CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,322; of 18,232 indexed, latest versions
Container images: 6,212; deployed by those charts
Fix available: 6 of 7; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,322 of 18,232 indexed charts deploy, on 6,212 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+209 more	1.26.10	6,106
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more	20260909-r3	118
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	91
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	66
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+2 more	0.26.11	9
golang-1.19deb	1.19.8-2	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r5	1

OSV records: CGA-32jh-59ph-xj58 CGA-pj7v-5f5f-w56q DEBIAN-CVE-2026-111943 GO-2026-6809 RUSTSEC-2026-0381 RUSTSEC-2026-0382 RUSTSEC-2026-0383
Also known as: CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53
Trending: Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,322 by stars

Chart

Latest

Affected images

Radar Score

msmmedia-streaming-mesh

0.1.17

5 of 6 See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook :latest	3e811d67189c	stdlib@go1.24.0	1.26.10
ghcr.io/media-streaming-mesh/msm-cni :latest	fe0b89b818a6	stdlib@go1.24.0	1.26.10
ghcr.io/media-streaming-mesh/msm-cp :latest	8cb08fc7010b	stdlib@go1.23.1	1.26.10
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	stdlib@go1.23.1	1.26.10
ghcr.io/media-streaming-mesh/msm-nc :latest	296fe4970e38	stdlib@go1.22.3	1.26.10

Open the chart page →

15,653

msm-rtspmedia-streaming-mesh

0.0.2

1 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	stdlib@go1.19.2	1.26.10

Open the chart page →

20,906

rtspmedia-streaming-mesh

0.0.14

1 of 2 See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	stdlib@go1.19.2	1.26.10

Open the chart page →

20,906

mediawiki-backupmediawiki-backup

0.2.1

1 of 1 See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	stdlib@go1.19.5	1.26.10

Open the chart page →

2,810

medik8smedik8s

0.2.0

3 of 3 See more

medik8s medik8s 0.2.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/medik8s/fence-agents-remediation-operator :v0.8.0	fab0089a9d65	stdlib@go1.26.3	1.26.10
quay.io/medik8s/node-healthcheck-operator :v0.12.0	5b048ad5d2b8	stdlib@go1.25.9	1.26.10
quay.io/medik8s/self-node-remediation-operator :v0.13.0	9ad002dca9ea	stdlib@go1.25.9	1.26.10

Open the chart page →

3,745

memgptmemgpt

0.3.19

1 of 2 See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ankane/pgvector :v0.5.1	d3a9d8ac27bb	stdlib@go1.18.2	1.26.10

Open the chart page →

6,938

memgraph-mcpmemgraph

1.0.0

1 of 1 See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
memgraph/mcp-memgraph :0.1.13	ecdf7faea3f7	rustls-webpki@0.103.13 webpki-root-certs@1.0.7	0.103.16 1.0.10

Open the chart page →

2,145

memo-componentmemo-component

1.0.0

1 of 3 See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	stdlib@go1.13.10	1.26.10

Open the chart page →

9,595

merge-pilotmerge-pilot

1.6.0

1 of 2 See more

merge-pilot merge-pilot 1.6.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jhonbrownn/merge-pilot-backend :1.6.0	68d6223ea366	stdlib@go1.25.7	1.26.10

Open the chart page →

3,314

dex-k8s-authenticatormesosphere

1.4.3

1 of 1 See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mesosphere/dex-k8s-authenticator :v1.4.1-d2iq	f3d9982cc2fd	stdlib@go1.23.0	1.26.10

Open the chart page →

1,633

docker-registrymesosphere

2.3.5

1 of 1 See more

docker-registry mesosphere 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/registry :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.26.10

Open the chart page →

1,102

flaggermesosphere

0.21.0

2 of 2 See more

flagger mesosphere 0.21.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
weaveworks/flagger :0.19.0	a9c2e9df4227	stdlib@go1.13.1	1.26.10
weaveworks/flagger-loadtester :0.9.0	3cdac6928a63	stdlib@go1.13.1	1.26.10

