StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
yatai-image-builderbentomlVerified publisher3.0.441 of 1See more

yatai-image-builder bentoml 3.0.44

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-image-builder:3.0.4401d8538c4f48
stdlib@go1.24.13
1.26.10

Open the chart page →

940
aramid-indexerbiatec-repoVerified publisher3.9.04 of 5See more

aramid-indexer biatec-repo 3.9.0

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:1414bfab572eec
stdlib@go1.24.6
1.26.10
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
stdlib@go1.23.9
1.26.10
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
stdlib@go1.26.3
1.26.10
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
stdlib@go1.26.3
1.26.10

Open the chart page →

17,708
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
stdlib@go1.25.3
1.26.10

Open the chart page →

8,817
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
stdlib@go1.23.11
1.26.10

Open the chart page →

6,376
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
stdlib@go1.25.3
1.26.10

Open the chart page →

8,817
self-hostbitwarden2.5.210 of 11See more

self-host bitwarden 2.5.2

10 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bitwarden/admin:2026.9.2e82f37409cce
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/api:2026.9.272abdfb33c83
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/attachments:2026.9.2a3e09f120b64
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/events:2026.9.2818a1d907fc4
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/icons:2026.9.25e23eaab3976
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/identity:2026.9.263037d60f7d8
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/notifications:2026.9.2029f0d8a576f
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/sso:2026.9.23ef058df2039
stdlib@go1.26.5
1.26.10
ghcr.io/bitwarden/web:2026.9.10d9b5f239cb8
stdlib@go1.26.5
1.26.10
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
stdlib@go1.23.1
1.26.10

Open the chart page →

8,511
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
stdlib@go1.21.6
1.26.10

Open the chart page →

3,609
bouinebouineVerified publisher0.5.291 of 1See more

bouine bouine 0.5.29

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bouinecache/bouine:0.5.29e89d0d720b94
stdlib@go1.27.2
1.26.10

Open the chart page →

5
boundaryboundary-chart0.3.121 of 1See more

boundary boundary-chart 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/boundary:0.15.3339b78b61750
stdlib@go1.21.8
1.26.10

Open the chart page →

2,310
syncthingbrandan-schmitz-helm-chartsVerified publisher2.1.01 of 1See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.1775c4aac4862
stdlib@go1.26.3
1.26.10

Open the chart page →

1,576
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
stdlib@go1.13.10
1.26.10

Open the chart page →

9,904
btrfs-nfs-csibtrfs-nfs-csi0.4.07 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
stdlib@go1.26.7
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.11.0b74b05b39501
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.5.0da081c27e8a6
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
stdlib@go1.25.7
1.26.10

Open the chart page →

6,352
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
stdlib@go1.21.4
1.26.10

Open the chart page →

3,030
agentbuildkite0.6.41 of 1See more

agent buildkite 0.6.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
buildkite/agent:3.25.0aec38cfaae0e
stdlib@go1.14.7
1.26.10

Open the chart page →

3,970
buildkite-agent-metricsbuildkite-agent-metrics0.1.01 of 1See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
stdlib@go1.25.1
1.26.10

Open the chart page →

2,298
buildkit-fleetbuildkit-fleetVerified publisher0.1.21 of 1See more

buildkit-fleet buildkit-fleet 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
moby/buildkit:v0.33.0-rootless80b15f0735e8
stdlib@go1.26.8
1.26.10

Open the chart page →

1,402
static-httpserverbyjgVerified publisher0.3.11 of 1See more

static-httpserver byjg 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
byjg/static-httpserver:0.5.1bed29f3f45e8
stdlib@go1.26.8
1.26.10

Open the chart page →

173
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
rustls-webpki@0.103.13
stdlib@go1.26.5
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

2,926
argocd-source-trackercableship0.0.91 of 1See more

argocd-source-tracker cableship 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
stdlib@go1.24.2
1.26.10

Open the chart page →

2,325
chart-sentinelcableship0.0.121 of 1See more

chart-sentinel cableship 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
stdlib@go1.24.2
1.26.10

Open the chart page →

2,325
pgcagriekinVerified publisher2.5.01 of 2See more

pg cagriekin 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
stdlib@go1.24.4
1.26.10

