StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
ghostkubernetes-homelab-helm-chartsVerified publisher0.2.52 of 2See more

ghost kubernetes-homelab-helm-charts 0.2.5

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/ghost:6.71.0-alpine8e07c5ec63d9
stdlib@go1.24.6
1.26.10
library/mysql:876f0358884cb
stdlib@go1.24.6
1.26.10

Open the chart page →

2,022
k8s-debug-podkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

k8s-debug-pod kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/harish2k01/k8s-debug-pod:0.1.16e8627c23f0b
stdlib@go1.26.2
1.26.10

Open the chart page →

5,275
navidromekubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

navidrome kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
deluan/navidrome:0.64.238dc2727bfcf
stdlib@go1.27.1
1.26.10

Open the chart page →

597
pocket-idkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

pocket-id kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.18.0323e7ef5bfac
stdlib@go1.27.1
1.26.10

Open the chart page →

251
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16-alpinedeb28ee47118
stdlib@go1.24.6
1.26.10

Open the chart page →

1,998
qbittorrent-exporterkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

qbittorrent-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/martabal/qbittorrent-exporter:v2.0.1ddf2bff9b357
stdlib@go1.26.3
1.26.10

Open the chart page →

695
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.42 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/influxdb:2.9.18f106f7ff126
stdlib@go1.25.9
1.26.10
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
stdlib@go1.25.5
1.26.10

Open the chart page →

6,319
syncthingkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

syncthing kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.64d0281bdcb4e
stdlib@go1.27.1
1.26.10

Open the chart page →

317
tailscalekubernetes-homelab-helm-chartsVerified publisher0.1.51 of 2See more

tailscale kubernetes-homelab-helm-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
tailscale/tailscale:v1.104.187c55d6be56a
stdlib@go1.27.1
1.26.10

Open the chart page →

244
tor-proxykubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
peterdavehello/tor-socks-proxy:latest0cc12d36d312
stdlib@go1.26.2
1.26.10

Open the chart page →

1,927
umamikubernetes-homelab-helm-chartsVerified publisher0.2.11 of 3See more

umami kubernetes-homelab-helm-charts 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:17-alpine1bcc18d81671
stdlib@go1.24.6
1.26.10

Open the chart page →

1,008
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.2.11 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
stdlib@go1.20.5
1.26.10

Open the chart page →

6,582
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest46519c818f44
stdlib@go1.26.5-X:boringcrypto
1.26.10

Open the chart page →

39,902
kubernetes-nmstatekubernetes-nmstateVerified publisher0.87.01 of 1See more

kubernetes-nmstate kubernetes-nmstate 0.87.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/nmstate/kubernetes-nmstate-operator:v0.87.04dce694f01ea
stdlib@go1.26.0
1.26.10

Open the chart page →

908
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
stdlib@go1.19.13
1.26.10

Open the chart page →

4,497
harbor-operatorkubernetes-replicator1.6.31 of 1See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
stdlib@go1.22.2
1.26.10

Open the chart page →

1,879
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
stdlib@go1.24.4
1.26.10

Open the chart page →

58,452
kubernetes-secret-generatorkubernetes-replicator3.4.11 of 1See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-secret-generator:v3.4.1465b8e6d0462
stdlib@go1.23.1
1.26.10

Open the chart page →

1,437
servicegatewaykubernetes-replicator2.3.31 of 1See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/servicegateway:v2.3.3fa948df30d44
stdlib@go1.21.5
1.26.10

Open the chart page →

1,301
kubernetesweeklykubernetesweekly2.1.01 of 1See more

kubernetesweekly kubernetesweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
zufardhiyaulhaq/kubernetesweekly:v2.1.0a287ada277c6
stdlib@go1.16.15
1.26.10

Open the chart page →

2,561
kube-secrets-exporterkube-secrets-exporter0.1.01 of 1See more

kube-secrets-exporter kube-secrets-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/dcristobalhmad/kube-secrets-exporter:latesta9043737cb73
stdlib@go1.22.3
1.26.10

