StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,728
of 18,208 indexed, latest versions
Container images
6,681
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,728 of 18,208 indexed charts deploy, on 6,681 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.106,438
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+17 more20260909-r3417
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16103
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1070
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1113
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,728 by stars
ChartLatestAffected imagesRadar Score
autheliaautheliaOfficialVerified publisher0.11.221 of 1See more

authelia authelia 0.11.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/authelia/authelia:4.39.248f428b06bb07
stdlib@go1.27.1
1.26.10

Open the chart page →

231
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
stdlib@go1.15.12
1.26.10

Open the chart page →

8,286
camel-kcamel-kVerified publisher2.11.01 of 1See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/camel-k:2.11.0d173e7efe258
stdlib@go1.26.5
1.26.10

Open the chart page →

2,020
cert-manager-webhook-ovhcert-manager-webhook-ovhVerified publisher0.9.181 of 1See more

cert-manager-webhook-ovh cert-manager-webhook-ovh 0.9.18

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/aureq/cert-manager-webhook-ovh:0.9.184c1afb84579d
stdlib@go1.27.2
1.26.10

Open the chart page →

8
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
stdlib@go1.15
1.26.10

Open the chart page →

6,864
falcosidekickfalcosecurity0.14.11 of 1See more

falcosidekick falcosecurity 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.32.01976da721518
stdlib@go1.25.1
1.26.10

Open the chart page →

2,388
flagsmithflagsmithOfficialVerified publisher0.85.01 of 4See more

flagsmith flagsmith 0.85.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamisecure/kubectl:latest26837860fa03
stdlib@go1.26.9
1.26.10

Open the chart page →

2,372
gitlab-operatorgitlabVerified publisher3.5.01 of 1See more

gitlab-operator gitlab 3.5.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:3.5.09c7727844df6
stdlib@go1.27.2
1.26.10

Open the chart page →

97
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
stdlib@go1.20.8
1.26.10

Open the chart page →

5,523
beylagrafana1.16.111 of 1See more

beyla grafana 1.16.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/beyla:3.32.03ff0f7cf2bbf
stdlib@go1.25.11
1.26.10

Open the chart page →

463
helm-dashboardkomodorVerified publisher2.0.71 of 1See more

helm-dashboard komodor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
komodorio/helm-dashboard:2.1.3258a9044e658
stdlib@go1.26.5
1.26.10

Open the chart page →

719
kube-prometheus-stackkube-prometheus-stack-oci92.11.05 of 6See more

kube-prometheus-stack kube-prometheus-stack-oci 92.11.0

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.4-distrolessae3d3add290a
stdlib@go1.26.7
1.26.10
ghcr.io/jkroepke/kube-webhook-certgen:1.11.0778d97dc3986
stdlib@go1.27.1
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
stdlib@go1.26.8
1.26.10
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

1,665
kubescape-operatorkubescape1.40.56 of 6See more

kubescape-operator kubescape 1.40.5

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubescape/http-request:v0.2.234ff502a33423
stdlib@go1.26.7
1.26.10
quay.io/kubescape/kubescape:v4.0.14418fa941ecc0
stdlib@go1.26.7
1.26.10
quay.io/kubescape/kubevuln:v0.3.4309bed2f723ea0
stdlib@go1.26.8
1.26.10
quay.io/kubescape/node-agent:v0.3.2192044ed750f5e
stdlib@go1.25.14
1.26.10
quay.io/kubescape/operator:v0.2.1721ddcd2788e1e
stdlib@go1.25.14
1.26.10
quay.io/kubescape/storage:v0.0.3486333d7845589
stdlib@go1.25.14
1.26.10

Open the chart page →

2,684
kube-vipkube-vip0.11.21 of 1See more

kube-vip kube-vip 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kube-vip/kube-vip:v1.2.4dde4c0669d90
stdlib@go1.27.1
1.26.10

Open the chart page →

269
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
stdlib@go1.20.12
1.26.10

Open the chart page →

6,461
linkerd-vizlinkerd2-edgeVerified publisher30.14.11-edge1 of 5See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
stdlib@go1.21.5
1.26.10

Open the chart page →

2,072
plane-cemakeplaneOfficialVerified publisher1.8.53 of 11See more

plane-ce makeplane 1.8.5

3 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine468d34fefd63
stdlib@go1.18.2
1.26.10
pgsty/mc:RELEASE.2026-09-16T00-00-00Zcfc83108c3ab
stdlib@go1.27.1
1.26.10
pgsty/silo:RELEASE.2026-09-16T00-00-00Z635197cb9f36
stdlib@go1.27.1
1.26.10

