

gitlab kubesphere 4.2.3

6 of the 17 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
stdlib@go1.13.8
1.26.10
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
stdlib@go1.13.9
1.26.10
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
stdlib@go1.13.9
1.26.10
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
stdlib@go1.13.9
1.26.10
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
stdlib@go1.13.9
1.26.10
mirrorgitlabcontainers/kubectl:1.13.1299931bd06b41
stdlib@go1.13.3
1.26.10

Open the chart page →

51,138
harborkubesphereVerified publisher1.9.37 of 11See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
stdlib@go1.17.7
1.26.10
goharbor/harbor-core:v2.5.386bf3031f4a7
stdlib@go1.17.7
1.26.10
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
stdlib@go1.17.7
1.26.10
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
stdlib@go1.17.7
1.26.10
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
stdlib@go1.14.15
1.26.10
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
stdlib@go1.14.15
1.26.10
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
stdlib@go1.18.3
1.26.10

Open the chart page →

26,088
pvc-autoresizerkubesphereVerified publisher0.1.01 of 1See more

pvc-autoresizer kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/pvc-autoresizer:v0.19a18a16c7b87
stdlib@go1.16.10
1.26.10

Open the chart page →

2,686
storageclass-accessorkubesphereVerified publisher0.1.01 of 1See more

storageclass-accessor kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/storageclass-accessor:v0.1.1eac8f273a9b6
stdlib@go1.16.10
1.26.10

Open the chart page →

2,633
mongodbkubesphere-carryon-experimental0.1.21 of 2See more

mongodb kubesphere-carryon-experimental 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mikefarah/yq:2.4.16fc625c402de
stdlib@go1.13.3
1.26.10

Open the chart page →

11,165
aws-efs-csi-driverkubesphere-carryon-test0.1.01 of 3See more

aws-efs-csi-driver kubesphere-carryon-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
stdlib@go1.13.4
1.26.10

Open the chart page →

3,944
aws-fsx-csi-driverkubesphere-carryon-test0.1.01 of 4See more

aws-fsx-csi-driver kubesphere-carryon-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amazon/aws-fsx-csi-driver:latestc9b14856fd22
stdlib@go1.16.8
1.26.10

Open the chart page →

2,738
ccm-qingcloudkubesphere-carryon-test0.1.01 of 1See more

ccm-qingcloud kubesphere-carryon-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
qingcloud/cloud-controller-manager:v1.4.1210f66b5df886
stdlib@go1.18.2
1.26.10

Open the chart page →

2,423
cni-hostnickubesphere-carryon-test0.1.01 of 1See more

cni-hostnic kubesphere-carryon-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
stdlib@go1.16.3
1.26.10

Open the chart page →

3,662
csi-neonsankubesphere-carryon-test1.2.86 of 6See more

csi-neonsan kubesphere-carryon-test 1.2.8

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.26.10
csiplugin/csi-neonsan:v1.2.21fa83d45417f
stdlib@go1.14.4
1.26.10
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.26.10
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.26.10
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.26.10

Open the chart page →

26,363
csi-qingcloudkubesphere-carryon-test1.4.06 of 6See more

csi-qingcloud kubesphere-carryon-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.26.10
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.26.10
csiplugin/csi-qingcloud:v1.4.00766163dc046
stdlib@go1.19.13
1.26.10
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.26.10
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.26.10

Open the chart page →

19,429
curvefs-csikubesphere-carryon-test0.1.01 of 3See more

curvefs-csi kubesphere-carryon-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.26.10

Open the chart page →

4,175
hertzbeatkubesphere-carryon-test1.4.11 of 4See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
stdlib@go1.24.6
1.26.10

Open the chart page →

8,737
mongodbkubesphere-carryon-test0.3.21 of 2See more

mongodb kubesphere-carryon-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mikefarah/yq:2.4.16fc625c402de
stdlib@go1.13.3
1.26.10

Open the chart page →

11,165
online-boutiquekubesphere-carryon-test0.1.08 of 11See more

online-boutique kubesphere-carryon-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/cartservice:v0.2.3566733b4d2d5
stdlib@go1.15.6
1.26.10
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
stdlib@go1.15.10
1.26.10
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
stdlib@go1.15.6
1.26.10
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
stdlib@go1.15.10
1.26.10
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
stdlib@go1.15.6
1.26.10
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
stdlib@go1.15.10
1.26.10
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
stdlib@go1.15.6
1.26.10
gcr.io/google-samples/microservices-demo/shippingservice:v0.2.30cb1707fc503
stdlib@go1.15.6
1.26.10