Open the chart page →

2,263
pgvectorcagriekinVerified publisher2.5.02 of 3See more

pgvector cagriekin 2.5.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
stdlib@go1.24.4
1.26.10
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
stdlib@go1.24.6
1.26.10

Open the chart page →

4,701
camel-dashboard-operatorcamel-dashboardVerified publisher0.1.01 of 1See more

camel-dashboard-operator camel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/camel-tooling/camel-dashboard-operator:latest5e867d01846e
stdlib@go1.25.9
1.26.10

Open the chart page →

995
camel-monitor-operatorcamel-dashboardVerified publisher0.2.11 of 1See more

camel-monitor-operator camel-dashboard 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/camel-tooling/camel-monitor-operator:latestc644e786c5f9
stdlib@go1.27.2
1.26.10

Open the chart page →

5
blackbox-exportercamptocamp31.0.01 of 1See more

blackbox-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.25.0b04a9fef4fa0
stdlib@go1.22.2
1.26.10

Open the chart page →

1,540
camunda-operatorcamunda-operatorVerified publisher0.2.01 of 1See more

camunda-operator camunda-operator 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/konsole-is/camunda-operator:0.2.0c06f61af7b3c
stdlib@go1.27.2
1.26.10

Open the chart page →

75
capsulecapsuleOfficialVerified publisher0.15.02 of 2See more

capsule capsule 0.15.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/projectcapsule/capsule:v0.15.0ac2ffee25857
stdlib@go1.27.1
1.26.10

Open the chart page →

1,986
capsule-proxycapsule-proxyOfficialVerified publisher0.15.22 of 2See more

capsule-proxy capsule-proxy 0.15.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.26.10
ghcr.io/projectcapsule/capsule-proxy:v0.15.20f91cf29ebc9
ca-certificates@20260909-r2
stdlib@go1.27.1
20260909-r3
1.26.10

Open the chart page →

1,949
casdoorcasdoorVerified publisher4.23.01 of 1See more

casdoor casdoor 4.23.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
casbin/casdoor:4.23.0e13c9aada231
stdlib@go1.25.8
1.26.10

Open the chart page →

955
fluxcd-webuiccowleyVerified publisher0.0.21 of 2See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
adrianberger/fluxcd-webui:latest76848c0d2780
stdlib@go1.16.2
1.26.10

Open the chart page →

4,809
celestia-nodecelestia-node0.1.71 of 1See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
stdlib@go1.23.0
1.26.10

Open the chart page →

2,425
cert-estuarycert-estuaryVerified publisher0.2.11 of 1See more

cert-estuary cert-estuary 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/hsn723/cert-estuary:0.2.00c4b6132b0ad
stdlib@go1.26.2
1.26.10

Open the chart page →

664
cert-manager-approver-policycert-managerOfficialVerified publisher0.28.01 of 1See more

cert-manager-approver-policy cert-manager 0.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-approver-policy:v0.28.01a955b0a5c41
stdlib@go1.27.1
1.26.10

Open the chart page →

232
cert-manager-google-cas-issuercert-managerOfficialVerified publisher0.13.01 of 1See more

cert-manager-google-cas-issuer cert-manager 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-google-cas-issuer:v0.13.00d6a852d7c6a
stdlib@go1.27.1
1.26.10

Open the chart page →

232
finops-stackcert-managerVerified publisher0.0.57 of 12See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
stdlib@go1.22.4
1.26.10
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
stdlib@go1.21.12
1.26.10
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
stdlib@go1.21.12
1.26.10

Open the chart page →

17,599
cert-manager-webhook-arvancloudcert-manager-webhook-arvancloudVerified publisher0.1.11 of 1See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
stdlib@go1.24.4
1.26.10

Open the chart page →

1,663
cert-manager-webhook-gandicert-manager-webhook-gandi0.6.01 of 1See more

cert-manager-webhook-gandi cert-manager-webhook-gandi 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
stdlib@go1.22.0
1.26.10

