StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
s3-encryption-gateways3-encryption-gatewayVerified publisher0.12.31 of 1See more

s3-encryption-gateway s3-encryption-gateway 0.12.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloud37io/s3-encryption-gateway:0.12.310e791e98b62
stdlib@go1.27.1
1.26.10

Open the chart page →

244
rabbitmq-operatorsagikazarmarkVerified publisher0.0.31 of 1See more

rabbitmq-operator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rabbitmqoperator/cluster-operator:1.8.3231e7ce0e905
stdlib@go1.17
1.26.10

Open the chart page →

3,184
conference-appsalaboy1.0.04 of 7See more

conference-app salaboy 1.0.0

4 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinnedce9ce8293e4e
stdlib@go1.20.1
1.26.10
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinnedbb64bf14467d
stdlib@go1.20.1
1.26.10
salaboy/frontend-go-1739aa83b5e69d4ccb8a5615830ae66cdigest-pinned1ff7c90845e4
stdlib@go1.20.1
1.26.10
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned799c35f9f306
stdlib@go1.20.1
1.26.10

Open the chart page →

14,530
ntfysarab97Verified publisher0.1.71 of 1See more

ntfy sarab97 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.6.283e2e43d9956
stdlib@go1.20.5
1.26.10

Open the chart page →

2,513
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
stdlib@go1.20.5
1.26.10

Open the chart page →

47,836
scale-sentryscale-sentryVerified publisher0.5.01 of 1See more

scale-sentry scale-sentry 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ethan-kane-ops/scale-sentry:0.5.017a54e1f7c0b
stdlib@go1.26.8
1.26.10

Open the chart page →

228
scaleway-csiscaleway-charts0.2.28 of 8See more

scaleway-csi scaleway-charts 0.2.2

8 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
scaleway/scaleway-csi:v0.3.411135998e31c
stdlib@go1.24.12
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.9.05aaefc24f315
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.14.05244abbe87e0
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.3.0bc7be893ecc3
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/snapshot-controller:v8.3.012c2da094b02
stdlib@go1.24.2
1.26.10

Open the chart page →

8,041
teamcityscalified-teamcityVerified publisher2026.2.11 of 3See more

teamcity scalified-teamcity 2026.2.1

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10

Open the chart page →

1,742
sceptresceptreai0.1.122 of 5See more

sceptre sceptreai 0.1.12

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:postgresql-0.1.1258881351f309
stdlib@go1.25.12
1.26.10
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
stdlib@go1.25.12
1.26.10

Open the chart page →

6,626
schemaheroschemahero1.4.01 of 1See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
schemahero/schemahero-manager:0.22.11609e1a05cd3
stdlib@go1.24.6
1.26.10

Open the chart page →

2,956
scienceboxsciencebox0.0.72 of 17See more

sciencebox sciencebox 0.0.7

2 of the 17 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
stdlib@go1.17.3
1.26.10
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.26.10

Open the chart page →

9,765
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
stdlib@go1.20.4
1.26.10

Open the chart page →

4,977
seatsurfingseatsurfing0.1.21 of 1See more

seatsurfing seatsurfing 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
seatsurfing/backend:1.119.39952e80048b0
stdlib@go1.26.5
1.26.10

Open the chart page →

978
secrethorsecrethor1.1.21 of 1See more

secrethor secrethor 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bonovoo/secrethor:1.1.2bb93b68fcd17
stdlib@go1.24.2
1.26.10

Open the chart page →

1,069
secrets-store-csi-driver-provider-infisicalsecrets-store-csi-driver-provider-infisicalVerified publisher1.1.41 of 1See more

secrets-store-csi-driver-provider-infisical secrets-store-csi-driver-provider-infisical 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gidoichi/secrets-store-csi-driver-provider-infisical:v1.1.42dd5322a0610
stdlib@go1.26.5
1.26.10

