StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
stdlib@go1.20.5
1.26.10

Open the chart page →

39,444
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
stdlib@go1.21.8
1.26.10

Open the chart page →

13,037
falcofalcosecurity9.2.13 of 3See more

falco falcosecurity 9.2.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
falcosecurity/falco:0.45.169e957f91b3a
ca-certificates@20260909-r2
stdlib@go1.26.8
20260909-r3
1.26.10
falcosecurity/falco-driver-loader:0.45.16cfd7418907e
stdlib@go1.26.8
1.26.10
falcosecurity/falcoctl:0.14.290ba9627886e
ca-certificates@20260611-r1
stdlib@go1.27.1
20260909-r3
1.26.10

Open the chart page →

17,171
kubeviewkubeviewVerified publisher2.2.11 of 1See more

kubeview kubeview 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:latest45b64d7c7016
stdlib@go1.27.1
1.26.10

Open the chart page →

409
alertmanagerprometheus-communityOfficialVerified publisher2.1.12 of 2See more

alertmanager prometheus-community 2.1.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.10
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10

Open the chart page →

540
kongkongOfficialVerified publisher3.4.11 of 2See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.10

Open the chart page →

1,037
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
stdlib@go1.16.2
1.26.10

Open the chart page →

3,553
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
stdlib@go1.24.1
1.26.10

Open the chart page →

2,198
prometheus-node-exporterprometheus-communityOfficialVerified publisher4.60.01 of 1See more

prometheus-node-exporter prometheus-community 4.60.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10

Open the chart page →

387
rook-cephrookOfficialVerified publisher1.21.02 of 2See more

rook-ceph rook 1.21.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rook/ceph:v1.21.02c3a65786d3c
stdlib@go1.22.10
1.26.10
quay.io/cephcsi/ceph-csi-operator:v1.1.0c42c95c36fa2
stdlib@go1.26.8
1.26.10

Open the chart page →

2,124
grafanagrafana-communityVerified publisher14.0.11 of 1See more

grafana grafana-community 14.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.4-distrolessae3d3add290a
stdlib@go1.26.7
1.26.10

Open the chart page →

411
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
stdlib@go1.25.6
1.26.10

Open the chart page →

1,640
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.96.05 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.96.0

5 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.10
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.10
ghcr.io/victoriametrics/sync-job:v0.0.17b6f233532a85
stdlib@go1.26.4-X:jsonv2
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

1,915
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
stdlib@go1.19.5
1.26.10

Open the chart page →

2,316
kuredkuredOfficialVerified publisher6.1.01 of 1See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubereboot/kured:1.23.08dfd3c2e8893
stdlib@go1.26.4
1.26.10

Open the chart page →

561
home-assistanthelm-hassVerified publisher0.3.871 of 1See more

home-assistant helm-hass 0.3.87

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.233afb0659d78
rustls-webpki@0.103.14
stdlib@go1.25.6
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

3,436
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.10

Open the chart page →

1,588
openebsopenebsOfficialVerified publisher4.6.232 of 35See more

openebs openebs 4.6.2

32 of the 35 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
stdlib@go1.24.1
1.26.10
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.26.10
library/nats:2.9.17-alpine1a7b320b2942
stdlib@go1.19.9
1.26.10
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
stdlib@go1.19.4
1.26.10
natsio/prometheus-nats-exporter:0.11.031c02aac089a
stdlib@go1.20.3
1.26.10
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.26.10
openebs/lvm-driver:1.10.141f73aba7f31
stdlib@go1.24.7
1.26.10
openebs/mayastor-agent-core:v2.12.200429e487478
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-agent-ha-cluster:v2.12.2cb2fa3bfc1f8
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-agent-ha-node:v2.12.2964cbb43c5e5
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-api-rest:v2.12.20c646268cd8c
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-csi-controller:v2.12.238a82f29f777
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-csi-node:v2.12.2cbf834303735
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-io-engine:v2.12.20161a3e6f902
rustls-webpki@0.103.13
0.103.16
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
rustls-webpki@0.102.8
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-obs-callhome:v2.12.24c25179ca592
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-obs-callhome-stats:v2.12.2cfb042c35b92
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-operator-diskpool:v2.12.27cd50e41324c
rustls-webpki@0.102.8
0.103.16
openebs/mc:RELEASE.2024-11-21T17-21-54Z4d1b85539919
stdlib@go1.23.4
1.26.10
openebs/minio:RELEASE.2024-12-18T13-15-44Zbb04e41fc1b8
stdlib@go1.23.4
1.26.10
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.26.10
openebs/zfs-driver:2.11.20234692bb4a4
stdlib@go1.26.2
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.26.10

