StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
stdlib@go1.20.5
1.26.10

Open the chart page →

39,444
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
stdlib@go1.21.8
1.26.10

Open the chart page →

13,037
falcofalcosecurity9.2.13 of 3See more

falco falcosecurity 9.2.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
falcosecurity/falco:0.45.169e957f91b3a
ca-certificates@20260909-r2
stdlib@go1.26.8
20260909-r3
1.26.10
falcosecurity/falco-driver-loader:0.45.16cfd7418907e
stdlib@go1.26.8
1.26.10
falcosecurity/falcoctl:0.14.290ba9627886e
ca-certificates@20260611-r1
stdlib@go1.27.1
20260909-r3
1.26.10

Open the chart page →

17,171
kubeviewkubeviewVerified publisher2.2.11 of 1See more

kubeview kubeview 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:latest45b64d7c7016
stdlib@go1.27.1
1.26.10

Open the chart page →

409
alertmanagerprometheus-communityOfficialVerified publisher2.1.12 of 2See more

alertmanager prometheus-community 2.1.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.106b52bd4dbe3
stdlib@go1.26.8
1.26.10
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10

Open the chart page →

540
kongkongOfficialVerified publisher3.4.11 of 2See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.10

Open the chart page →

1,037
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
stdlib@go1.16.2
1.26.10

Open the chart page →

3,553
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
stdlib@go1.24.1
1.26.10

Open the chart page →

2,198
prometheus-node-exporterprometheus-communityOfficialVerified publisher4.60.01 of 1See more

prometheus-node-exporter prometheus-community 4.60.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10

Open the chart page →

387
rook-cephrookOfficialVerified publisher1.21.02 of 2See more

rook-ceph rook 1.21.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rook/ceph:v1.21.02c3a65786d3c
stdlib@go1.22.10
1.26.10
quay.io/cephcsi/ceph-csi-operator:v1.1.0c42c95c36fa2
stdlib@go1.26.8
1.26.10

Open the chart page →

2,124
grafanagrafana-communityVerified publisher14.0.11 of 1See more

grafana grafana-community 14.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.4-distrolessae3d3add290a
stdlib@go1.26.7
1.26.10

Open the chart page →

411
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
stdlib@go1.25.6
1.26.10

Open the chart page →

1,640
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.96.05 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.96.0

5 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.10
victoriametrics/operator:v0.75.078da26b41a81
stdlib@go1.27.1
1.26.10
ghcr.io/victoriametrics/sync-job:v0.0.17b6f233532a85
stdlib@go1.26.4-X:jsonv2
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

1,915
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
stdlib@go1.19.5
1.26.10

Open the chart page →

2,316
kuredkuredOfficialVerified publisher6.1.01 of 1See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubereboot/kured:1.23.08dfd3c2e8893
stdlib@go1.26.4
1.26.10

Open the chart page →

561
home-assistanthelm-hassVerified publisher0.3.871 of 1See more

home-assistant helm-hass 0.3.87

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.233afb0659d78
rustls-webpki@0.103.14
stdlib@go1.25.6
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

3,436
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.26.10

Open the chart page →

1,588
openebsopenebsOfficialVerified publisher4.6.232 of 35See more

openebs openebs 4.6.2

32 of the 35 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
stdlib@go1.24.1
1.26.10
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.26.10
library/nats:2.9.17-alpine1a7b320b2942
stdlib@go1.19.9
1.26.10
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
stdlib@go1.19.4
1.26.10
natsio/prometheus-nats-exporter:0.11.031c02aac089a
stdlib@go1.20.3
1.26.10
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.26.10
openebs/lvm-driver:1.10.141f73aba7f31
stdlib@go1.24.7
1.26.10
openebs/mayastor-agent-core:v2.12.200429e487478
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-agent-ha-cluster:v2.12.2cb2fa3bfc1f8
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-agent-ha-node:v2.12.2964cbb43c5e5
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-api-rest:v2.12.20c646268cd8c
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-csi-controller:v2.12.238a82f29f777
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-csi-node:v2.12.2cbf834303735
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-eventing-aggregator:v2.12.24c12f06983b4
rustls-webpki@0.102.8
0.103.16
openebs/mayastor-io-engine:v2.12.20161a3e6f902
rustls-webpki@0.103.13
0.103.16
openebs/mayastor-metrics-exporter-io-engine:v2.12.2a57c47d3e624
rustls-webpki@0.102.8
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-obs-callhome:v2.12.24c25179ca592
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-obs-callhome-stats:v2.12.2cfb042c35b92
rustls-webpki@0.101.7
webpki-roots@0.25.4
0.103.16
0.26.11
openebs/mayastor-operator-diskpool:v2.12.27cd50e41324c
rustls-webpki@0.102.8
0.103.16
openebs/mc:RELEASE.2024-11-21T17-21-54Z4d1b85539919
stdlib@go1.23.4
1.26.10
openebs/minio:RELEASE.2024-12-18T13-15-44Zbb04e41fc1b8
stdlib@go1.23.4
1.26.10
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.26.10
openebs/zfs-driver:2.11.20234692bb4a4
stdlib@go1.26.2
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.26.10