Open the chart page →

1,149
api-serverkubeshop0.11.161 of 2See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:0.11.160ad97f07a78b
stdlib@go1.17.8
1.26.10

Open the chart page →

3,462
kusk-gatewaykubeshop0.0.651 of 2See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
stdlib@go1.19.4
1.26.10

Open the chart page →

2,549
kusk-gateway-apikubeshop0.1.282 of 2See more

kusk-gateway-api kubeshop 0.1.28

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway-api:v1.5.4126c713cf7d8
stdlib@go1.18.10
1.26.10
kubeshop/kusk-gateway-api-websocket:v1.5.43b4f8345ca5c
stdlib@go1.18.10
1.26.10

Open the chart page →

4,078
testkube-apikubeshop2.1.1621 of 2See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
stdlib@go1.23.10
1.26.10

Open the chart page →

2,251
testkube-logskubeshop0.2.21 of 1See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/testkube-logs-server:latest094186b19698
stdlib@go1.24.1
1.26.10

Open the chart page →

2,084
testkube-operatorkubeshop2.1.1542 of 3See more

testkube-operator kubeshop 2.1.154

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/kube-webhook-certgen:0.0.7866827c379ae
stdlib@go1.23.6
1.26.10
kubeshop/testkube-operator:2.1.154def0d0f0d4ab
stdlib@go1.23.9
1.26.10

Open the chart page →

2,096
testkube-runnerkubeshop2.14.21 of 1See more

testkube-runner kubeshop 2.14.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.14.2a87d63dd1632
stdlib@go1.27.1
1.26.10

Open the chart page →

272
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
stdlib@go1.21.13
1.26.10

Open the chart page →

2,196
cloudnative-pgkube-site-follower0.23.01 of 1See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
stdlib@go1.23.4
1.26.10

Open the chart page →

1,493
kubeskoopkubeskoop1.0.22 of 2See more

kubeskoop kubeskoop 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeskoop/agent:v1.0.0-rc.19031d9f74832
stdlib@go1.22.1
1.26.10
kubeskoop/controller:v1.0.0-rc.137a3eb73325d
stdlib@go1.22.1
1.26.10

Open the chart page →

5,728
apisix-dashboardkubesphereVerified publisher0.3.01 of 1See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/apisix-dashboard:2.9.0c010ea7d1694
stdlib@go1.14.15
1.26.10

Open the chart page →

3,828
apisix-ingress-controllerkubesphereVerified publisher0.8.01 of 2See more

apisix-ingress-controller kubesphere 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:1.3.0412f92cde0b3
stdlib@go1.13.8
1.26.10

Open the chart page →

3,678
fluentbit-operatorkubesphereVerified publisher0.1.01 of 2See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/fluentbit-operator:v0.9.0b87db3c57cb3
stdlib@go1.13.15
1.26.10

Open the chart page →

4,169
gitlabkubesphereVerified publisher4.2.36 of 17See more

gitlab kubesphere 4.2.3

6 of the 17 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
stdlib@go1.13.8
1.26.10
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
stdlib@go1.13.9
1.26.10
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
stdlib@go1.13.9
1.26.10
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
stdlib@go1.13.9
1.26.10
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
stdlib@go1.13.9
1.26.10
mirrorgitlabcontainers/kubectl:1.13.1299931bd06b41
stdlib@go1.13.3
1.26.10

Open the chart page →

51,138
harborkubesphereVerified publisher1.9.37 of 11See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
stdlib@go1.17.7
1.26.10
goharbor/harbor-core:v2.5.386bf3031f4a7
stdlib@go1.17.7
1.26.10
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
stdlib@go1.17.7
1.26.10
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
stdlib@go1.17.7
1.26.10
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
stdlib@go1.14.15
1.26.10
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
stdlib@go1.14.15
1.26.10
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
stdlib@go1.18.3
1.26.10