Open the chart page →

8,745

gatekeepermesosphere

0.6.11

1 of 2 See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	stdlib@go1.16.2	1.26.10

Open the chart page →

4,665

istiomesosphere

1.25.1

1 of 2 See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	stdlib@go1.21.7	1.26.10

Open the chart page →

6,424

istio-helm-cnimesosphere

1.25.1

1 of 1 See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
istio/install-cni :1.29.0	ce27c9ce43c8	stdlib@go1.25.7	1.26.10

Open the chart page →

3,316

istio-helm-istiodmesosphere

1.25.1

2 of 2 See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
istio/pilot :1.29.0	325156535773	stdlib@go1.25.7	1.26.10
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	stdlib@go1.25.5	1.26.10

Open the chart page →

5,265

kafka-operatormesosphere

0.20.2

1 of 2 See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	stdlib@go1.17.6	1.26.10

Open the chart page →

3,024

karmamesosphere

1.3.0

1 of 1 See more

karma mesosphere 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
lmierzwa/karma :v0.50	3751e5eed656	stdlib@go1.13.4	1.26.10

Open the chart page →

3,519

kubeaddons-catalogmesosphere

0.1.16

1 of 2 See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	stdlib@go1.15.2	1.26.10

Open the chart page →

13,861

kubefedmesosphere

0.5.2

1 of 1 See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mesosphere/kubefed :proxyurl	4fd8889195fe	stdlib@go1.15.3	1.26.10

Open the chart page →

4,417

kube-oidc-proxymesosphere

0.3.4

1 of 1 See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/jetstack/kube-oidc-proxy :v0.3.0	e045b26eb6df	stdlib@go1.14.1	1.26.10

Open the chart page →

4,480

kube-prometheus-stackmesosphere

87.16.0

6 of 7 See more

kube-prometheus-stack mesosphere 87.16.0

6 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	stdlib@go1.21.7	1.26.10
grafana/grafana :13.1.0	121a7a9ece6d	stdlib@go1.25.7	1.26.10
ghcr.io/jkroepke/kube-webhook-certgen :1.8.4	76a2170cd0c9	stdlib@go1.26.4	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.92.1	7d9247d23514	stdlib@go1.26.4	1.26.10
quay.io/prometheus/node-exporter :v1.12.0-distroless	843ed23bb564	stdlib@go1.26.5	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	stdlib@go1.26.4	1.26.10

Open the chart page →

10,440

kudomesosphere

0.1.4

1 of 1 See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
kudobuilder/controller :v0.9.0	69072d979708	stdlib@go1.13	1.26.10

Open the chart page →

7,281

local-path-provisionermesosphere

0.0.22

1 of 1 See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	stdlib@go1.16.15	1.26.10

Open the chart page →

3,428

nfs-server-provisionermesosphere

0.6.1

1 of 1 See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	stdlib@go1.13.4	1.26.10

Open the chart page →

4,145

nvidiamesosphere

0.4.4

1 of 2 See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
nvidia/dcgm-exporter :2.2.9-2.4.1-ubuntu20.04	91b20b66d1cd	stdlib@go1.14.2	1.26.10

Open the chart page →

12,270

prometheus-operatormesosphere

12.11.13

5 of 8 See more

prometheus-operator mesosphere 12.11.13

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/grafana :12.3.3	9e1e77ade304	stdlib@go1.25.7	1.26.10
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	stdlib@go1.15.3	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	stdlib@go1.14.12	1.26.10
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	stdlib@go1.14.4	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	stdlib@go1.25.5	1.26.10

Open the chart page →

16,811

registry-syncermesosphere

0.1.0

1 of 1 See more

registry-syncer mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
regclient/regsync :v0.8.3	3d8d8e40afb7	stdlib@go1.24.2	1.26.10

Open the chart page →

787

traefik2mesosphere

9.18.0

1 of 1 See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/traefik :2.4.8	eda951fd29a8	stdlib@go1.16.2	1.26.10