Open the chart page →

36,834
tigera-operatorprojectcalico3.33.01 of 1See more

tigera-operator projectcalico 3.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.10

Open the chart page →

232
open-webuiopen-webui17.0.01 of 4See more

open-webui open-webui 17.0.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.26.10

Open the chart page →

2,373
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
stdlib@go1.19.1
1.26.10

Open the chart page →

4,546
aws-for-fluent-bitaws0.2.01 of 1See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit:3.2.1a480a1241720
stdlib@go1.25.6
1.26.10

Open the chart page →

568
apisixapisix2.18.21 of 3See more

apisix apisix 2.18.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.26.10

Open the chart page →

3,674
corednscorednsVerified publisher1.49.01 of 1See more

coredns coredns 1.49.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
coredns/coredns:1.14.77efd3c635b03
stdlib@go1.26.6
1.26.10

Open the chart page →

577
vpafairwinds-stableVerified publisher5.1.04 of 4See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.10

Open the chart page →

2,955
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
stdlib@go1.18.8
1.26.10

Open the chart page →

2,990
opentelemetry-operatoropentelemetry-helmOfficialVerified publisher0.126.11 of 1See more

opentelemetry-operator opentelemetry-helm 0.126.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.161.076ac4fa40512
stdlib@go1.27.2
1.26.10

Open the chart page →

5
trinotrino1.45.01 of 1See more

trino trino 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
trinodb/trino:4842704eb53935a
stdlib@go1.26.5
1.26.10

Open the chart page →

379
prometheus-pushgatewayprometheus-communityOfficialVerified publisher3.9.11 of 1See more

prometheus-pushgateway prometheus-community 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.10

Open the chart page →

232
keycloakcloudpirates-keycloakVerified publisher0.21.482 of 3See more

keycloak cloudpirates-keycloak 0.21.48

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
stdlib@go1.24.6
1.26.10
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

5,184
dagsterdagsterVerified publisher1.13.263 of 5See more

dagster dagster 1.13.26

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.26605d41ae6647
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
dagster/user-code-example:1.13.265c98e09b2aeb
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
library/postgres:14.6f565573d74ae
stdlib@go1.18.2
1.26.10

Open the chart page →

4,153
prometheus-redis-exporterprometheus-communityVerified publisher6.34.01 of 1See more

prometheus-redis-exporter prometheus-community 6.34.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.94.00842ef7110e6
stdlib@go1.27.2
1.26.10

Open the chart page →

9
zabbixzabbix-communityVerified publisher7.1.03 of 5See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
stdlib@go1.24.10
1.26.10
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
stdlib@go1.24.10
1.26.10

Open the chart page →

16,616
graylogkong-zVerified publisher3.0.381 of 5See more

graylog kong-z 3.0.38

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.10

Open the chart page →

3,398
netdatanetdataVerified publisher3.7.1761 of 1See more

netdata netdata 3.7.176

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
netdata/netdata:v2.12.15cfa05a5fa56
stdlib@go1.27.0
1.26.10

Open the chart page →

3,055
connectonepassword-connect2.4.22 of 2See more

connect onepassword-connect 2.4.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
1password/connect-api:1.8.3656e4b10df83
ca-certificates@20260611-r1
stdlib@go1.26.8
20260909-r3
1.26.10
1password/connect-sync:1.8.3a760350c941a
ca-certificates@20260611-r1
stdlib@go1.26.8
20260909-r3
1.26.10

Open the chart page →

540
node-problem-detectordeliveryheroVerified publisher2.4.21 of 1See more

node-problem-detector deliveryhero 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
stdlib@go1.25.5
1.26.10