Open the chart page →

36,834
tigera-operatorprojectcalico3.33.01 of 1See more

tigera-operator projectcalico 3.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.10

Open the chart page →

232
open-webuiopen-webui17.0.01 of 4See more

open-webui open-webui 17.0.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.26.10

Open the chart page →

2,373
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
stdlib@go1.19.1
1.26.10

Open the chart page →

4,546
aws-for-fluent-bitaws0.2.01 of 1See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit:3.2.1a480a1241720
stdlib@go1.25.6
1.26.10

Open the chart page →

568
apisixapisix2.18.21 of 3See more

apisix apisix 2.18.2

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.26.10

Open the chart page →

3,674
corednscorednsVerified publisher1.49.01 of 1See more

coredns coredns 1.49.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
coredns/coredns:1.14.77efd3c635b03
stdlib@go1.26.6
1.26.10

Open the chart page →

577
vpafairwinds-stableVerified publisher5.1.04 of 4See more

vpa fairwinds-stable 5.1.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.10

Open the chart page →

2,955
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
stdlib@go1.18.8
1.26.10

Open the chart page →

2,990
opentelemetry-operatoropentelemetry-helmOfficialVerified publisher0.126.11 of 1See more

opentelemetry-operator opentelemetry-helm 0.126.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.161.076ac4fa40512
stdlib@go1.27.2
1.26.10

Open the chart page →

5
trinotrino1.45.01 of 1See more

trino trino 1.45.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
trinodb/trino:4842704eb53935a
stdlib@go1.26.5
1.26.10

Open the chart page →

379
prometheus-pushgatewayprometheus-communityOfficialVerified publisher3.9.11 of 1See more

prometheus-pushgateway prometheus-community 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.11.491a56b89b97d
stdlib@go1.27.1
1.26.10

Open the chart page →

232
keycloakcloudpirates-keycloakVerified publisher0.21.482 of 3See more

keycloak cloudpirates-keycloak 0.21.48

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
stdlib@go1.24.6
1.26.10
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

5,184
dagsterdagsterVerified publisher1.13.263 of 5See more

dagster dagster 1.13.26

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.26605d41ae6647
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
dagster/user-code-example:1.13.265c98e09b2aeb
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
library/postgres:14.6f565573d74ae
stdlib@go1.18.2
1.26.10

Open the chart page →

4,153
prometheus-redis-exporterprometheus-communityVerified publisher6.34.01 of 1See more

prometheus-redis-exporter prometheus-community 6.34.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oliver006/redis_exporter:v1.94.00842ef7110e6
stdlib@go1.27.2
1.26.10

Open the chart page →

9
zabbixzabbix-communityVerified publisher7.1.03 of 5See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
stdlib@go1.24.10
1.26.10
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
stdlib@go1.24.10
1.26.10

Open the chart page →

16,616
graylogkong-zVerified publisher3.0.381 of 5See more

graylog kong-z 3.0.38

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.26.10

Open the chart page →

3,398
netdatanetdataVerified publisher3.7.1761 of 1See more

netdata netdata 3.7.176

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
netdata/netdata:v2.12.15cfa05a5fa56
stdlib@go1.27.0
1.26.10

Open the chart page →

3,055
connectonepassword-connect2.4.22 of 2See more

connect onepassword-connect 2.4.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
1password/connect-api:1.8.3656e4b10df83
ca-certificates@20260611-r1
stdlib@go1.26.8
20260909-r3
1.26.10
1password/connect-sync:1.8.3a760350c941a
ca-certificates@20260611-r1
stdlib@go1.26.8
20260909-r3
1.26.10

Open the chart page →

540
node-problem-detectordeliveryheroVerified publisher2.4.21 of 1See more

node-problem-detector deliveryhero 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
stdlib@go1.25.5
1.26.10

Open the chart page →

2,569
opencostopencostOfficialVerified publisher2.5.331 of 2See more

opencost opencost 2.5.33

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.34cdd173253e5
stdlib@go1.27.1
1.26.10