Open the chart page →

4,686

azuredisk-csi-drivermesosphere-stable

0.8.1

6 of 6 See more

azuredisk-csi-driver mesosphere-stable 0.8.1

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	stdlib@go1.15.4	1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	stdlib@go1.14	1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar :v2.0.1	fc5d14e9f26f	stdlib@go1.15	1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	stdlib@go1.15.2	1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	stdlib@go1.15.2	1.26.10
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe :v2.2.0	b7d82802cca8	stdlib@go1.15.6	1.26.10

Open the chart page →

22,165

cert-manager-setupmesosphere-stable

0.2.10

4 of 5 See more

cert-manager-setup mesosphere-stable 0.2.10

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.11.0	5c3eb25b0854	stdlib@go1.19.5	1.26.10
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	stdlib@go1.19.5	1.26.10
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	stdlib@go1.19.5	1.26.10
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	stdlib@go1.19.5	1.26.10

Open the chart page →

11,338

cosimesosphere-stable

0.2.2

1 of 1 See more

cosi mesosphere-stable 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller :v0.2.2	3c708e508197	stdlib@go1.24.11	1.26.10

Open the chart page →

765

dexmesosphere-stable

2.14.2

4 of 5 See more

dex mesosphere-stable 2.14.2

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	stdlib@go1.21.7	1.26.10
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	stdlib@go1.20.4	1.26.10
mesosphere/dex-controller :v0.16.1	1b2dd9c0b0fc	ca-certificates@20240705-r0 stdlib@go1.22.7	20260909-r3 1.26.10
quay.io/brancz/kube-rbac-proxy :v0.21.1	8ee55a15d8b0	stdlib@go1.25.8	1.26.10

Open the chart page →

23,045

gatekeepermesosphere-stable

0.6.11

1 of 2 See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	stdlib@go1.16.2	1.26.10

Open the chart page →

4,665

gcpdisk-csi-drivermesosphere-stable

0.7.3

1 of 7 See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	stdlib@go1.13.3	1.26.10

Open the chart page →

5,435

istiomesosphere-stable

1.25.1

1 of 2 See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	stdlib@go1.21.7	1.26.10

Open the chart page →

6,424

istio-helm-cnimesosphere-stable

1.23.6

1 of 1 See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
istio/install-cni :1.23.6	ab34c4740f44	stdlib@go1.23.7	1.26.10

Open the chart page →

4,208

istio-helm-istiodmesosphere-stable

1.23.6

2 of 2 See more

istio-helm-istiod mesosphere-stable 1.23.6

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
istio/pilot :1.23.6	9c3d6a218181	stdlib@go1.23.7	1.26.10
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	stdlib@go1.25.5	1.26.10

Open the chart page →

6,233

kafka-operatormesosphere-stable

0.25.1

1 of 2 See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	stdlib@go1.19.11	1.26.10

Open the chart page →

1,994

karmamesosphere-stable

2.0.3

1 of 1 See more

karma mesosphere-stable 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
lmierzwa/karma :v0.70	d417abe7ddb5	stdlib@go1.15.2	1.26.10

Open the chart page →

3,306

knativemesosphere-stable

1.10.8

7 of 7 See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.10.2	c2994c2b6c2c	stdlib@go1.20.4	1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.10.2	8319aa662b49	stdlib@go1.20.4	1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa :v1.10.2	eb612b929eaa	stdlib@go1.20.4	1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	stdlib@go1.20.4	1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.10.2	f66c41ad7a73	stdlib@go1.20.4	1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.10.2	7368aaddf2be	stdlib@go1.20.4	1.26.10
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.10.2	4305209ce498	stdlib@go1.20.4	1.26.10