Open the chart page →

2,569
opencostopencostOfficialVerified publisher2.5.331 of 2See more

opencost opencost 2.5.33

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.10

Open the chart page →

564
openfaasopenfaas15.0.146 of 6See more

openfaas openfaas 15.0.14

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
stdlib@go1.20.11
1.26.10
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
stdlib@go1.26.3
1.26.10
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
stdlib@go1.24.13
1.26.10
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
stdlib@go1.23.4
1.26.10
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10
quay.io/prometheus/prometheus:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.10

Open the chart page →

5,702
prometheus-elasticsearch-exporterprometheus-communityVerified publisher7.4.01 of 1See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/elasticsearch-exporter:v1.11.0a056739b095d
stdlib@go1.26.5
1.26.10

Open the chart page →

413
flux2fluxcd-community2.19.17 of 7See more

flux2 fluxcd-community 2.19.1

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
fluxcd/flux-cli:v2.9.5704d55295355
stdlib@go1.26.2
1.26.10
ghcr.io/fluxcd/helm-controller:v1.6.48ff15409e46d
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/image-automation-controller:v1.2.5e1a2720d3951
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/kustomize-controller:v1.9.5a3a955eb2bc4
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/source-controller:v1.9.56f20d232d596
stdlib@go1.26.7
1.26.10

Open the chart page →

4,743
gitlab-agentgitlabVerified publisher2.33.01 of 1See more

gitlab-agent gitlab 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk:v19.5.049dd7b857f3e
stdlib@go1.27.1
1.26.10

Open the chart page →

232
policy-reporterpolicy-reporterOfficialVerified publisher3.11.11 of 1See more

policy-reporter policy-reporter 3.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kyverno/policy-reporter:3.11.1a95ef6394c4d
stdlib@go1.27.2
1.26.10

Open the chart page →

75
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
stdlib@go1.18.2
1.26.10

Open the chart page →

6,790
jaeger-operatorjaegertracingOfficialVerified publisher2.57.01 of 1See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/jaeger-operator:1.61.03f036ec60e61
stdlib@go1.22.3
1.26.10

Open the chart page →

1,187
netboxnetboxOfficialVerified publisher8.3.933 of 5See more

netbox netbox 8.3.93

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/valkey:latest9985c6b0fef4
stdlib@go1.26.9
1.26.10
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.26.10
ghcr.io/netbox-community/netbox:v4.7.31d6e0b5fbd48
rustls-webpki@0.103.14
stdlib@go1.27.1
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

1,889
postgrescloudpirates-postgresVerified publisher0.21.21 of 1See more

postgres cloudpirates-postgres 0.21.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

1,742
vault-secrets-operatorhashicorpVerified publisher1.6.21 of 2See more

vault-secrets-operator hashicorp 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
stdlib@go1.23.0
1.26.10

Open the chart page →

1,562
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
stdlib@go1.21.4
1.26.10

Open the chart page →

2,107
rocketchatrocketchat-server7.1.06 of 12See more

rocketchat rocketchat-server 7.1.0

6 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
stdlib@go1.20.7
1.26.10
library/nats:2.12-alpineb270f5e24283
stdlib@go1.25.12
1.26.10
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.10
natsio/nats-server-config-reloader:0.21.110ff229eaf52
stdlib@go1.25.5
1.26.10
natsio/prometheus-nats-exporter:0.18.002469dc907bc
stdlib@go1.24.6
1.26.10