Open the chart page →

4,522
milvusmilvus-helm5.0.313 of 4See more

milvus milvus-helm 5.0.31

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.25-r1fededb2f2d63
stdlib@go1.24.10
1.26.10
milvusdb/milvus:v3.0.308747249b27c
stdlib@go1.26.6
1.26.10
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
stdlib@go1.23.4
1.26.10

Open the chart page →

15,565
mssqlmssqlVerified publisher1.10.31 of 1See more

mssql mssql 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
stdlib@go1.23.1
1.26.10

Open the chart page →

1,089
opa-kube-mgmtopa-kube-mgmtVerified publisher11.0.142 of 2See more

opa-kube-mgmt opa-kube-mgmt 11.0.14

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/kube-mgmt:11.0.14758ff3fb4727
stdlib@go1.25.0
1.26.10
openpolicyagent/opa:1.19.0852359995443
ca-certificates@20260413-r0
stdlib@go1.26.5
20260909-r3
1.26.10

Open the chart page →

1,271
redis-operatorot-container-kit0.27.01 of 1See more

redis-operator ot-container-kit 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/opstree/redis-operator:v0.27.025799bf10231
stdlib@go1.25.14
1.26.10

Open the chart page →

328
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.26.10

Open the chart page →

5,649
s3-proxyoxyno-zetaVerified publisher2.28.01 of 1See more

s3-proxy oxyno-zeta 2.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oxynozeta/s3-proxy:5.1.121115040e224
stdlib@go1.27.0
1.26.10

Open the chart page →

462
prefect-serverprefectVerified publisher2026.10.210150131 of 2See more

prefect-server prefect 2026.10.21015013

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prefecthq/prefect:3.9.0-python3.11e5f851d68db9
rustls-webpki@0.103.14
0.103.16

Open the chart page →

5,814
spirespiffeVerified publisher0.30.37 of 10See more

spire spiffe 0.30.3

7 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/spiffe/oidc-discovery-provider:1.15.3bb95f13c2b4e
stdlib@go1.26.6
1.26.10
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
stdlib@go1.24.0
1.26.10
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
stdlib@go1.25.3
1.26.10
ghcr.io/spiffe/spire-agent:1.15.341b0dcd8b258
stdlib@go1.26.6
1.26.10
ghcr.io/spiffe/spire-controller-manager:0.8.019e418e9d7f2
stdlib@go1.27.1
1.26.10
ghcr.io/spiffe/spire-server:1.15.34082f30d3e0d
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10

Open the chart page →

4,144
wireguardwireguardVerified publisher0.32.01 of 3See more

wireguard wireguard 0.32.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-wireguard-mgr:main0c457abd6400
stdlib@go1.27.2
1.26.10

Open the chart page →

293
altinity-clickhouse-operatoraltinity-clickhouse-operator0.27.43 of 3See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.4

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.27.4c60c872fedd8
stdlib@go1.26.8
1.26.10
altinity/metrics-exporter:0.27.4d257a72e6a6a
stdlib@go1.26.8
1.26.10
registry.k8s.io/kubectl:v1.36.36e4fce3c8365
stdlib@go1.26.5
1.26.10

Open the chart page →

953
bytebasebytebase1.1.51 of 1See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bytebase/bytebase:latest97637e4eefdc
stdlib@go1.27.1
1.26.10

Open the chart page →

470
cert-manager-csi-drivercert-managerOfficialVerified publisher0.16.03 of 3See more

cert-manager-csi-driver cert-manager 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-csi-driver:v0.16.09d13db6dc80e
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10

Open the chart page →

1,518
ansible-semaphorecloudhippieVerified publisher15.3.31 of 1See more

ansible-semaphore cloudhippie 15.3.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.17008dacd9f1ad
stdlib@go1.23.5
1.26.10

Open the chart page →

2,010
etcdcloudpirates-etcdVerified publisher0.8.91 of 1See more

etcd cloudpirates-etcd 0.8.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/etcd-development/etcd:v3.7.27c6c239825d0
stdlib@go1.26.8
1.26.10