Open the chart page →

564
openfaasopenfaas15.0.146 of 6See more

openfaas openfaas 15.0.14

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
stdlib@go1.20.11
1.26.10
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
stdlib@go1.26.3
1.26.10
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
stdlib@go1.24.13
1.26.10
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
stdlib@go1.23.4
1.26.10
quay.io/prometheus/alertmanager:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10
quay.io/prometheus/prometheus:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.10

Open the chart page →

5,702
prometheus-elasticsearch-exporterprometheus-communityVerified publisher7.4.01 of 1See more

prometheus-elasticsearch-exporter prometheus-community 7.4.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/elasticsearch-exporter:v1.11.0a056739b095d
stdlib@go1.26.5
1.26.10

Open the chart page →

413
flux2fluxcd-community2.19.17 of 7See more

flux2 fluxcd-community 2.19.1

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
fluxcd/flux-cli:v2.9.5704d55295355
stdlib@go1.26.2
1.26.10
ghcr.io/fluxcd/helm-controller:v1.6.48ff15409e46d
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/image-automation-controller:v1.2.5e1a2720d3951
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/image-reflector-controller:v1.2.5c83ce5c06fed
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/kustomize-controller:v1.9.5a3a955eb2bc4
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/notification-controller:v1.9.4840f318265ee
stdlib@go1.26.7
1.26.10
ghcr.io/fluxcd/source-controller:v1.9.56f20d232d596
stdlib@go1.26.7
1.26.10

Open the chart page →

4,743
gitlab-agentgitlabVerified publisher2.33.01 of 1See more

gitlab-agent gitlab 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cluster-integration/gitlab-agent/agentk:v19.5.049dd7b857f3e
stdlib@go1.27.1
1.26.10

Open the chart page →

232
policy-reporterpolicy-reporterOfficialVerified publisher3.11.11 of 1See more

policy-reporter policy-reporter 3.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kyverno/policy-reporter:3.11.1a95ef6394c4d
stdlib@go1.27.2
1.26.10

Open the chart page →

75
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
stdlib@go1.18.2
1.26.10

Open the chart page →

6,790
jaeger-operatorjaegertracingOfficialVerified publisher2.57.01 of 1See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/jaeger-operator:1.61.03f036ec60e61
stdlib@go1.22.3
1.26.10

Open the chart page →

1,187
netboxnetboxOfficialVerified publisher8.3.933 of 5See more

netbox netbox 8.3.93

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/valkey:latest9985c6b0fef4
stdlib@go1.26.9
1.26.10
rancher/kubectl:v1.36.206c7a7a97727
stdlib@go1.26.4
1.26.10
ghcr.io/netbox-community/netbox:v4.7.31d6e0b5fbd48
rustls-webpki@0.103.14
stdlib@go1.27.1
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

1,889
postgrescloudpirates-postgresVerified publisher0.21.21 of 1See more

postgres cloudpirates-postgres 0.21.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.674935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

1,742
vault-secrets-operatorhashicorpVerified publisher1.6.21 of 2See more

vault-secrets-operator hashicorp 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
stdlib@go1.23.0
1.26.10

Open the chart page →

1,562
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
stdlib@go1.21.4
1.26.10

Open the chart page →

2,107
rocketchatrocketchat-server7.1.06 of 12See more

rocketchat rocketchat-server 7.1.0

6 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.26.10
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
stdlib@go1.20.7
1.26.10
library/nats:2.12-alpineb270f5e24283
stdlib@go1.25.12
1.26.10
natsio/nats-box:0.19.28031d190c7ee
stdlib@go1.25.2
1.26.10
natsio/nats-server-config-reloader:0.21.110ff229eaf52
stdlib@go1.25.5
1.26.10
natsio/prometheus-nats-exporter:0.18.002469dc907bc
stdlib@go1.24.6
1.26.10

