StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0382RUSTSEC-2026-0383CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943RUSTSEC-2026-0381
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score
todo-appjunktext-direct1.1.41 of 1See more

todo-app junktext-direct 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.5a70936c04aed
stdlib@go1.18.7
1.26.10

Open the chart page →

4,457
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.3211 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

11 of the 17 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
stdlib@go1.25.7
1.26.10
grafana/grafana:12.3.12175aaa91c96
stdlib@go1.25.5
1.26.10
grafana/loki:3.6.73c8fd3570dd9
stdlib@go1.24.13
1.26.10
grafana/loki-canary:3.6.70dac7d5cb383
stdlib@go1.24.13
1.26.10
grafana/tempo:2.9.065a578975943
stdlib@go1.25.1
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0cb4ac6a56555
stdlib@go1.25.6
1.26.10
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
stdlib@go1.25.7
1.26.10
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
quay.io/prometheus/prometheus:v3.10.07571a304e67f
stdlib@go1.26.0
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

19,098
stuck-pod-cleanerk8s-stuck-pod-cleanerVerified publisher0.1.01 of 1See more

stuck-pod-cleaner k8s-stuck-pod-cleaner 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/kubectl:latest599e67d36ff5
stdlib@go1.26.9
1.26.10

Open the chart page →

100
kafka-canarykafka-canaryVerified publisher0.9.01 of 1See more

kafka-canary kafka-canary 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/taekjaskyli/kafka-canary:0.9.016b91402a5ca
stdlib@go1.26.8
1.26.10

Open the chart page →

248
karpenterkarpenter-provider-gcpVerified publisher0.7.01 of 1See more

karpenter karpenter-provider-gcp 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudpilotai/gcp/karpenter:v0.7.01a907c29920f
ca-certificates@20260909-r2
stdlib@go1.27.0
20260909-r3
1.26.10

Open the chart page →

242
kconmon-ngkconmon-ngVerified publisher2.5.12 of 2See more

kconmon-ng kconmon-ng 2.5.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/esdmitrii/kconmon-ng-agent:2.5.10cbfd4f7a9f5
stdlib@go1.27.1
1.26.10
ghcr.io/esdmitrii/kconmon-ng-controller:2.5.1ae1eda37ec0f
stdlib@go1.27.1
1.26.10

Open the chart page →

456
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
stdlib@go1.24.7
1.26.10

Open the chart page →

9,142
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
stdlib@go1.24.4
1.26.10

Open the chart page →

6,818
keda-add-ons-httpkedacore0.16.03 of 3See more

keda-add-ons-http kedacore 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kedacore/http-add-on-interceptor:0.16.03a9a454b949e
stdlib@go1.27.1
1.26.10
ghcr.io/kedacore/http-add-on-operator:0.16.02ae0076d549f
stdlib@go1.27.1
1.26.10
ghcr.io/kedacore/http-add-on-scaler:0.16.0db5223b1a375
stdlib@go1.27.1
1.26.10

Open the chart page →

765
mongodb-operatorkeiailabVerified publisher1.16.101 of 1See more

mongodb-operator keiailab 1.16.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keiailab/mongodb-operator:v1.16.10fd3625695d18
stdlib@go1.26.8
1.26.10

Open the chart page →

232
valkey-operatorkeiailabVerified publisher1.5.41 of 1See more

valkey-operator keiailab 1.5.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keiailab/valkey-operator:1.5.42fd8f2768634
stdlib@go1.26.8
1.26.10

Open the chart page →

232
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
stdlib@go1.20.7
1.26.10

Open the chart page →

6,387
keycloakkeycloak1.14.11 of 2See more

keycloak keycloak 1.14.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/docker/keycloak-ppolicy:0.6.09895d6915075
ca-certificates@20260413-r0
stdlib@go1.25.7
20260909-r3
1.26.10

Open the chart page →

690
keycloak-client-operatorkeycloak-client-operator0.9.11 of 1See more

keycloak-client-operator keycloak-client-operator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
stdlib@go1.24.5
1.26.10

Open the chart page →

1,039
keydbkeydb-helmVerified publisher1.0.61 of 1See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
stdlib@go1.16.7
1.26.10

Open the chart page →

6,592
giteakeyporttech0.2.102 of 4See more

gitea keyporttech 0.2.10

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
stdlib@go1.14.8
1.26.10
library/postgres:115d2aa4a7b5f9
stdlib@go1.16.7
1.26.10

Open the chart page →

7,742
kikplatekikplateVerified publisher0.22.02 of 3See more

kikplate kikplate 0.22.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
ghcr.io/kikplate/kikplate-api:main2fbce0601a3c
stdlib@go1.25.11
1.26.10

