StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,216
of 18,232 indexed, latest versions
Container images
6,118
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,216 of 18,232 indexed charts deploy, on 6,118 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,010
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3113
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1691
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1063
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,216 by stars
ChartLatestAffected imagesRadar Score
postgresqlglassflowVerified publisher0.1.91 of 1See more

postgresql glassflow 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:17-alpineeee6c6e1b089
stdlib@go1.24.6
1.26.10

Open the chart page →

703
glassflow-operatorglassflow-operatorVerified publisher0.8.51 of 3See more

glassflow-operator glassflow-operator 0.8.5

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
stdlib@go1.25.0
1.26.10

Open the chart page →

1,400
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
stdlib@go1.24.5
1.26.10

Open the chart page →

2,836
glidergliderVerified publisher0.1.51 of 1See more

glider glider 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nadoo/glider:0.1638aadefbd607
stdlib@go1.20.14
1.26.10

Open the chart page →

1,552
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:latestf1bba652ba57
stdlib@go1.26.7
1.26.10

Open the chart page →

79,176
gnp-stackgnp-stack0.0.511 of 14See more

gnp-stack gnp-stack 0.0.5

11 of the 14 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
stdlib@go1.25.3
1.26.10
library/nats:2.12.1-alpineb3f2bd84176a
stdlib@go1.25.3
1.26.10
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.10
natsio/nats-server-config-reloader:0.20.147094fcae2f4
stdlib@go1.24.8
1.26.10
natsio/prometheus-nats-exporter:0.17.326c826662ac8
stdlib@go1.24.2
1.26.10
rancher/local-path-provisioner:v0.0.329289da488b07
stdlib@go1.24.4
1.26.10
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
stdlib@go1.24.12
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.85.0890b3bb05cf4
stdlib@go1.24.6
1.26.10
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
stdlib@go1.23.7
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.33d671cf20a35
stdlib@go1.25.1
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
stdlib@go1.24.6
1.26.10

Open the chart page →

19,409
go-app-helmgo-app-helm0.1.01 of 1See more

go-app-helm go-app-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
manojchaulagain/go-k8s:0.1.0f237b5f637ae
stdlib@go1.20.1
1.26.10

Open the chart page →

2,892
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
goccx/go-file-server:latestf4b3ebea0303
stdlib@go1.21.10
1.26.10

Open the chart page →

2,921
gofitgofit0.0.11 of 1See more

gofit gofit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bamaas/gofit:0.0.132b6a174b419
stdlib@go1.22.11
1.26.10

Open the chart page →

1,078
goldpingergoldpinger1.2.01 of 1See more

goldpinger goldpinger 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bloomberg/goldpinger:3.11.5f7c60d319150
stdlib@go1.27.1
1.26.10

Open the chart page →

228
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:169e2cf6287f25
stdlib@go1.24.6
1.26.10

Open the chart page →

1,737
gorsegorse-io0.4.23 of 4See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
stdlib@go1.20.1
1.26.10
zhenghaoz/gorse-server:0.4.1239c565685b01
stdlib@go1.20.1
1.26.10
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
stdlib@go1.20.1
1.26.10

Open the chart page →

6,956
gosmee-clientgosmee-clientVerified publisher0.1.31 of 1See more

gosmee-client gosmee-client 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/chmouel/gosmee:v0.32.060b8db1f68cc
stdlib@go1.26.5
1.26.10

Open the chart page →

685
gotwaygotwayVerified publisher0.8.01 of 1See more

gotway gotway 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/gotway/gotway:v0.0.137ed73c1979ee
stdlib@go1.18.3
1.26.10

Open the chart page →

2,857
Governify-Bluejaygovernify0.1.02 of 12See more

Governify-Bluejay governify 0.1.0

2 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
stdlib@go1.17
1.26.10
library/mongo:latestbac22ea7710d
stdlib@go1.26.8
1.26.10

Open the chart page →

24,234
Governify-Falcongovernify0.1.03 of 10See more

Governify-Falcon governify 0.1.0

3 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
stdlib@go1.17
1.26.10
library/mongo:latestbac22ea7710d
stdlib@go1.26.8
1.26.10
quay.io/prometheus/prometheus:latestefd719c99d83
stdlib@go1.27.1
1.26.10

Open the chart page →

26,725
goweeklygoweekly2.0.01 of 1See more

goweekly goweekly 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
zufardhiyaulhaq/goweekly:v2.0.008dcc130fbea
stdlib@go1.17.12
1.26.10