Open the chart page →

264
rabbitmq-cluster-operatorcloudpirates-rabbitmq-cluster-operatorVerified publisher0.6.192 of 2See more

rabbitmq-cluster-operator cloudpirates-rabbitmq-cluster-operator 0.6.19

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.23.09236fb4f559b
stdlib@go1.27.1
1.26.10
ghcr.io/rabbitmq/messaging-topology-operator:1.20.3f377d3c3e221
stdlib@go1.27.1
1.26.10

Open the chart page →

470
zookeepercloudpirates-zookeeperVerified publisher0.15.21 of 1See more

zookeeper cloudpirates-zookeeper 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/zookeeper:3.9.6d0ae1665a1e8
stdlib@go1.18.1
1.26.10

Open the chart page →

3,772
vertical-pod-autoscalercluster-autoscaler0.14.04 of 4See more

vertical-pod-autoscaler cluster-autoscaler 0.14.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.8.03d94f53e4c5a
stdlib@go1.26.8
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.8.0e743e3a7e58a
stdlib@go1.26.8
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.8.01d0229e52f90
stdlib@go1.26.8
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10

Open the chart page →

2,213
codefreshcodefresh-onpremOfficialVerified publisher2.12.236 of 42See more

codefresh codefresh-onprem 2.12.23

6 of the 42 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
stdlib@go1.25.0
1.26.10
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
stdlib@go1.21.12
1.26.10
bitnamilegacy/nats:2.11.8-debian-12-r0fa0cfba6034a
stdlib@go1.24.6
1.26.10
ghcr.io/helm/chartmuseum:v0.16.648bc27743c08
stdlib@go1.25.13
1.26.10
quay.io/codefresh/dind:3.0.33feef93b16baa
stdlib@go1.26.9
1.26.10
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
stdlib@go1.23.8
1.26.10

Open the chart page →

18,964
contourcontour0.8.01 of 2See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/projectcontour/contour:v1.33.7d88264ed084a
stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64
1.26.10

Open the chart page →

2,018
couchbase-operatorcouchbaseVerified publisher2.93.02 of 2See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
couchbase/admission-controller:2.9.3bf2d2e87e45f
stdlib@go1.26.5
1.26.10
couchbase/operator:2.9.369a385b49e1f
stdlib@go1.26.5
1.26.10

Open the chart page →

1,454
dash0-operatordash0-operatorOfficialVerified publisher0.158.01 of 1See more

dash0-operator dash0-operator 0.158.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/dash0hq/operator-controller:0.158.01fd9ee8fcbba
stdlib@go1.27.2
1.26.10

Open the chart page →

14
aws-ebs-csi-driverdeliveryheroVerified publisher2.17.46 of 6See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
stdlib@go1.19.6
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
stdlib@go1.19.5
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
stdlib@go1.19.7
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
stdlib@go1.19.8
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
stdlib@go1.19.8
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
stdlib@go1.19.8
1.26.10

Open the chart page →

11,327
eck-exporterenixVerified publisher1.14.01 of 1See more

eck-exporter enix 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

351
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
stdlib@go1.18
1.26.10
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.26.10

Open the chart page →

8,994
kafkakubelauncherVerified publisher0.1.301 of 1See more

kafka kubelauncher 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned1cd80b53f4fd
stdlib@go1.26.7
1.26.10

Open the chart page →

1,383
memcachedkubelauncherVerified publisher0.1.351 of 1See more

memcached kubelauncher 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/memcacheddigest-pinned784fc5f58438
stdlib@go1.26.7
1.26.10

Open the chart page →

600
mysqlkubelauncherVerified publisher0.4.81 of 1See more

mysql kubelauncher 0.4.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mysqldigest-pinnedb9374a84635d
stdlib@go1.26.7
1.26.10

Open the chart page →

739
postgresqlkubelauncherVerified publisher0.5.11 of 1See more

postgresql kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/postgresqldigest-pinned7cc7ce4de0eb
stdlib@go1.26.7
1.26.10

Open the chart page →

697
kubernetes-replicatorkubernetes-replicator2.12.41 of 1See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.12.45dc9fc5ff59a
stdlib@go1.24.13
1.26.10

Open the chart page →

703
lakefslakefsVerified publisher1.12.451 of 1See more

lakefs lakefs 1.12.45

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
treeverse/lakefs:1.88.0237a17c6b2d8
stdlib@go1.26.8
1.26.10