Open the chart page →

3,483
kitekite0.16.01 of 1See more

kite kite 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kite-org/kite:v0.16.0951616cbaf9c
stdlib@go1.26.8
1.26.10

Open the chart page →

276
netbirdkitstream-netbird0.7.21 of 3See more

netbird kitstream-netbird 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
netbirdio/netbird-server:0.81.3541ecef7e98a
stdlib@go1.26.7
1.26.10

Open the chart page →

1,128
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:latest0e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

4,874
kodboxkodboxVerified publisher0.10.22 of 5See more

kodbox kodbox 0.10.2

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:12.3.399c125f103f5
stdlib@go1.24.6
1.26.10
nextcloud/aio-imaginary:20260929_1054350e32abf8b219
stdlib@go1.27.1
1.26.10

Open the chart page →

2,695
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
stdlib@go1.23.5
1.26.10
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
stdlib@go1.23.0
1.26.10

Open the chart page →

13,372
komkomVerified publisher0.3.01 of 1See more

kom kom 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kkb0318/kom:0.3.04e77eff2d906
stdlib@go1.24.4
1.26.10

Open the chart page →

919
kronos-corekronos-coreVerified publisher0.4.11 of 2See more

kronos-core kronos-core 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kronosorg/kronos-core:v0.4.0301da21c59a5
stdlib@go1.21.10
1.26.10

Open the chart page →

1,149
kubeadaptkubeadaptVerified publisher1.0.81 of 1See more

kubeadapt kubeadapt 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-agent:v3.0.1d75b6da94913
stdlib@go1.26.2
1.26.10

Open the chart page →

619
kube-arguskube-argusOfficialVerified publisher0.0.1-s2z1 of 1See more

kube-argus kube-argus 0.0.1-s2z

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/manishchaudhary101/kube-argus:latest8e3869d31c70
stdlib@go1.26.5
1.26.10

Open the chart page →

815
cert-managerkubeblocksVerified publisher1.17.24 of 4See more

cert-manager kubeblocks 1.17.2

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.17.2ec56edb1161d
stdlib@go1.23.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
stdlib@go1.23.8
1.26.10
quay.io/jetstack/cert-manager-startupapicheck:v1.17.2e18989b4f912
stdlib@go1.23.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
stdlib@go1.23.8
1.26.10

Open the chart page →

5,138
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.009b7e8705673
stdlib@go1.20.6
1.26.10

Open the chart page →

22,981
ks-corekubeblocksVerified publisher1.1.32 of 5See more

ks-core kubeblocks 1.1.3

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesphere/ks-extensions-museum:latest29681958f220
stdlib@go1.20.12
1.26.10
kubesphere/kubectl:v1.27.1649b445b1b732
stdlib@go1.18.10
1.26.10

Open the chart page →

6,445
kubeboltkubeboltVerified publisher2.4.12 of 3See more

kubebolt kubebolt 2.4.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.154.0-scratch03d6215d8d86
stdlib@go1.27.2
1.26.10
ghcr.io/clm-cloud-solutions/kubebolt/api:2.4.19a93f8cce9cc
stdlib@go1.26.9
1.26.10

Open the chart page →

350
kubebrowsekubebrowse1.7.02 of 5See more

kubebrowse kubebrowse 1.7.0

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
stdlib@go1.24.3
1.26.10
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
stdlib@go1.25.0
1.26.10

Open the chart page →

4,114
elastikubeelastiOfficialVerified publisher0.1.302 of 2See more

elasti kubeelasti 0.1.30

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeelasti/elasti-operator:0.1.303b2a972a0284
stdlib@go1.26.5
1.26.10
ghcr.io/kubeelasti/elasti-resolver:0.1.30db3cd41d28ed
stdlib@go1.26.5
1.26.10

Open the chart page →

692
kubefedkubefed0.10.01 of 2See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
stdlib@go1.16.6
1.26.10

Open the chart page →

3,637
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
stdlib@go1.24.10
1.26.10

Open the chart page →

4,095
kubegems-localkubegemsOfficial1.24.102 of 2See more

kubegems-local kubegems 1.24.10

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubegems/kubectl:latestc3b4be9a54f5
stdlib@go1.20
1.26.10
kubegems/kubegems:v1.24.10a730bcf9322a
stdlib@go1.24.10
1.26.10

Open the chart page →

7,628
monitoringkubegems44.3.41 of 1See more

monitoring kubegems 44.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubegems/alertproxy:v0.4.2eaee03055329
stdlib@go1.18.10
1.26.10