Open the chart page →

2,157
harborgpg-dev1.18.35 of 8See more

harbor gpg-dev 1.18.3

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
stdlib@go1.24.13
1.26.10
goharbor/harbor-jobservice:v2.14.3e2b0298e894d
stdlib@go1.24.13
1.26.10
goharbor/harbor-registryctl:v2.14.3ddf6bb429eb6
stdlib@go1.24.13
1.26.10
goharbor/registry-photon:v2.14.36533fc396cbc
stdlib@go1.24.13
1.26.10
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
stdlib@go1.25.7
1.26.10

Open the chart page →

5,672
ingress-nginxgpg-dev4.9.02 of 2See more

ingress-nginx gpg-dev 4.9.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
stdlib@go1.21.5
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10

Open the chart page →

3,706
jaegergpg-dev3.3.34 of 5See more

jaeger gpg-dev 3.3.3

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
stdlib@go1.21.5
1.26.10
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
stdlib@go1.18.2
1.26.10
jaegertracing/jaeger-collector:1.53.07f1269222903
stdlib@go1.21.5
1.26.10
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
stdlib@go1.21.5
1.26.10

Open the chart page →

23,373
kube-prometheus-stackgpg-dev84.0.05 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
stdlib@go1.26.0
1.26.10
ghcr.io/jkroepke/kube-webhook-certgen:1.8.14f6da0256b1b
stdlib@go1.26.2
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
stdlib@go1.25.8
1.26.10
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

6,715
kubernetes-dashboardgpg-dev7.5.04 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubernetesui/dashboard-api:1.7.060595892c2cf
stdlib@go1.22.3
1.26.10
kubernetesui/dashboard-auth:1.1.307135c09e9ff
stdlib@go1.22.2
1.26.10
kubernetesui/dashboard-metrics-scraper:1.1.17747d363c9fe
stdlib@go1.22.1
1.26.10
kubernetesui/dashboard-web:1.4.04445b31a2c25
stdlib@go1.22.3
1.26.10

Open the chart page →

8,971
metrics-servergpg-dev3.12.11 of 1See more

metrics-server gpg-dev 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
stdlib@go1.21.8
1.26.10

Open the chart page →

1,776
opentelemetry-demogpg-dev0.33.88 of 27See more

opentelemetry-demo gpg-dev 0.33.8

8 of the 27 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
stdlib@go1.23.1
1.26.10
jaegertracing/all-in-one:1.53.060e65bfffe1f
stdlib@go1.21.5
1.26.10
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
stdlib@go1.23.3
1.26.10
ghcr.io/open-feature/flagd:v0.11.1a7ea52f87446
stdlib@go1.22.5
1.26.10
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
stdlib@go1.22.8
1.26.10
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
stdlib@go1.22.8
1.26.10
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
stdlib@go1.21.5
1.26.10
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
stdlib@go1.23.3
1.26.10

Open the chart page →

196,819
prometheusgpg-dev29.2.16 of 6See more

prometheus gpg-dev 29.2.1

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.90.1693faa0b8724
stdlib@go1.25.8
1.26.10
quay.io/prometheus/alertmanager:v0.32.058e117eabcce
stdlib@go1.26.2
1.26.10
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.10
quay.io/prometheus/prometheus:v3.11.2cd37346c9745
stdlib@go1.26.2
1.26.10
quay.io/prometheus/pushgateway:v1.11.249ed9fdf3780
stdlib@go1.25.3
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

5,918
prometheus-operator-admission-webhookgpg-dev0.18.12 of 2See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/admission-webhook:v0.79.2d4c97a1b2d67
stdlib@go1.23.4
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.10

Open the chart page →

3,111
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
stdlib@go1.25.7
1.26.10

Open the chart page →

1,042
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
stdlib@go1.25.8
1.26.10

Open the chart page →

1,820
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
stdlib@go1.25.7
1.26.10

Open the chart page →

2,144
whoami-demogpg-dev0.1.01 of 1See more

whoami-demo gpg-dev 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
containous/whoami:latest7d6a3c8f9147
stdlib@go1.14
1.26.10

Open the chart page →

2,382
spark-standalonegradiant-bigdataVerified publisher0.1.01 of 2See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/graphite-exporter:latestc1a266f63a84
stdlib@go1.26.5
1.26.10