Open the chart page →

612
securosecuroVerified publisher0.16.51 of 4See more

securo securo 0.16.5

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
pgvector/pgvector:pg167b822b0aac60
stdlib@go1.24.6
1.26.10

Open the chart page →

4,077
selenosis-deployselenosisVerified publisher2.1.44 of 4See more

selenosis-deploy selenosis 2.1.4

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alcounit/browser-controller:v1.0.1c64222f9e663
stdlib@go1.25.0
1.26.10
alcounit/browser-service:v0.0.94bd10defc324
stdlib@go1.25.0
1.26.10
alcounit/browser-ui:v1.0.0668e7aee5e5c
stdlib@go1.25.0
1.26.10
alcounit/selenosis:v2.1.2f0964cda6da6
stdlib@go1.25.0
1.26.10

Open the chart page →

3,662
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
stdlib@go1.23.10
1.26.10

Open the chart page →

6,346
sentry-k8ssentry-k8sVerified publisher1.4.13 of 11See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
library/redis:6.2.20-alpine77697a75da9f
stdlib@go1.18.2
1.26.10
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
stdlib@go1.19.8
1.26.10

Open the chart page →

53,689
sentry-operatorsentry-operator1.2.51 of 1See more

sentry-operator sentry-operator 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/agjmills/sentry-operator:v1.2.500389ef6a00e
stdlib@go1.24.2
1.26.10

Open the chart page →

1,009
helm64-toolboxserdigital64Verified publisher0.4.01 of 1See more

helm64-toolbox serdigital64 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox:latest7af2216c7b9e
rustls-webpki@0.103.13
stdlib@go1.26.4
webpki-root-certs@1.0.7
0.103.16
1.26.10
1.0.10

Open the chart page →

2,295
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
stdlib@go1.22.5
1.26.10
dserio83/velero-ui:0.3.1b4e1ec6664d3
stdlib@go1.23.7
1.26.10

Open the chart page →

13,731
session-manager-agentsession-manager-agent1.9.01 of 2See more

session-manager-agent session-manager-agent 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-agent:1.9.0b9f23db99051
stdlib@go1.23.11
1.26.10

Open the chart page →

1,008
session-manager-serversession-manager-server0.1.0-gfu-dev1 of 1See more

session-manager-server session-manager-server 0.1.0-gfu-dev

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server:0.1.0-gfu-devb9537499ff9e
stdlib@go1.23.7
1.26.10

Open the chart page →

1,357
k8s-appliershlomibendavidOfficialVerified publisher1.0.11 of 1See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
shlomibendavid/k8s-applier:0311240529a22ffbe0f04e
stdlib@go1.21.7
1.26.10

Open the chart page →

2,028
clickhousesignoz24.1.183 of 3See more

clickhouse signoz 24.1.18

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.21.2cd9252644ce0
stdlib@go1.19.10
1.26.10
altinity/metrics-exporter:0.21.2df3d57215356
stdlib@go1.19.10
1.26.10
signoz/zookeeper:3.7.1fcc4a3288154
stdlib@go1.21.2
1.26.10

Open the chart page →

7,021
cosignedsigstoreVerified publisher0.1.232 of 2See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/projectsigstore/cosigneddigest-pinned784518ff3ee7
stdlib@go1.17.9
1.26.10
gcr.io/projectsigstore/policy-webhookdigest-pinned82940e8c3e0d
stdlib@go1.17.9
1.26.10

Open the chart page →

7,654
rekor-tilessigstoreVerified publisher1.2.61 of 1See more

rekor-tiles sigstore 1.2.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sigstore/rekor-tiles/gcp:v2.2.1e401cfe033c9
stdlib@go1.26.3
1.26.10