Open the chart page →

1,425
kube-monkeykubemonkey1.11.01 of 1See more

kube-monkey kubemonkey 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ayushsobti/kube-monkey:v0.7.0fc181870c60f
stdlib@go1.26.8
1.26.10

Open the chart page →

239
kubenursekubenurseVerified publisher1.15.41 of 1See more

kubenurse kubenurse 1.15.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
postfinance/kubenurse:v1.15.4f76ce08ab7b4
ca-certificates@20260413-r1
stdlib@go1.26.6
20260909-r3
1.26.10

Open the chart page →

243
kubernetes-events-exporterkubernetes-events-exporter0.1.21 of 1See more

kubernetes-events-exporter kubernetes-events-exporter 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ownkube/kubernetes-events-exporter:0.1.2bcb7f0f733f5
stdlib@go1.26.2
1.26.10

Open the chart page →

906
owncloudkubernetes-homelab-helm-chartsVerified publisher0.3.02 of 3See more

owncloud kubernetes-homelab-helm-charts 0.3.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:10.110d0945c57f75
stdlib@go1.24.6
1.26.10
owncloud/server:10.16.6879638cd818b
stdlib@go1.26.3
1.26.10

Open the chart page →

8,660
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
stdlib@go1.19.4
1.26.10

Open the chart page →

4,278
kubescoutkubescouteVerified publisher0.1.11 of 1See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
stdlib@go1.25.5
1.26.10

Open the chart page →

1,251
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
stdlib@go1.24.4
1.26.10

Open the chart page →

5,459
kubeseckubesecVerified publisher1.1.01 of 1See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubesec/kubesec:latest6735b7f3d1c8
stdlib@go1.27.1
1.26.10

Open the chart page →

355
kube-site-followerkube-site-follower0.1.141 of 2See more

kube-site-follower kube-site-follower 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
stdlib@go1.23.4
1.26.10

Open the chart page →

1,493
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
stdlib@go1.18.10
1.26.10

Open the chart page →

3,551
mesherykubesphere-stable0.5.012 of 13See more

meshery kubesphere-stable 0.5.0

12 of the 13 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
stdlib@go1.23.9
1.26.10
layer5/meshery-app-mesh:stable-latest77d59943b3d6
stdlib@go1.19.5
1.26.10
layer5/meshery-consul:stable-latest25a4cc38abcd
stdlib@go1.19.13
1.26.10
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
stdlib@go1.13.1
1.26.10
layer5/meshery-istio:stable-latestfde47c141ec6
stdlib@go1.23.9
1.26.10
layer5/meshery-kuma:stable-latest9d25f029a8a2
stdlib@go1.23.4
1.26.10
layer5/meshery-linkerd:stable-latestb99c73bac1f5
stdlib@go1.23.6
1.26.10
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
stdlib@go1.19.11
1.26.10
layer5/meshery-nsm:stable-latestebd6a8faf21f
stdlib@go1.15.12
1.26.10
layer5/meshery-operator:stable-latest6f58a28fe422
stdlib@go1.23.9
1.26.10
layer5/meshery-osm:stable-latestec898e5786c6
stdlib@go1.19.8
1.26.10
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
stdlib@go1.19.11
1.26.10

Open the chart page →

35,813
aws-efs-csi-driverkubesphere-testVerified publisher0.1.01 of 3See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
stdlib@go1.13.4
1.26.10

Open the chart page →

3,944
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:80f51e63e537a
stdlib@go1.24.6
1.26.10

Open the chart page →

8,729
kube-state-metricskubestar-state-metricsVerified publisher0.1.101 of 1See more

kube-state-metrics kubestar-state-metrics 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.6.0bdab4e49d71d
stdlib@go1.18.5
1.26.10