Open the chart page →

26,088
pvc-autoresizerkubesphereVerified publisher0.1.01 of 1See more

pvc-autoresizer kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/pvc-autoresizer:v0.19a18a16c7b87
stdlib@go1.16.10
1.26.10

Open the chart page →

2,686
storageclass-accessorkubesphereVerified publisher0.1.01 of 1See more

storageclass-accessor kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/storageclass-accessor:v0.1.1eac8f273a9b6
stdlib@go1.16.10
1.26.10

Open the chart page →

2,633
mongodbkubesphere-carryon-experimental0.1.21 of 2See more

mongodb kubesphere-carryon-experimental 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mikefarah/yq:2.4.16fc625c402de
stdlib@go1.13.3
1.26.10

Open the chart page →

11,165
aws-efs-csi-driverkubesphere-carryon-test0.1.01 of 3See more

aws-efs-csi-driver kubesphere-carryon-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
stdlib@go1.13.4
1.26.10

Open the chart page →

3,944
aws-fsx-csi-driverkubesphere-carryon-test0.1.01 of 4See more

aws-fsx-csi-driver kubesphere-carryon-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amazon/aws-fsx-csi-driver:latestc9b14856fd22
stdlib@go1.16.8
1.26.10

Open the chart page →

2,738
ccm-qingcloudkubesphere-carryon-test0.1.01 of 1See more

ccm-qingcloud kubesphere-carryon-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
qingcloud/cloud-controller-manager:v1.4.1210f66b5df886
stdlib@go1.18.2
1.26.10

Open the chart page →

2,423
cni-hostnickubesphere-carryon-test0.1.01 of 1See more

cni-hostnic kubesphere-carryon-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
stdlib@go1.16.3
1.26.10

Open the chart page →

3,662
csi-neonsankubesphere-carryon-test1.2.86 of 6See more

csi-neonsan kubesphere-carryon-test 1.2.8

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.26.10
csiplugin/csi-neonsan:v1.2.21fa83d45417f
stdlib@go1.14.4
1.26.10
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.26.10
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.26.10
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.26.10

Open the chart page →

26,363
csi-qingcloudkubesphere-carryon-test1.4.06 of 6See more

csi-qingcloud kubesphere-carryon-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.26.10
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.26.10
csiplugin/csi-qingcloud:v1.4.00766163dc046
stdlib@go1.19.13
1.26.10
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.26.10
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.26.10

Open the chart page →

19,429
curvefs-csikubesphere-carryon-test0.1.01 of 3See more

curvefs-csi kubesphere-carryon-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.26.10

Open the chart page →

4,175
hertzbeatkubesphere-carryon-test1.4.11 of 4See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
stdlib@go1.24.6
1.26.10

Open the chart page →

8,737
mongodbkubesphere-carryon-test0.3.21 of 2See more

mongodb kubesphere-carryon-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mikefarah/yq:2.4.16fc625c402de
stdlib@go1.13.3
1.26.10

Open the chart page →

11,165
online-boutiquekubesphere-carryon-test0.1.08 of 11See more

online-boutique kubesphere-carryon-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/cartservice:v0.2.3566733b4d2d5
stdlib@go1.15.6
1.26.10
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
stdlib@go1.15.10
1.26.10
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
stdlib@go1.15.6
1.26.10
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
stdlib@go1.15.10
1.26.10
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
stdlib@go1.15.6
1.26.10
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
stdlib@go1.15.10
1.26.10
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
stdlib@go1.15.6
1.26.10
gcr.io/google-samples/microservices-demo/shippingservice:v0.2.30cb1707fc503
stdlib@go1.15.6
1.26.10

Open the chart page →

37,320
openelbkubesphere-carryon-test0.2.42 of 2See more

openelb kubesphere-carryon-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.4.4ed7311a0f9e4
stdlib@go1.15.15
1.26.10
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
stdlib@go1.16.9
1.26.10