Open the chart page →

722
scaffoldsigstoreVerified publisher0.6.11711 of 15See more

scaffold sigstore 0.6.117

11 of the 15 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redisdigest-pinned148bb5411c18
stdlib@go1.18.2
1.26.10
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
stdlib@go1.18.2
1.26.10
ghcr.io/sigstore/fulcio:v1.9.02de0226c5f82
stdlib@go1.27.1
1.26.10
ghcr.io/sigstore/rekor/rekor-server:v1.5.4100d793d68d0
stdlib@go1.26.4
1.26.10
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned4d64dac937e2
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.33e591f98e3899
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createdbdigest-pinned16673c1099a5
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.334c845ced03d8
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3324293fa1ed50
stdlib@go1.25.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned32ee491f4d00
stdlib@go1.27.0
1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned3d0152303816
stdlib@go1.27.0
1.26.10

Open the chart page →

12,441
octopusdeploysimcube1.0.211 of 2See more

octopusdeploy simcube 1.0.21

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/kubectl:latest599e67d36ff5
stdlib@go1.26.9
1.26.10

Open the chart page →

100
simply-dns-webhooksimply-dns-webhookVerified publisher1.10.01 of 1See more

simply-dns-webhook simply-dns-webhook 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/runnerm/simply-dns-webhook:v1.10.0fdfffa3984a5
stdlib@go1.26.4
1.26.10

Open the chart page →

783
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
stdlib@go1.23.8
1.26.10

Open the chart page →

5,607
postgresql-singlesinextraVerified publisher1.15.21 of 1See more

postgresql-single sinextra 1.15.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
stdlib@go1.24.6
1.26.10

Open the chart page →

6,266
registry-mirrorssinextraVerified publisher2.0.201 of 1See more

registry-mirrors sinextra 2.0.20

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/project-zot/zot:v2.1.2296cda11459ce
stdlib@go1.27.1
1.26.10

Open the chart page →

576
skippersinextraVerified publisher0.9.11 of 1See more

skipper sinextra 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/zalando/skipper:v0.28.398a50a01aea02
stdlib@go1.27.2
1.26.10

Open the chart page →

21
altinity-clickhouse-operatorslamdev0.1.22 of 2See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.20.08f0f582d41f0
stdlib@go1.17.13
1.26.10
altinity/metrics-exporter:0.20.01a46d104406d
stdlib@go1.17.13
1.26.10

Open the chart page →

8,462
docker-registry-uislamdev0.0.11 of 1See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quiq/docker-registry-ui:0.9.491281da47036
stdlib@go1.18
1.26.10

Open the chart page →

3,320
external-secrets-operatorslamdev0.0.151 of 1See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
slamdev/external-secrets-operator:0.0.8855f6625dda4
stdlib@go1.13.15
1.26.10

Open the chart page →

3,568
wg-easyslybase-wg-easyVerified publisher1.2.01 of 1See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:15.4.00e7bc9d34e86
stdlib@go1.26.3
1.26.10

Open the chart page →

1,310
wireguardslybase-wireguardVerified publisher2.0.101 of 1See more

wireguard slybase-wireguard 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
linuxserver/wireguard:1.0.20260223-r0-ls1266bcf5d2f5a26
stdlib@go1.26.8
1.26.10

Open the chart page →

762
smallest-self-hostsmallest-self-hostVerified publisher0.2.27 of 12See more

smallest-self-host smallest-self-host 0.2.2

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/redis:latest33dbb7a4be39
stdlib@go1.26.9
1.26.10
grafana/grafana:11.0.00dc5a246ab16
stdlib@go1.21.10
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
stdlib@go1.22.3
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
stdlib@go1.21.8
1.26.10
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
stdlib@go1.22.8
1.26.10
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.10

Open the chart page →

11,920
smarter-edgesmarterOfficialVerified publisher0.0.151 of 1See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/smarter-device-manager:v1.20.12228f7f44594a
stdlib@go1.19.3
1.26.10

Open the chart page →

2,017
aws-otel-collectorsnowplow-devopsVerified publisher0.17.01 of 1See more

aws-otel-collector snowplow-devops 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.50.07968fb60db6a
stdlib@go1.26.7
1.26.10