Open the chart page →

17,042

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
gpappsoft/privacyidea-docker:3.12.2af7841adad26
ca-certificates@20251003-r0
20260909-r3
1
gradiant/open5gs-dbctl:0.10.3332031245fce
stdlib@go1.22.11
1.26.10
1
gradiant/packetrusher:2b26573e9b46dc76af4
stdlib@go1.21.3
1.26.10
1
grafana/agent:v0.44.23364714a2f64
stdlib@go1.22.11
1.26.10
1
grafana/agent:v0.20.0825c09373d27
stdlib@go1.16
1.26.10
1
grafana/agent-operator:v0.34.1045c9125634c
stdlib@go1.20.4
1.26.10
1
grafana/alloy:v1.5.101a63f4e032c
stdlib@go1.22.7
1.26.10
1
grafana/alloy:v1.4.306bdcbb51fc2
stdlib@go1.22.7
1.26.10
1
grafana/alloy:v1.18.10f4434c92b3e
stdlib@go1.26.5
1.26.10
1
grafana/alloy:v1.20.12aa2099af76c
stdlib@go1.26.7
1.26.10
1
grafana/alloy:v1.18.0491b0578c049
stdlib@go1.26.5
1.26.10
1
grafana/alloy:v1.16.384b76d56c594
stdlib@go1.26.3
1.26.10
1
grafana/alloy:v1.11.38c7256f412fe
stdlib@go1.24.6
1.26.10
1
grafana/alloy:v1.1.1c3dac4e26471
stdlib@go1.22.3
1.26.10
1
grafana/alloy:v1.14.0f50931848bd8
stdlib@go1.25.7
1.26.10
1
grafana/alloy:v1.12.2f94b1c82957a
stdlib@go1.25.5
1.26.10
1
grafana/beyla:1.3.336d07f8d276e
stdlib@go1.21.7
1.26.10
1
grafana/beyla:3.39.09319563766b2
stdlib@go1.26.8
1.26.10
1
grafana/beyla:2.2.2a9cf4560472e
stdlib@go1.24.1
1.26.10
1
grafana/beyla-k8s-cache:253b2f561cb1b
stdlib@go1.25.3
1.26.10
1
grafana/grafana:6.6.0052147d7e0ec
stdlib@go1.13.4
1.26.10
1
grafana/grafana:10.1.50679e877ba20
stdlib@go1.20.10
1.26.10
1
grafana/grafana:7.5.609bb407e26ab
stdlib@go1.16.1
1.26.10
1
grafana/grafana:7.3.315b977f5207d
stdlib@go1.15.1
1.26.10
1
grafana/grafana:9.4.71a359d92f40e
stdlib@go1.20.1
1.26.10
1
grafana/grafana:10.1.11b9ca4bbc4a2
stdlib@go1.20.8
1.26.10
1
grafana/grafana:13.0.1-security-012d1f9ae67c17
stdlib@go1.26.2
1.26.10
1
grafana/grafana:12.2.22ebef928d7e5
stdlib@go1.25.3
1.26.10
1
grafana/grafana:12.2.135c41e0fd029
stdlib@go1.25.3
1.26.10
1
grafana/grafana:9.5.239c849cebccc
stdlib@go1.20.4
1.26.10
1
grafana/grafana:11.2.2-security-01464eac539793
stdlib@go1.22.7
1.26.10
1
grafana/grafana:11.5.15781759b3d27
stdlib@go1.23.5
1.26.10
1
grafana/grafana:11.6.062d2b9d20a19
stdlib@go1.23.7
1.26.10
1
grafana/grafana:8.0.3696823fbc561
stdlib@go1.16.1
1.26.10
1
grafana/grafana:13.2.2-distroless69a5d2d957ca
stdlib@go1.26.7
1.26.10
1
grafana/grafana:10.2.36b5b37eb35bb
stdlib@go1.21.3
1.26.10
1
grafana/grafana:7.3.46d42886b3ebe
stdlib@go1.15.5
1.26.10
1
grafana/grafana:12.3.070d9599b186c
stdlib@go1.25.3
1.26.10
1
grafana/grafana:7.2.1733842cca5bd
stdlib@go1.15.1
1.26.10
1
grafana/grafana:12.2.074144189b384
stdlib@go1.24.6
1.26.10
1
grafana/grafana:9.4.376dcf36e7d2a
stdlib@go1.19.4
1.26.10
1
grafana/grafana:13.1.17cb8c64c4d57
stdlib@go1.26.3
1.26.10
1
grafana/grafana:10.3.38640e5038e83
stdlib@go1.21.5
1.26.10
1
grafana/grafana:11.5.28b37a2f028f1
stdlib@go1.23.5
1.26.10
1
grafana/grafana:9.1.19746858c20e6
stdlib@go1.17.12
1.26.10
1
grafana/grafana:12.1.1a1701c218024
stdlib@go1.24.6
1.26.10
1
grafana/grafana:9.0.1a738d0744784
stdlib@go1.17.11
1.26.10
1
grafana/grafana:10.4.19a9043254ba16
stdlib@go1.24.3
1.26.10
1
grafana/grafana:13.1.3ab5cb380e3ff
stdlib@go1.26.5
1.26.10
1
grafana/grafana:11.1.3b23b588cf7cb
stdlib@go1.22.4
1.26.10
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.