Open the chart page →

6,715

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/ceems/ceems:v0.16.14633125698c3
stdlib@go1.26.8
1.26.10
4
quay.io/jcmoraisjr/haproxy-ingress:v0.16.242bcf39842db
stdlib@go1.26.8
1.26.10
4
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
stdlib@go1.20.8
1.26.10
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
stdlib@go1.20.8
1.26.10
4
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
stdlib@go1.20.8
1.26.10
4
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
stdlib@go1.20.8
1.26.10
4
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
stdlib@go1.19.4
1.26.10
4
quay.io/prometheus/node-exporter:v1.11.10f422f62c15f
stdlib@go1.26.1
1.26.10
4
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.26.10
4
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.0142a1f11df8d
stdlib@go1.26.8
1.26.10
4
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
stdlib@go1.25.9
1.26.10
4
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
stdlib@go1.16
1.26.10
4
quay.io/thanos/thanos:v0.42.4b567818fe608
stdlib@go1.26.5
1.26.10
4
quay.io/zncdatadev/sig-storage/csi-provisioner:v5.1.0672e45d6a556
stdlib@go1.22.5
1.26.10
4
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.5.0b7dead3b57cd
stdlib@go1.26.5
1.26.10
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
stdlib@go1.19.1
1.26.10
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
stdlib@go1.16.9
1.26.10
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.0c9f76a75fd00
stdlib@go1.24.4
1.26.10
4
registry.k8s.io/kubectl:v1.37.1b7cab618e281
stdlib@go1.26.8
1.26.10
4
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
stdlib@go1.24.4
1.26.10
4
registry.k8s.io/metrics-server/metrics-server:v0.9.0d9862115e7c7
stdlib@go1.26.4
1.26.10
4
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.10
4
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.10
4
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.26.10
4
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.10.1f25af73ee708
stdlib@go1.21.5
1.26.10
4
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
stdlib@go1.20.3
1.26.10
4
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.26.10
4
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
stdlib@go1.26.3
1.26.10
4
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.10
4
registry.k8s.io/sig-storage/livenessprobe:v2.20.019f2cf2f40e1
stdlib@go1.26.6
1.26.10
4
registry.k8s.io/sig-storage/livenessprobe:v2.16.088092d100909
stdlib@go1.24.2
1.26.10
4
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.26.10
4
alfhou/hammond:v0.0.24c85dc0293aa1
stdlib@go1.20.6
1.26.10
3
alpine/git:latest03228d7ded48
stdlib@go1.26.8
1.26.10
3
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
stdlib@go1.26.5
1.26.10
3
apache/superset:6.1.0:latest16b50bbef664
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
0.103.16
1.0.10
3
argoproj/argocd:v1.8.1830e86cacefd
stdlib@go1.14.12
1.26.10
3
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.26.10
3
bitnamilegacy/kubectl:latestcd354d5b2556
stdlib@go1.24.5
1.26.10
3
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.10
3
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
stdlib@go1.17.10
1.26.10
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
stdlib@go1.25.0
1.26.10
3
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.26.10
3
bitnami/nginx:latestb8d42f076789
stdlib@go1.26.8
1.26.10
3
bitnami/redis:latestf4797b37502e
stdlib@go1.26.8
1.26.10
3
bitnami/sealed-secrets-controller:0.40.0b1ff382e9300
stdlib@go1.26.8
1.26.10
3
bitnami/valkey:latest9985c6b0fef4
stdlib@go1.26.9
1.26.10
3
caddy/ingress:v0.2.118d1366fc0e9
stdlib@go1.21.4
1.26.10
3
ciscolabs/rtsp-server:latestb59fc10bb821
stdlib@go1.19.2
1.26.10
3
cloudflare/cloudflared:2026.3.06b599ca3e974
stdlib@go1.24.13
1.26.10
3

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.