Open the chart page →

361
yopasssoftizyVerified publisher1.0.11 of 2See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jhaals/yopass:11.4.69516e3b3e88c
stdlib@go1.19.1
1.26.10

Open the chart page →

2,346
artifact-hubsoftonic1.19.06 of 8See more

artifact-hub softonic 1.19.0

6 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
stdlib@go1.19.10
1.26.10
artifacthub/db-migrator:v1.19.02a746b289fcd
stdlib@go1.22.4
1.26.10
artifacthub/hub:v1.19.0111918d8c399
stdlib@go1.22.4
1.26.10
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
artifacthub/scanner:v1.19.0323d026e78c3
stdlib@go1.21.8
1.26.10
artifacthub/tracker:v1.19.06596c8c4d955
stdlib@go1.22.4
1.26.10

Open the chart page →

18,927
gcp-quota-exportersoftonic2.0.21 of 1See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mintel/gcp-quota-exporter:v0.3.20e0707b7732b
stdlib@go1.13.12
1.26.10

Open the chart page →

3,928
go-ratelimitsoftonic1.0.72 of 3See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:v1.4.071081616da3e
stdlib@go1.14
1.26.10
oliver006/redis_exporter:v1.9.04af75e9f16f6
stdlib@go1.14.4
1.26.10

Open the chart page →

7,902
node-policy-webhooksoftonic0.1.101 of 1See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
softonic/node-policy-webhook:0.1.2ab6098c04a53
stdlib@go1.14.6
1.26.10

Open the chart page →

4,138
redis-shardedsoftonic0.5.01 of 2See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.9.04af75e9f16f6
stdlib@go1.14.4
1.26.10

Open the chart page →

3,173
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
stdlib@go1.24.13
1.26.10