Open the chart page →

37,320
openelbkubesphere-carryon-test0.2.42 of 2See more

openelb kubesphere-carryon-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.4.4ed7311a0f9e4
stdlib@go1.15.15
1.26.10
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
stdlib@go1.16.9
1.26.10

Open the chart page →

6,715

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.26.10
5
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
4
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
stdlib@go1.24.6
1.26.10
4
bitnami/mongodb:latestad05bb9a19fa
stdlib@go1.26.8
1.26.10
4
bitnamisecure/kubectl:latest26837860fa03
stdlib@go1.26.9
1.26.10
4
cloudflare/cloudflared:2026.10.1:latesta15a3b50b8da
stdlib@go1.27.2
1.26.10
4
cockroachdb/cockroach-self-signer-cert:1.114c02c4cfe7b8
stdlib@go1.26.2
1.26.10
4
goharbor/harbor-core:v2.15.47d2ba5304a72
stdlib@go1.26.7
1.26.10
4
goharbor/harbor-jobservice:v2.15.4f143578ef30e
stdlib@go1.26.7
1.26.10
4
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
stdlib@go1.26.7
1.26.10
4
goharbor/registry-photon:v2.15.4dc0cb388a644
stdlib@go1.26.7
1.26.10
4
goharbor/trivy-adapter-photon:v2.15.4813ca81b4a4e
stdlib@go1.26.7
1.26.10
4
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.10
4
grafana/loki:3.6.73c8fd3570dd9
stdlib@go1.24.13
1.26.10
4
hyperledger/fabric-ca:latesta70b6ba64a08
stdlib@go1.26.4
1.26.10
4
hyperledger/fabric-orderer:2.46ec3fe59ea55
stdlib@go1.18.10
1.26.10
4
hyperledger/fabric-peer:2.46ff36af21eb1
stdlib@go1.18.10
1.26.10
4
hyperledger/fabric-tools:2.4b1194f509085
stdlib@go1.18.10
1.26.10
4
jaegertracing/all-in-one:latestab6f1a1f0fb4
stdlib@go1.25.4
1.26.10
4
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
stdlib@go1.21.5
1.26.10
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
stdlib@go1.18.2
1.26.10
4
jaegertracing/jaeger-collector:1.53.07f1269222903
stdlib@go1.21.5
1.26.10
4
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
stdlib@go1.21.5
1.26.10
4
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
stdlib@go1.14.4
1.26.10
4
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.26.10
4
library/mongo:5.0-focal5e15a3f014ed
stdlib@go1.25.9
1.26.10
4
library/mongo:4.4.66efa05203990
stdlib@go1.16.3
1.26.10
4
library/mysql:876f0358884cb
stdlib@go1.24.6
1.26.10
4
library/postgres:134689940c6838
stdlib@go1.24.6
1.26.10
4
library/postgres:169e2cf6287f25
stdlib@go1.24.6
1.26.10
4
library/postgres:15c961aa287d86
stdlib@go1.24.6
1.26.10
4
library/redis:7.2.4-alpinec8bb255c3559
stdlib@go1.18.2
1.26.10
4
library/ubuntu:latestc098726dd9b9
stdlib@go1.27.1
1.26.10
4
migrate/migrate:latest76cc2074cb66
stdlib@go1.26.7
1.26.10
4
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.10
4
natsio/nats-server-config-reloader:0.21.110ff229eaf52
stdlib@go1.25.5
1.26.10
4
natsio/nats-server-config-reloader:0.24.0d758a82a9c20
stdlib@go1.26.5
1.26.10
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
stdlib@go1.15.6
1.26.10
4
prom/statsd-exporter:v0.28.04e7a1f00b9b2
stdlib@go1.23.2
1.26.10
4
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
stdlib@go1.21.7
1.26.10
4
ghcr.io/akash-network/provider:0.6.88c780ae8d1bb
stdlib@go1.23.5
1.26.10
4
ghcr.io/curium-rocks/docker-kubectl:maind04c003d7593
stdlib@go1.22.5
1.26.10
4
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
stdlib@go1.21.1
1.26.10
4
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
stdlib@go1.27.2
1.26.10
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
stdlib@go1.18.10
1.26.10
4
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
rustls-webpki@0.103.14
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
4
ghcr.io/sigstore/scaffolding/createtree:v0.7.334c845ced03d8
stdlib@go1.25.0
1.26.10
4
ghcr.io/stakater/reloader:v1.4.22def2480040ad
stdlib@go1.26.8
1.26.10
4
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
stdlib@go1.22.4
1.26.10
4
quay.io/argoproj/argocd:v3.5.513db7b10db23
stdlib@go1.26.2
1.26.10
4

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.