Open the chart page →

6,576
grafana-cloud-onboardinggrafana0.4.75 of 5See more

grafana-cloud-onboarding grafana 0.4.7

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/beyla-k8s-cache:253b2f561cb1b
stdlib@go1.25.3
1.26.10
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
stdlib@go1.25.8
1.26.10
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
stdlib@go1.23.6
1.26.10
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

7,449
grafana-samplinggrafana1.1.72 of 2See more

grafana-sampling grafana 1.1.7

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
stdlib@go1.24.6
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10

Open the chart page →

4,768
mimir-openshift-experimentalgrafana2.1.01 of 4See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
stdlib@go1.17.8
1.26.10

Open the chart page →

5,398
pyroscope-monitoringgrafana0.1.15 of 6See more

pyroscope-monitoring grafana 0.1.1

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
stdlib@go1.24.6
1.26.10
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
stdlib@go1.24.5
1.26.10
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
stdlib@go1.23.6
1.26.10
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
stdlib@go1.23.7
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
stdlib@go1.24.6
1.26.10

Open the chart page →

12,199
snyk-exportergrafana0.1.01 of 1See more

snyk-exporter grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/snyk_exporter:v1.4.1d3c9093401ca
stdlib@go1.21.0
1.26.10

Open the chart page →

1,247
prometheusgrafana-uxadax26.0.16 of 6See more

prometheus grafana-uxadax 26.0.1

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
stdlib@go1.23.3
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
stdlib@go1.23.3
1.26.10
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.26.10
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
stdlib@go1.22.5
1.26.10
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
stdlib@go1.23.1
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
stdlib@go1.23.3
1.26.10

Open the chart page →

8,956
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
stdlib@go1.13.10
1.26.10

Open the chart page →

9,596
grapple-installergrapple-installer0.3.231 of 1See more

grapple-installer grapple-installer 0.3.23

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
stdlib@go1.18.10
1.26.10

Open the chart page →

90,547
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:80e900a3364da
stdlib@go1.26.8
1.26.10

Open the chart page →

6,053
gremlin-integrationsgremlin0.2.01 of 1See more

gremlin-integrations gremlin 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gremlin/gremlin-integrations:latest29fbfe06f468
ca-certificates@20260413-r0
20260909-r3

Open the chart page →

16
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
stdlib@go1.21.10
1.26.10

Open the chart page →

2,042
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
stdlib@go1.15.2
1.26.10

Open the chart page →

16,540
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
stdlib@go1.22.7
1.26.10

Open the chart page →

3,305
loki-proxygroundcover0.1.11 of 1See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
stdlib@go1.17.13
1.26.10

Open the chart page →

3,144
mysqlgroundhog2k3.1.41 of 1See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:9.7.2e2fa358a74ac
stdlib@go1.24.6
1.26.10

Open the chart page →

908
tailscale-subnet-routergtaylor1.2.11 of 1See more

tailscale-subnet-router gtaylor 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/tailscale/tailscale:v1.34.1ce1862e6b3a5
stdlib@go1.19.2-ts3fd24dee31
1.26.10

Open the chart page →

2,786
minifluxhajowielandVerified publisher1.0.01 of 1See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
stdlib@go1.24.2
1.26.10

Open the chart page →

1,918
hakoniwahakoniwa0.1.01 of 1See more

hakoniwa hakoniwa 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/aplulu/hakoniwa:0.1.0accf0b921388
stdlib@go1.25.5
1.26.10

Open the chart page →

793
docker-authhalkeye0.1.11 of 1See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
stdlib@go1.13.7
1.26.10

