CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,234; of 18,232 indexed, latest versions
Container images: 6,131; deployed by those charts
Fix available: 6 of 9; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,234 of 18,232 indexed charts deploy, on 6,131 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+210 more	1.26.10	6,022
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more	20260909-r3	114
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	91
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	63
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more	0.26.11	12
golang-1.19deb	1.19.8-2	no fix listed	1
kineapk	0.17.2-r3	no fix listed	1
kubernetes-1.37apk	1.37.1-r3	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r5	1

OSV records: CGA-32jh-59ph-xj58 CGA-48x4-f6q2-2fc9 CGA-9w23-c7x9-6gcf CGA-pj7v-5f5f-w56q DEBIAN-CVE-2026-111943 GO-2026-6809 RUSTSEC-2026-0381 RUSTSEC-2026-0382 RUSTSEC-2026-0383
Also known as: CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending: Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,234 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

6,131 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/docker :20.10-dind :20-dind	af96c680a7e1	stdlib@go1.19.7	1.26.10	3
library/mariadb :13.0.2 :latest	f1bba652ba57	stdlib@go1.26.7	1.26.10	3
library/mongo :7 :7.0	1f995ad6fdb9	stdlib@go1.26.8	1.26.10	3
library/mysql :latest	f51c9c01c16b	stdlib@go1.24.6	1.26.10	3
library/nats :2.15.1-alpine	2ae57dfba306	stdlib@go1.27.2	1.26.10	3
library/nats :latest	cd3fcd4ecdda	stdlib@go1.27.1	1.26.10	3
library/postgres :14.1	3162a6ead070	stdlib@go1.16.7	1.26.10	3
library/postgres :15.7-alpine :15.7-alpine3.20	468d34fefd63	stdlib@go1.18.2	1.26.10	3
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.26.10	3
library/postgres :15-alpine	a8e042598834	stdlib@go1.24.6	1.26.10	3
library/postgres :17	b8faeff77126	stdlib@go1.24.6	1.26.10	3
library/postgres :15	c961aa287d86	stdlib@go1.24.6	1.26.10	3
library/postgres :17-alpine	eee6c6e1b089	stdlib@go1.24.6	1.26.10	3
library/postgres :16-alpine	f46107955874	stdlib@go1.24.6	1.26.10	3
library/rabbitmq :4.4.0-management	c200fd496482	stdlib@go1.25.0	1.26.10	3
library/registry :3.1.1 :latest	1be55279f18a	stdlib@go1.25.9	1.26.10	3
library/ubuntu :latest	c098726dd9b9	stdlib@go1.27.1	1.26.10	3
library/ubuntu :latest	f144425ff09b	stdlib@go1.26.7	1.26.10	3
mcp/grafana :latest	9362bcf6aa0e	stdlib@go1.26.5	1.26.10	3
meshery/meshery :stable-latest	020bf9c85830	stdlib@go1.26.4	1.26.10	3
mikefarah/yq :2.4.1	6fc625c402de	stdlib@go1.13.3	1.26.10	3
minio/operator :v4.3.7	54393e03f3b2	stdlib@go1.17.4	1.26.10	3
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	stdlib@go1.13.11	1.26.10	3
natsio/nats-account-server :1.0.0	a3381560aab6	stdlib@go1.16.6	1.26.10	3
natsio/nats-box :0.20.0	d2f04223f40e	stdlib@go1.26.6	1.26.10	3
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.26.10	3
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	stdlib@go1.25.6	1.26.10	3
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.26.10	3
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	stdlib@go1.24.2	1.26.10	3
oamdev/kube-webhook-certgen :v2.4.1	231c423c2b17	stdlib@go1.17.11	1.26.10	3
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	stdlib@go1.19.3	1.26.10	3
openebs/node-disk-operator :2.1.0	6afe2123c457	stdlib@go1.19.3	1.26.10	3
openebs/provisioner-localpv :3.5.0	aea39e49bb97	stdlib@go1.19.13	1.26.10	3
openfga/openfga :latest :v1.22.0	9cf9a20af32a	ca-certificates@20260909-r2 stdlib@go1.26.8	20260909-r3 1.26.10	3
oryd/hydra :v2.2.0	2c93beb5e5f2	stdlib@go1.21.5	1.26.10	3
otel/opentelemetry-collector :latest	310a800ad69e	stdlib@go1.26.8	1.26.10	3
pgsty/silo :RELEASE.2026-09-03T13-18-01Z	b616a0cf8cb2	stdlib@go1.27.1	1.26.10	3
postgis/postgis :17-3.5 :latest	01a6a70e41e6	stdlib@go1.18.2	1.26.10	3
prom/alertmanager :v0.28.0	d5155cfac40a	stdlib@go1.23.4	1.26.10	3
prom/memcached-exporter :v0.14.2	d8a61419b841	stdlib@go1.21.5	1.26.10	3
prom/prometheus :v3.0.1	565ee8650122	stdlib@go1.23.3	1.26.10	3
prom/prometheus :v2.19.0	bfad037f95e5	stdlib@go1.14.4	1.26.10	3
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.26.10	3
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.26.10	3
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.26.10	3
prom/statsd-exporter :v0.18.0	d23aca343b86	stdlib@go1.14.7	1.26.10	3
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.26.10	3
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	stdlib@go1.16.3	1.26.10	3
rancher/kubectl :v1.34.1	090bef429ed1	stdlib@go1.24.6	1.26.10	3
rancher/system-upgrade-controller :v0.20.2	61b68d4372ba	stdlib@go1.26.8	1.26.10	3