Open the chart page →

2,512

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
microslac/kafka-connect:latesta90091a1f524
stdlib@go1.20.4
1.26.10
1
middlewareeng/middleware:0.3.1747d880812f1
stdlib@go1.17.13
1.26.10
1
mikefarah/yq:4.45.12c100efaca06
stdlib@go1.23.4
1.26.10
1
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
stdlib@go1.23.4
1.26.10
1
mikejoh/imagine:0.1.078737d7345f9
stdlib@go1.23.3
1.26.10
1
milvusdb/etcd:3.5.5-r2102aac62827b
stdlib@go1.18.2
1.26.10
1
milvusdb/etcd:3.5.25-r1fededb2f2d63
stdlib@go1.24.10
1.26.10
1
milvusdb/milvus:v2.2.13a3a55e1c1497
stdlib@go1.18.3
1.26.10
1
milvusdb/milvus-config-tool:v0.1.12212dfb61401
stdlib@go1.16.15
1.26.10
1
milvusdb/milvus-operator:v1.3.12d5e5d9efd4d5
stdlib@go1.26.9
1.26.10
1
mindsdb/mindsdb:latest163011c09299
stdlib@go1.20.13
1.26.10
1
miniflux/miniflux:2.3.349d7b6098761
stdlib@go1.26.5
1.26.10
1
miniflux/miniflux:2.2.18a3ca6bbc1f74
stdlib@go1.26.1
1.26.10
1
miniflux/miniflux:2.0.36e2fb990dae74
stdlib@go1.17.8
1.26.10
1
minio/operator:v5.0.9170b154d2c61
stdlib@go1.21.1
1.26.10
1
minio/operator:v4.1.02adc5be088f5
stdlib@go1.16.3
1.26.10
1
mintel/gcp-quota-exporter:v0.3.20e0707b7732b
stdlib@go1.13.12
1.26.10
1
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
stdlib@go1.13.9
1.26.10
1
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
stdlib@go1.13.9
1.26.10
1
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
stdlib@go1.13.9
1.26.10
1
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
stdlib@go1.13.9
1.26.10
1
mirrorgitlabcontainers/kubectl:1.13.1299931bd06b41
stdlib@go1.13.3
1.26.10
1
missuo/deeplx:v1.2.232e492587678
stdlib@go1.25.10
1.26.10
1
mitre/vulcan:latest2bc4dfb8150f
stdlib@go1.25.5
1.26.10
1
moby/buildkit:v0.34.0-rootless65eca3c01cd1
stdlib@go1.26.8
1.26.10
1
moby/buildkit:v0.33.0-rootless80b15f0735e8
stdlib@go1.26.8
1.26.10
1
moby/buildkit:v0.31.0a095b3d11ce1
stdlib@go1.26.4
1.26.10
1
moby/buildkit:v0.34.0b059f8d7226d
stdlib@go1.25.7
1.26.10
1
moby/buildkit:v0.10.0c2aeafaed434
stdlib@go1.17.8
1.26.10
1
moby/buildkit:v0.34.1-rootlessf68752a5a94a
stdlib@go1.25.7
1.26.10
1
mockserver/mockserver:mockserver-9.1.00ed883c9b2d0
stdlib@go1.27.2
1.26.10
1
mohankrishna999/k8s-ai-agent:3.1.27f980f8c650c
stdlib@go1.26.5-X:jsonv2
1.26.10
1
moikot/basic-git-server:0.0.20d941bd30ffa
stdlib@go1.14.9
1.26.10
1
moikot/smartthings-metrics:0.1.08625f53aa9b7
stdlib@go1.14.13
1.26.10
1
moikot/smartthings-metrics:feat-log-detailsfb8565140106
stdlib@go1.14.15
1.26.10
1
mongodb/mongodb-atlas-kubernetes-operator:2.17.0cfe202a2a076
stdlib@go1.26.7
1.26.10
1
mongodb/mongodb-atlas-local:883a3e51a70b2
stdlib@go1.26.8
1.26.10
1
monitoror/monitoror:44b88edcf51ff
stdlib@go1.14.6
1.26.10
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
stdlib@go1.20.12
1.26.10
1
moul/sshportal:v1.19.3332b603727c3
stdlib@go1.17.6
1.26.10
1
mpioperator/mpi-operator:0.3.03ccfa8d8b7bf
stdlib@go1.15.13
1.26.10
1
mrnim94/metrics-server-exporter:v2.4.086c4807a4bca
stdlib@go1.26.3
1.26.10
1
muonsoft/openapi-mock:latestc9afe1295484
stdlib@go1.20.2
1.26.10
1
murtazashah46/helmfile:latest4d11726cf803
stdlib@go1.22.8
1.26.10
1
mvisonneau/tailscale:v1.68.1fc45ad8abf10
stdlib@go1.22.4
1.26.10
1
mzinc/configmapsecret-controller:v0.5.1eebbcbf2d1f7
stdlib@go1.16.1
1.26.10
1
mziyabo/fargate-eks-sidecar-injector:latest3067dce17983
stdlib@go1.19.13
1.26.10
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
rustls-webpki@0.103.13
0.103.16
1
n8nio/n8n:1.86.08b39ed5a2de9
stdlib@go1.24.0
1.26.10
1
n8nio/n8n:1.115.1ed16e560c40e
stdlib@go1.24.6
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.