Open the chart page →

3,670

Container images carrying it

6,118 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
istio/operator:1.12.06cfce8a071b9
stdlib@go1.17.3
1.26.10
1
istio/operator:1.18.270f9d1fe5fff
stdlib@go1.20.6
1.26.10
1
istio/pilot:1.29.0325156535773
stdlib@go1.25.7
1.26.10
1
istio/pilot:1.9.652f25f91d702
stdlib@go1.15.13
1.26.10
1
istio/pilot:1.23.69c3d6a218181
stdlib@go1.23.7
1.26.10
1
istio/pilot:1.16.0ac0284d75ec9
stdlib@go1.19.3
1.26.10
1
istio/pilot:1.17.1ce9d87606701
stdlib@go1.20.1
1.26.10
1
istio/pilot:1.15.2db08d6963975
stdlib@go1.19.2
1.26.10
1
istio/pilot:1.10.3e7e110a421c2
stdlib@go1.16.6
1.26.10
1
istio/pilot:1.29.1f8b0e412ac4a
stdlib@go1.25.8
1.26.10
1
istio/proxyv2:1.14.1df69c1a7af7c
stdlib@go1.18.2
1.26.10
1
itscontained/secret-manager:0.3.07ec3e93c6469
stdlib@go1.15.3
1.26.10
1
itzg/bungeecord:latest2a77bff989e1
stdlib@go1.26.7
1.26.10
1
itzg/mc-router:latest3a9ece070b97
ca-certificates@20260909-r2
stdlib@go1.26.6
20260909-r3
1.26.10
1
itzg/mc-router:1.16.1bb552b59fb53
stdlib@go1.18.4
1.26.10
1
itzg/minecraft-server:2026.10.05a2ab74ae179
stdlib@go1.26.5
1.26.10
1
itzmanish/ecr-token-renew:latest02154d1c05b5
stdlib@go1.16.6
1.26.10
1
ixsystems/truecommand:3.2.019c218455cd2
stdlib@go1.25.0
1.26.10
1
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
stdlib@go1.17.2
1.26.10
1
jacobalberty/unifi:v7.1.664a3616625dda
stdlib@go1.18
1.26.10
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
stdlib@go1.20.4
1.26.10
1
jaegertracing/all-in-one:1.2942822be7888b
stdlib@go1.17.3
1.26.10
1
jaegertracing/all-in-one:1.53.060e65bfffe1f
stdlib@go1.21.5
1.26.10
1
jaegertracing/all-in-one:1.42.07d32a4eddec7
stdlib@go1.19.5
1.26.10
1
jaegertracing/all-in-one:1.22.0ca6b73330616
stdlib@go1.15.8
1.26.10
1
jaegertracing/all-in-one:1.18db45c07f2e1b
stdlib@go1.14.4
1.26.10
1
jaegertracing/all-in-one:1.55f6b5d09073f1
stdlib@go1.22.0
1.26.10
1
jaegertracing/jaeger:2.20.046a886260e04
stdlib@go1.26.5
1.26.10
1
jaegertracing/jaeger:2.22.0836b967b5abc
stdlib@go1.27.1
1.26.10
1
jaegertracing/jaeger:2.9.0e128b9adbb29
stdlib@go1.24.5
1.26.10
1
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
stdlib@go1.19.4
1.26.10
1
jaegertracing/jaeger-operator:1.61.03f036ec60e61
stdlib@go1.22.3
1.26.10
1
jaegertracing/jaeger-query:1.41.0b636f0f464bc
stdlib@go1.19.4
1.26.10
1
jakuboskera/todo-operator:v0.1.0a305b8ce5bff
stdlib@go1.25.3
1.26.10
1
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
stdlib@go1.22.8
1.26.10
1
jamesread/olivetin:3000.19.0af9d7c4db6dc
stdlib@go1.26.5
1.26.10
1
jamesread/olivetin:3000.20.0f3066e207efd
stdlib@go1.26.8
1.26.10
1
jbtronics/part-db1:latestf6523ff48db1
stdlib@go1.26.9
1.26.10
1
jdschulze/restinthemiddle:v2.3.15a7bbcf09a5b4
stdlib@go1.27.2
1.26.10
1
jdvalencia422/observabilitysec:latesta80b6e47a7b8
stdlib@go1.18.4
1.26.10
1
jeboehm/mailserver-filter:5.0.92e756949e537d
stdlib@go1.24.1
1.26.10
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
stdlib@go1.24.1
1.26.10
1
jeboehm/mailserver-mta:5.0.925fb2f31c940d
stdlib@go1.24.1
1.26.10
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
stdlib@go1.24.1
1.26.10
1
jenkins/jenkins:2.580.1-jdk2542fc298cdafa
stdlib@go1.27.0
1.26.10
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
stdlib@go1.21.8
1.26.10
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
stdlib@go1.21.8
1.26.10
1
jhaals/yopass:11.17.026873480863b
stdlib@go1.20.5
1.26.10
1
jhaals/yopass:11.15.16bca8d5a4914
stdlib@go1.20.5
1.26.10
1
jhaals/yopass:14.10.06c33d9c813f7
stdlib@go1.27.1
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.