Open the chart page →

8,897

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
hashicorp/vault:latestc2f666266f38
stdlib@go1.26.8
1.26.10
1
hashicorp/vault:1.8.4dfc3500beb0e
stdlib@go1.16.7
1.26.10
1
hashicorp/vault:1.9.2ff9b17b0cefe
stdlib@go1.17.5
1.26.10
1
hashicorp/vault-k8s:1.6.2103a2d817a74
stdlib@go1.23.6
1.26.10
1
hashicorp/vault-k8s:1.2.14500e988b7ce
stdlib@go1.20.3
1.26.10
1
hashicorp/vault-k8s:0.6.05697b85bc69a
stdlib@go1.13.5
1.26.10
1
hashicorp/vault-k8s:1.7.2ae3d307658b7
stdlib@go1.25.5
1.26.10
1
hashicorp/vault-k8s:0.14.0aff47b5ba39c
stdlib@go1.17.2
1.26.10
1
hashicorp/waypoint:0.11.397d521a27498
stdlib@go1.19.4
1.26.10
1
hauler/hauler:2.1.21fc53fdf5f1d
stdlib@go1.27.2-X:boringcrypto
1.26.10
1
hazelcast/hazelcast-platform-operator:5.20.0e10ca9d704b1
stdlib@go1.26.6
1.26.10
1
hbahadorzadeh/cert-manager-webhook-arvan:latestbf9756b3bc47
stdlib@go1.15.6
1.26.10
1
headscale/headscale:0.25.1a7a8ae9616bb
stdlib@go1.23.4
1.26.10
1
headscale/headscale:0.27.1cd37b3001857
stdlib@go1.25.1
1.26.10
1
helga09/my_sql_shoes:v1.1.1a03657d97897
stdlib@go1.18.2
1.26.10
1
henrygd/beszel:latest6b39a8b64f9b
stdlib@go1.27.1
1.26.10
1
henrygd/beszel-agent:latestf27b1aa2c684
stdlib@go1.27.1
1.26.10
1
hetzner/cert-manager-webhook-hetzner:v0.9.0b64db89ba4c1
stdlib@go1.26.6
1.26.10
1
hetznercloud/hcloud-cloud-controller-manager:v1.16.08c07e6d7a76c
stdlib@go1.20.5
1.26.10
1
hetznercloud/hcloud-cloud-controller-manager:v1.13.0ed5ee5f83973
stdlib@go1.19
1.26.10
1
hetznercloud/hcloud-csi-driver:1.6.01475d525f9a4
stdlib@go1.17
1.26.10
1
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
stdlib@go1.15.3
1.26.10
1
hetznercloud/hcloud-csi-driver:v2.3.2b7ed90d5fab2
stdlib@go1.19.7
1.26.10
1
hfoxy4/kubefaas-builder:main-2afc7570bfb65aaad93
stdlib@go1.21.11
1.26.10
1
hfoxy4/kubefaas-controller:main-2afc7570761fe08f14c
stdlib@go1.22.4
1.26.10
1
hfoxy4/tapo-prometheus-exporter:v0.1.117e385eef6fc7
stdlib@go1.21.3
1.26.10
1
hhaluk/mocktail:2.0.3350d19360038
stdlib@go1.17.7
1.26.10
1
hhyo/archery:v1.9.11aa41843419e
stdlib@go1.15.6
1.26.10
1
hibiken/asynqmon:latestac80bcffd2f9
stdlib@go1.18.10
1.26.10
1
hipages/php-fpm_exporter:2.2.09b5be9d3d955
stdlib@go1.17.10
1.26.10
1
hivemq/hivemq-platform-operator:2.3.095d16db62a75
stdlib@go1.27.1
1.26.10
1
hivemq/hivemq-swarm:4.56.08d5f6a6f48b0
stdlib@go1.26.7
1.26.10
1
hiversh/antigravity:0.1.45-microvm0e36d98402bc
stdlib@go1.26.5
1.26.10
1
hiversh/browser:0.1.45-microvmb5048c6342ce
stdlib@go1.26.5
1.26.10
1
hiversh/claude:0.1.45-microvm2fbf9f264498
stdlib@go1.26.5
1.26.10
1
hiversh/codex:0.1.45-microvm4f43130f51e5
stdlib@go1.26.5
1.26.10
1
hiversh/controller:0.1.45b0b85f8942c7
stdlib@go1.19.8
1.26.10
1
hiversh/copilot:0.1.45-microvm50c07b84f298
stdlib@go1.26.5
1.26.10
1
hiversh/node:0.1.45-alpine-microvm836a37641941
stdlib@go1.26.5
1.26.10
1
hiversh/openclaw:0.1.45-microvm958b7ebb4eb4
stdlib@go1.19.8
1.26.10
1
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
stdlib@go1.19.8
1.26.10
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
stdlib@go1.17.10
1.26.10
1
holiman/nodemonitor:latest5cd609761065
stdlib@go1.20.3
1.26.10
1
holoinsight/agent:latest5c3994e742f8
stdlib@go1.22.1
1.26.10
1
holoinsight/otelcontribcol:latest42ba8dc3113c
stdlib@go1.19
1.26.10
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
stdlib@go1.17.1
1.26.10
1
homeassistant/home-assistant:2022.3.5565751f33794
stdlib@go1.17.1
1.26.10
1
homeassistant/home-assistant:2026.75a531753cea9
rustls-webpki@0.103.13
stdlib@go1.25.6
webpki-root-certs@1.0.7
0.103.16
1.26.10
1.0.10
1
homeassistant/home-assistant:2023.12.48d000332b09b
stdlib@go1.17.1
1.26.10
1
homeassistant/home-assistant:2026.8.0a21689ef0510
rustls-webpki@0.103.13
stdlib@go1.25.6
webpki-root-certs@1.0.8
0.103.16
1.26.10
1.0.10
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.