Open the chart page →

574
coreneuvectorchartsVerified publisher2.11.33 of 5See more

core neuvectorcharts 2.11.3

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
neuvector/controller:5.6.3739682010f9a
stdlib@go1.27.2
1.26.10
neuvector/enforcer:5.6.33d176e9f1784
stdlib@go1.27.2
1.26.10
neuvector/scanner:6abb5b6e8be40
stdlib@go1.27.2
1.26.10

Open the chart page →

524
diunnicholaswildeVerified publisher1.0.01 of 1See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/diun:4.19.0c94e32b888e4
stdlib@go1.16.5
1.26.10

Open the chart page →

5,036
openclawopenclawVerified publisher1.115.12 of 2See more

openclaw openclaw 1.115.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
stdlib@go1.26.7
1.26.10
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.115.1bde6f8238b12
stdlib@go1.26.2
1.26.10

Open the chart page →

3,411

Container images carrying it

6,681 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/stakater/reloader:v1.4.22def2480040ad
stdlib@go1.26.8
1.26.10
4
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
stdlib@go1.22.4
1.26.10
4
quay.io/argoproj/argocd:v3.5.513db7b10db23
stdlib@go1.26.2
1.26.10
4
quay.io/ceems/ceems:v0.16.14633125698c3
stdlib@go1.26.8
1.26.10
4
quay.io/jcmoraisjr/haproxy-ingress:v0.16.242bcf39842db
stdlib@go1.26.8
1.26.10
4
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
stdlib@go1.20.8
1.26.10
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
stdlib@go1.20.8
1.26.10
4
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
stdlib@go1.20.8
1.26.10
4
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
stdlib@go1.20.8
1.26.10
4
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
stdlib@go1.19.4
1.26.10
4
quay.io/prometheus/blackbox-exporter:latest:v0.29.09613f2884689
stdlib@go1.27.1
1.26.10
4
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.10
4
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.26.10
4
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.0142a1f11df8d
stdlib@go1.26.8
1.26.10
4
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
stdlib@go1.25.9
1.26.10
4
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
stdlib@go1.16
1.26.10
4
quay.io/thanos/thanos:v0.42.4b567818fe608
stdlib@go1.26.5
1.26.10
4
quay.io/zncdatadev/sig-storage/csi-provisioner:v5.1.0672e45d6a556
stdlib@go1.22.5
1.26.10
4
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.5.0b7dead3b57cd
stdlib@go1.26.5
1.26.10
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
stdlib@go1.19.1
1.26.10
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
stdlib@go1.16.9
1.26.10
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.0c9f76a75fd00
stdlib@go1.24.4
1.26.10
4
registry.k8s.io/kubectl:v1.37.1b7cab618e281
stdlib@go1.26.8
1.26.10
4
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
stdlib@go1.24.4
1.26.10
4
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
stdlib@go1.26.4
1.26.10
4
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.10
4
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.10
4
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.26.10
4
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
stdlib@go1.21.5
1.26.10
4
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
stdlib@go1.20.3
1.26.10
4
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.10
4
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
stdlib@go1.26.3
1.26.10
4
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.10
4
registry.k8s.io/sig-storage/livenessprobe:v2.20.019f2cf2f40e1
stdlib@go1.26.6
1.26.10
4
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
stdlib@go1.24.2
1.26.10
4
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.26.10
4
alfhou/hammond:v0.0.24c85dc0293aa1
stdlib@go1.20.6
1.26.10
3
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
stdlib@go1.26.5
1.26.10
3
apache/superset:6.1.0:latest16b50bbef664
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
0.103.16
1.0.10
3
argoproj/argocd:v1.8.1830e86cacefd
stdlib@go1.14.12
1.26.10
3
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.26.10
3
bitnamilegacy/kubectl:latestcd354d5b2556
stdlib@go1.24.5
1.26.10
3
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.10
3
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
stdlib@go1.17.10
1.26.10
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
stdlib@go1.25.0
1.26.10
3
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.26.10
3
bitnami/sealed-secrets-controller:0.40.0b1ff382e9300
stdlib@go1.26.8
1.26.10
3
bitnami/valkey:latest9985c6b0fef4
stdlib@go1.26.9
1.26.10
3
caddy/ingress:v0.2.118d1366fc0e9
stdlib@go1.21.4
1.26.10
3
ciscolabs/rtsp-server:latestb59fc10bb821
stdlib@go1.19.2
1.26.10
3

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.