Open the chart page →

17,042

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
milvusdb/milvus-operator:v1.3.12d5e5d9efd4d5
stdlib@go1.26.9
1.26.10
1
mindsdb/mindsdb:latest163011c09299
stdlib@go1.20.13
1.26.10
1
miniflux/miniflux:2.3.349d7b6098761
stdlib@go1.26.5
1.26.10
1
miniflux/miniflux:2.2.18a3ca6bbc1f74
stdlib@go1.26.1
1.26.10
1
miniflux/miniflux:2.0.36e2fb990dae74
stdlib@go1.17.8
1.26.10
1
minio/operator:v5.0.9170b154d2c61
stdlib@go1.21.1
1.26.10
1
minio/operator:v4.1.02adc5be088f5
stdlib@go1.16.3
1.26.10
1
mintel/gcp-quota-exporter:v0.3.20e0707b7732b
stdlib@go1.13.12
1.26.10
1
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
stdlib@go1.13.9
1.26.10
1
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
stdlib@go1.13.9
1.26.10
1
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
stdlib@go1.13.9
1.26.10
1
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
stdlib@go1.13.9
1.26.10
1
mirrorgitlabcontainers/kubectl:1.13.1299931bd06b41
stdlib@go1.13.3
1.26.10
1
misalbasynchrotron/visa-k8s:latest48e4dcba8f6e
stdlib@go1.26.8
1.26.10
1
missuo/deeplx:v1.2.232e492587678
stdlib@go1.25.10
1.26.10
1
mitre/vulcan:latest2bc4dfb8150f
stdlib@go1.25.5
1.26.10
1
moby/buildkit:v0.32.2-rootless504731e577c2
stdlib@go1.25.7
1.26.10
1
moby/buildkit:v0.34.0-rootless65eca3c01cd1
stdlib@go1.26.8
1.26.10
1
moby/buildkit:v0.33.0-rootless80b15f0735e8
stdlib@go1.26.8
1.26.10
1
moby/buildkit:v0.31.0a095b3d11ce1
stdlib@go1.26.4
1.26.10
1
moby/buildkit:v0.34.0b059f8d7226d
stdlib@go1.25.7
1.26.10
1
moby/buildkit:v0.10.0c2aeafaed434
stdlib@go1.17.8
1.26.10
1
moby/buildkit:mastere7c131019aa9
stdlib@go1.26.8
1.26.10
1
moby/buildkit:master-rootlessf3864381e463
stdlib@go1.26.8
1.26.10
1
mockserver/mockserver:mockserver-9.1.00ed883c9b2d0
stdlib@go1.27.2
1.26.10
1
mohankrishna999/k8s-ai-agent:3.1.27f980f8c650c
stdlib@go1.26.5-X:jsonv2
1.26.10
1
moikot/basic-git-server:0.0.20d941bd30ffa
stdlib@go1.14.9
1.26.10
1
moikot/smartthings-metrics:0.1.08625f53aa9b7
stdlib@go1.14.13
1.26.10
1
moikot/smartthings-metrics:feat-log-detailsfb8565140106
stdlib@go1.14.15
1.26.10
1
mongodb/mongodb-atlas-kubernetes-operator:2.17.0cfe202a2a076
stdlib@go1.26.7
1.26.10
1
mongodb/mongodb-atlas-local:883a3e51a70b2
stdlib@go1.26.8
1.26.10
1
monitoror/monitoror:44b88edcf51ff
stdlib@go1.14.6
1.26.10
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
stdlib@go1.20.12
1.26.10
1
moul/sshportal:v1.19.3332b603727c3
stdlib@go1.17.6
1.26.10
1
mpioperator/mpi-operator:0.3.03ccfa8d8b7bf
stdlib@go1.15.13
1.26.10
1
mrnim94/metrics-server-exporter:v2.4.086c4807a4bca
stdlib@go1.26.3
1.26.10
1
muonsoft/openapi-mock:latestc9afe1295484
stdlib@go1.20.2
1.26.10
1
murtazashah46/helmfile:latest4d11726cf803
stdlib@go1.22.8
1.26.10
1
mvisonneau/tailscale:v1.68.1fc45ad8abf10
stdlib@go1.22.4
1.26.10
1
mzinc/configmapsecret-controller:v0.5.1eebbcbf2d1f7
stdlib@go1.16.1
1.26.10
1
mziyabo/fargate-eks-sidecar-injector:latest3067dce17983
stdlib@go1.19.13
1.26.10
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
rustls-webpki@0.103.13
0.103.16
1
n8nio/n8n:1.86.08b39ed5a2de9
stdlib@go1.24.0
1.26.10
1
n8nio/n8n:1.115.1ed16e560c40e
stdlib@go1.24.6
1.26.10
1
n8nio/runners:2.44.4f95ccf564f3b
stdlib@go1.25.11
1.26.10
1
nacos/nacos-peer-finder-plugin:latesta9c769301fa6
stdlib@go1.13.5
1.26.10
1
nadoo/glider:0.1638aadefbd607
stdlib@go1.20.14
1.26.10
1
nataliagranato/redis:v1.0.052bd9b79a8f2
ca-certificates@20240705-r0
20260909-r3
1
nathanfirmo/dbgate:latest6b0487e6e987
stdlib@go1.24.5
1.26.10
1
natsio/jetstream-controller:0.24.058862daca582
stdlib@go1.26.5
1.26.10
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.