Open the chart page →

12,674

kommandermesosphere-stable

0.39.2

17 of 29 See more

kommander mesosphere-stable 0.39.2

17 of the 29 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	stdlib@go1.13.4	1.26.10
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.10
mesosphere/karma :v0.55-d2iq-proxy	4693bb4e0814	stdlib@go1.13.7	1.26.10
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	stdlib@go1.14.5	1.26.10
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	stdlib@go1.14.5	1.26.10
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	stdlib@go1.14.5	1.26.10
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	stdlib@go1.14.5	1.26.10
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	stdlib@go1.14.5	1.26.10
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	stdlib@go1.14.5	1.26.10
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	stdlib@go1.13.8	1.26.10
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	stdlib@go1.15.2	1.26.10
prom/prometheus :v2.19.2	cd134bd4fca0	stdlib@go1.14.4	1.26.10
thanosio/thanos :v0.19.0	88276fcd1491	stdlib@go1.15.10	1.26.10
thanosio/thanos :v0.15.0	b12d5c31bf5a	stdlib@go1.14.2	1.26.10
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	stdlib@go1.15.3	1.26.10
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	stdlib@go1.14.4	1.26.10
quay.io/thanos/thanos :v0.17.1	e362f02ed304	stdlib@go1.15	1.26.10

Open the chart page →

82,678

kube-prometheus-stackmesosphere-stable

75.9.1

6 of 7 See more

kube-prometheus-stack mesosphere-stable 75.9.1

6 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	stdlib@go1.21.7	1.26.10
grafana/grafana :12.0.2	b5b59bfc7561	stdlib@go1.24.4	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.83.0	b6a89b8ec08f	stdlib@go1.24.3	1.26.10
quay.io/prometheus/node-exporter :v1.9.1	d00a542e409e	stdlib@go1.23.7	1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	stdlib@go1.24.4	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	stdlib@go1.24.4	1.26.10

Open the chart page →

14,679

logging-operatormesosphere-stable

6.7.0

1 of 1 See more

logging-operator mesosphere-stable 6.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/logging-operator :6.7.0	df10e783095e	stdlib@go1.26.3	1.26.10

Open the chart page →

434

multusmesosphere-stable

0.1.1

1 of 1 See more

multus mesosphere-stable 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.2.4-thick	3c20900b5381	stdlib@go1.24.13	1.26.10

Open the chart page →

2,454

opsportalmesosphere-stable

0.9.5

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	stdlib@go1.13.7	1.26.10

Open the chart page →

8,821

valkeymesosphere-stable

3.0.22

1 of 1 See more

valkey mesosphere-stable 3.0.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/valkey :8.1.3-debian-12-r1	a185655855b3	stdlib@go1.24.4	1.26.10

Open the chart page →

3,240

veleromesosphere-stable

3.2.5

1 of 1 See more

velero mesosphere-stable 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.26.4	a0a972324d93	stdlib@go1.19.8	1.26.10

Open the chart page →

2,855

metacontroller-helmmetacontroller

4.17.6

1 of 1 See more

metacontroller-helm metacontroller 4.17.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/metacontroller/metacontroller :v4.17.6	1c083f758713	stdlib@go1.27.2	1.26.10

Open the chart page →

cortexmetakube

0.6.0

1 of 2 See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	stdlib@go1.16.3	1.26.10