Open the chart page →

1,738
cert-manager-webhook-ionos-cloudcert-manager-webhook-ionos-cloudVerified publisher0.3.41 of 1See more

cert-manager-webhook-ionos-cloud cert-manager-webhook-ionos-cloud 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ionos-cloud/cert-manager-webhook-ionos-cloud:v1.0.5b1b706e10d22
stdlib@go1.27.1
1.26.10

Open the chart page →

248
cert-manager-webhook-porkbuncert-manager-webhook-porkbunVerified publisher2.0.81 of 1See more

cert-manager-webhook-porkbun cert-manager-webhook-porkbun 2.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/octabits-io/cert-manager-webhook-porkbun:2.0.8c0c3231e459b
stdlib@go1.27.2
1.26.10

Open the chart page →

16
cert-vaultcert-vaultOfficialVerified publisher2.12.04 of 7See more

cert-vault cert-vault 2.12.0

4 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
stdlib@go1.23.7
1.26.10
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
stdlib@go1.23.7
1.26.10
bitnamilegacy/redis-exporter:1.69.0-debian-12-r1a006df1fd47e
stdlib@go1.23.7
1.26.10
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10

Open the chart page →

18,901
chatclichatcliVerified publisher1.223.02 of 2See more

chatcli chatcli 1.223.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/diillson/chatcli:1.223.05121a7c00b2d
stdlib@go1.27.2
1.26.10
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
stdlib@go1.23.10
1.26.10

Open the chart page →

1,575
chatcli-operatorchatcli-operatorVerified publisher1.223.02 of 2See more

chatcli-operator chatcli-operator 1.223.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/diillson/chatcli-operator:1.223.0e45fc438881e
stdlib@go1.27.2
1.26.10
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
stdlib@go1.23.10
1.26.10

Open the chart page →

1,568
etcd-defragchristianhuthVerified publisher1.7.01 of 1See more

etcd-defrag christianhuth 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.7.2e9afa62b1e91
stdlib@go1.26.8
1.26.10

Open the chart page →

264
shlink-backendchristianhuthVerified publisher12.0.01 of 1See more

shlink-backend christianhuth 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
shlinkio/shlink:5.1.7844e1f2b6455
stdlib@go1.26.4
1.26.10

Open the chart page →

885
squestchristianhuthVerified publisher7.0.21 of 4See more

squest christianhuth 7.0.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.6-management8dd6e3570dda
stdlib@go1.22.2
1.26.10

Open the chart page →

5,410
typo3christianhuthVerified publisher8.0.11 of 1See more

typo3 christianhuth 8.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crinis/typo3:legacy-13.4.365636db17b924
stdlib@go1.24.4
1.26.10

Open the chart page →

4,711
challengerchronicleVerified publisher0.1.21 of 1See more

challenger chronicle 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/challenger-go:0.1.2c8d5a3c0e966
stdlib@go1.22.12
1.26.10

Open the chart page →

1,409
erpcchronicleVerified publisher0.7.11 of 1See more

erpc chronicle 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/erpc/erpc:0.1.18bfed3d49a08
stdlib@go1.26.4
1.26.10

Open the chart page →

715
spectrechronicleVerified publisher0.3.91 of 1See more

spectre chronicle 0.3.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/spectre:0.68.34e872bc016e8
stdlib@go1.25.5
1.26.10

Open the chart page →

2,102
validatorchronicleVerified publisher0.8.21 of 1See more

validator chronicle 0.8.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chronicleprotocol/ghost:0.81.0417b664eee72
stdlib@go1.27.1
1.26.10