Open the chart page →

5,870

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/thanos/thanos :v0.42.4	b567818fe608	stdlib@go1.26.5	1.26.10	4
quay.io/zncdatadev/sig-storage/csi-provisioner :v5.1.0	672e45d6a556	stdlib@go1.22.5	1.26.10	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	stdlib@go1.19.1	1.26.10	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	stdlib@go1.16.9	1.26.10	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.6.0	c9f76a75fd00	stdlib@go1.24.4	1.26.10	4
registry.k8s.io/kubectl :v1.37.1	b7cab618e281	stdlib@go1.26.8	1.26.10	4
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.16.0	e750cd4b43f7	stdlib@go1.24.4	1.26.10	4
registry.k8s.io/metrics-server/metrics-server :v0.9.0	d9862115e7c7	stdlib@go1.26.4	1.26.10	4
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	stdlib@go1.22.2	1.26.10	4
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	stdlib@go1.23.1	1.26.10	4
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.26.10	4
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	stdlib@go1.21.5	1.26.10	4
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	stdlib@go1.20.3	1.26.10	4
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.26.10	4
registry.k8s.io/sig-storage/csi-resizer :v2.2.0	a2d40c1c3ccb	stdlib@go1.26.3	1.26.10	4
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	stdlib@go1.23.1	1.26.10	4
registry.k8s.io/sig-storage/livenessprobe :v2.20.0	19f2cf2f40e1	stdlib@go1.26.6	1.26.10	4
registry.k8s.io/sig-storage/livenessprobe :v2.16.0	88092d100909	stdlib@go1.24.2	1.26.10	4
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	stdlib@go1.23.1	1.26.10	4
alfhou/hammond :v0.0.24	c85dc0293aa1	stdlib@go1.20.6	1.26.10	3
alpine/git :latest	03228d7ded48	stdlib@go1.26.8	1.26.10	3
apache/apisix-ingress-controller :2.2.0	5c5efa4c7f2a	stdlib@go1.26.5	1.26.10	3
apache/superset :6.1.0 :latest	16b50bbef664	rustls-webpki@0.103.13 webpki-root-certs@1.0.9	0.103.16 1.0.10	3
argoproj/argocd :v1.8.1	830e86cacefd	stdlib@go1.14.12	1.26.10	3
bitnamilegacy/etcd :latest	99b408c15272	stdlib@go1.23.10	1.26.10	3
bitnamilegacy/kubectl :latest	cd354d5b2556	stdlib@go1.24.5	1.26.10	3
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	stdlib@go1.25.0	1.26.10	3
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	stdlib@go1.17.10	1.26.10	3
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	stdlib@go1.25.0	1.26.10	3
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.26.10	3
bitnami/nginx :latest	b8d42f076789	stdlib@go1.26.8	1.26.10	3
bitnami/redis :latest	f4797b37502e	stdlib@go1.26.8	1.26.10	3
bitnami/sealed-secrets-controller :0.40.0	b1ff382e9300	stdlib@go1.26.8	1.26.10	3
bitnami/valkey :latest	9985c6b0fef4	stdlib@go1.26.9	1.26.10	3
caddy/ingress :v0.2.1	18d1366fc0e9	stdlib@go1.21.4	1.26.10	3
ciscolabs/rtsp-server :latest	b59fc10bb821	stdlib@go1.19.2	1.26.10	3
cloudflare/cloudflared :2026.3.0	6b599ca3e974	stdlib@go1.24.13	1.26.10	3
cloudflare/cloudflared :2026.10.1 :latest	a15a3b50b8da	stdlib@go1.27.2	1.26.10	3
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	stdlib@go1.25.7	1.26.10	3
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	stdlib@go1.19.13	1.26.10	3
datawire/aes :1.14.4	8588eafe6862	stdlib@go1.15	1.26.10	3
decisionrules/server :latest	6f6d024a87b8	stdlib@go1.26.9	1.26.10	3
derailed/popeye :v0.22.1	8e68e22c7663	stdlib@go1.23.5	1.26.10	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	stdlib@go1.17.3	1.26.10	3
dnationcloud/kubernetes-jsonnet-translator :2.0.1	78fed4f3c130	stdlib@go1.26.5	1.26.10	3
envoyproxy/gateway :v1.7.5	156b7d32c73b	stdlib@go1.26.5	1.26.10	3
ethpandaops/tracoor :latest	4c4b4d24bebb	stdlib@go1.26.1	1.26.10	3
freikin/dawarich :1.16.0	b533e6eac446	stdlib@go1.24.4	1.26.10	3
grafana/grafana :8.2.5	00568d89c4f8	stdlib@go1.17	1.26.10	3
grafana/grafana :13.1.0	121a7a9ece6d	stdlib@go1.25.7	1.26.10	3