Open the chart page →

697

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
gofeatureflag/go-feature-flag:v1.57.06f325c83bf49
stdlib@go1.26.9
1.26.10
1
gogs/gogs:0.12.30195b095d0b2
stdlib@go1.14.7
1.26.10
1
gogs/gogs:0.12.1420d53bb7277
stdlib@go1.14.7
1.26.10
1
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
stdlib@go1.17.7
1.26.10
1
goharbor/harbor-acceld:0.2.13451103a6c8d8
stdlib@go1.21.5
1.26.10
1
goharbor/harbor-core:v2.9.06412d679fdc3
stdlib@go1.20.7
1.26.10
1
goharbor/harbor-core:v2.5.386bf3031f4a7
stdlib@go1.17.7
1.26.10
1
goharbor/harbor-core:v2.14.3a30e5a8be3d9
stdlib@go1.24.13
1.26.10
1
goharbor/harbor-core:v2.11.1c017dd84ee96
stdlib@go1.22.6
1.26.10
1
goharbor/harbor-core:devf4707b275f04
stdlib@go1.27.2
1.26.10
1
goharbor/harbor-jobservice:v2.9.039435daedd0c
stdlib@go1.20.7
1.26.10
1
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
stdlib@go1.17.7
1.26.10
1
goharbor/harbor-jobservice:dev97f7d9464924
stdlib@go1.27.2
1.26.10
1
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
stdlib@go1.24.13
1.26.10
1
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
stdlib@go1.17.7
1.26.10
1
goharbor/harbor-registryctl:devca0765d1c0eb
stdlib@go1.27.2
1.26.10
1
goharbor/harbor-registryctl:v2.9.0cce272836449
stdlib@go1.20.7
1.26.10
1
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
stdlib@go1.24.13
1.26.10
1
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
stdlib@go1.14.15
1.26.10
1
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
stdlib@go1.14.15
1.26.10
1
goharbor/registry-photon:dev2d344e1d870d
stdlib@go1.27.2
1.26.10
1
goharbor/registry-photon:v2.11.15645d459af2b
stdlib@go1.22.6
1.26.10
1
goharbor/registry-photon:v2.14.36533fc396cbc
stdlib@go1.24.13
1.26.10
1
goharbor/registry-photon:v2.9.08a26e8cb7862
stdlib@go1.20.7
1.26.10
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
stdlib@go1.25.7
1.26.10
1
goharbor/trivy-adapter-photon:dev72aa75db0f6c
stdlib@go1.27.2
1.26.10
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
stdlib@go1.18.3
1.26.10
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
stdlib@go1.20.7
1.26.10
1
golift/unifi-poller:v2.9.5486a63339969
stdlib@go1.21.5
1.26.10
1
golift/unifi-poller:v2.9.2585a29a06d05
stdlib@go1.21.0
1.26.10
1
golift/unifi-poller:2.0.0cafac968b540
stdlib@go1.13.7
1.26.10
1
gomods/athens:v0.17.10f61d1e62359
stdlib@go1.25.9
1.26.10
1
gomods/athens:v0.8.1d714c7ff0231
stdlib@go1.13.4
1.26.10
1
gomods/athens:v0.19.2e1abe3005673
stdlib@go1.26.8
1.26.10
1
goofball222/pritunl:1.32.3602.807bf26032dfce
stdlib@go1.18.7
1.26.10
1
google/cloud-sdk:alpine9c32b1ffea1f
stdlib@go1.26.6
1.26.10
1
google/cloud-sdk:slimc70885ba9f04
stdlib@go1.26.6
1.26.10
1
gophish/gophish:0.12.18a57cd171999
stdlib@go1.15.2
1.26.10
1
gotenberg/gotenberg:8.30206a6c708fc6
stdlib@go1.26.0
1.26.10
1
gotenberg/gotenberg:8.7.0437b9cd3c351
stdlib@go1.22.4
1.26.10
1
gotenberg/gotenberg:8-chromium5da4ab7b8fe7
stdlib@go1.27.1
1.26.10
1
gotenberg/gotenberg:8.3467097317623a
stdlib@go1.26.2
1.26.10
1
gotenberg/gotenberg:8.36.087c16b9f3642
stdlib@go1.26.5
1.26.10
1
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
stdlib@go1.21.5
1.26.10
1
gotenberg/gotenberg:8:8.37.0f29984bd1e22
stdlib@go1.27.1
1.26.10
1
gotify/server:2.1.409c79bc1e403
stdlib@go1.16
1.26.10
1
gotify/server-arm7:2.0.23d91e302ad1d0
stdlib@go1.16
1.26.10
1
gotson/komga:1.29.19fa656e8259b
stdlib@go1.17.8
1.26.10
1
gotson/komga:1.22.0ba892ab3e082
stdlib@go1.17.8
1.26.10
1
gotson/komga:1.28.1d8f772dce7b3
stdlib@go1.26.7
1.26.10
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.