CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,728; of 18,208 indexed, latest versions
Container images: 6,681; deployed by those charts
Fix available: 5 of 5; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,728 of 18,208 indexed charts deploy, on 6,681 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+212 more	1.26.10	6,438
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+17 more	20260909-r3	417
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	103
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	70
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more	0.26.11	13

OSV records: CGA-32jh-59ph-xj58 GO-2026-6809 RUSTSEC-2026-0381 RUSTSEC-2026-0382 RUSTSEC-2026-0383
Also known as: CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending: Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,728 by stars

Chart

Latest

Affected images

Radar Score

moon2aerokube

2.8.2

3 of 3 See more

moon2 aerokube 2.8.2

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/aerokube/moon :2.8.2	072f3c5592dc	stdlib@go1.27.1	1.26.10
quay.io/aerokube/moon-conf :2.8.2	35c465ab25d8	stdlib@go1.27.1	1.26.10
quay.io/aerokube/moon-ui :2.8.2	f374d0b9953b	stdlib@go1.27.1	1.26.10

Open the chart page →

681

microgatewayairlock-microgateway

5.2.1

1 of 1 See more

microgateway airlock-microgateway 5.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/airlock/microgateway-operatordigest-pinned	980e26c0cea5	ca-certificates@20260909-r2 stdlib@go1.27.2	20260909-r3 1.26.10

Open the chart page →

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :15.2.0-debian-11-r11	3e65a6b89e38	stdlib@go1.18.2	1.26.10

Open the chart page →

4,900

pod-gatewayangelnu

7.1.1

1 of 2 See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/gateway-admision-controller :v3.12.0	6f6ab596afd5	stdlib@go1.24.2	1.26.10

Open the chart page →

1,896

tt-rssangelnu

7.0.0

1 of 2 See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/tt-rss :2.0.10086	c9d9ea1e37c4	stdlib@go1.27.1	1.26.10

Open the chart page →

1,044

ansible-semaphoreansible-semaphore

0.1.0

1 of 1 See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	stdlib@go1.16.3	1.26.10

Open the chart page →

5,132

aperture-controlleraperture

2.34.0

4 of 5 See more

aperture-controller aperture 2.34.0

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	f7f9e4f64d9e	stdlib@go1.26.8	1.26.10
fluxninja/aperture-operator :2.34.0	356d7aa86632	stdlib@go1.21.5	1.26.10
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.26.10
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	stdlib@go1.17.8	1.26.10

Open the chart page →

7,792

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	stdlib@go1.18	1.26.10

Open the chart page →

4,459

limesurveyarea-42

0.3.101

1 of 2 See more

limesurvey area-42 0.3.101

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	stdlib@go1.25.0	1.26.10

Open the chart page →

5,423

artifact-controllerartifact-controller

0.9.1

1 of 1 See more

artifact-controller artifact-controller 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/kargops/artifact-controller :v0.9.1	0b42a68e9e27	stdlib@go1.26.7	1.26.10

Open the chart page →

238

athens-proxyathens-charts

0.18.0

1 of 1 See more

athens-proxy athens-charts 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
gomods/athens :v0.19.2	e1abe3005673	stdlib@go1.26.8	1.26.10

Open the chart page →

953

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	stdlib@go1.16.9	1.26.10

Open the chart page →

10,526

prometheusavesha

19.3.0

4 of 4 See more

prometheus avesha 19.3.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.26.10
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	stdlib@go1.19.3	1.26.10
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	stdlib@go1.19.4	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	stdlib@go1.19.3	1.26.10

Open the chart page →

8,857

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	stdlib@go1.15.2	1.26.10

Open the chart page →

3,520

aws-node-termination-handleraws-node-termination-handler

0.27.6

1 of 1 See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.25.6	9ad31fb4e5be	stdlib@go1.25.8	1.26.10

Open the chart page →

955

snapschedulerbackube-helm-charts

3.5.0

2 of 2 See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/backube/snapscheduler :3.5.0	35ac95c51780	stdlib@go1.24.3	1.26.10
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	stdlib@go1.24.2	1.26.10

Open the chart page →

2,335

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	stdlib@go1.20.7	1.26.10

Open the chart page →

2,665

yatai-deploymentbentoml

1.1.21

1 of 2 See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	stdlib@go1.19.13	1.26.10

Open the chart page →

1,901

boundaryboundary

0.1.0

1 of 1 See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
hashicorp/boundary :0.21.0	37bf86488b74	stdlib@go1.25.1	1.26.10

Open the chart page →

2,255

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	stdlib@go1.19.12	1.26.10

Open the chart page →

69,212

caddy-ingress-controllercaddy-ingress

1.3.0

1 of 1 See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	stdlib@go1.21.4	1.26.10

Open the chart page →

2,646

cadvisorcadvisor

0.1.15

1 of 1 See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	stdlib@go1.19.9	1.26.10

Open the chart page →

2,472

geoservercloudcamptocamp2

3.0.2

7 of 7 See more

geoservercloud camptocamp2 3.0.2

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :3.0.2	244572a8e01d	stdlib@go1.27.1	1.26.10
geoservercloud/geoserver-cloud-gwc :3.0.2	5f81a737aff3	stdlib@go1.27.1	1.26.10
geoservercloud/geoserver-cloud-rest :3.0.2	c14c7be99fd7	stdlib@go1.27.1	1.26.10
geoservercloud/geoserver-cloud-wcs :3.0.2	54cfe408a3ef	stdlib@go1.27.1	1.26.10
geoservercloud/geoserver-cloud-webui :3.0.2	3d01d85dcff4	stdlib@go1.27.1	1.26.10
geoservercloud/geoserver-cloud-wfs :3.0.2	67be5bf231e1	stdlib@go1.27.1	1.26.10
geoservercloud/geoserver-cloud-wms :3.0.2	6243931b4cc7	stdlib@go1.27.1	1.26.10

Open the chart page →

5,874

version-checkercert-manager

0.11.0

1 of 1 See more

version-checker cert-manager 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.11.0	eae9a374d22f	stdlib@go1.26.4	1.26.10

Open the chart page →

613

cert-manager-webhook-netcupcert-manager-webhook-netcup

1.1.0

1 of 1 See more

cert-manager-webhook-netcup cert-manager-webhook-netcup 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/aellwein/cert-manager-webhook-netcupdigest-pinned	bd397ad6fb82	stdlib@go1.27.2	1.26.10

Open the chart page →

cert-managerchoerodon

1.8.2

4 of 4 See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	stdlib@go1.17.11	1.26.10
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	stdlib@go1.17.11	1.26.10
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	stdlib@go1.17.11	1.26.10
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	stdlib@go1.17.11	1.26.10

Open the chart page →

11,951

popeyechristianhuth

2.4.3

1 of 1 See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	stdlib@go1.23.5	1.26.10

Open the chart page →

1,989

sbom-operatorckotzbauer

0.48.0

1 of 1 See more

sbom-operator ckotzbauer 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/ckotzbauer/sbom-operator :0.47.0	2916a55055f1	stdlib@go1.26.9	1.26.10

Open the chart page →

hellocloudecho

0.1.2

1 of 1 See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
cloudecho/hello :0.1.0	f76ede067ab9	stdlib@go1.16.6	1.26.10

Open the chart page →

2,828

cloudflare-exportercloudflare-exporter

0.2.3

1 of 1 See more

cloudflare-exporter cloudflare-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/lablabs/cloudflare_exporter :0.0.16	70d74ec46602	stdlib@go1.22.3	1.26.10

Open the chart page →

1,395

ghostcloudpirates-ghost

0.20.29

3 of 3 See more

ghost cloudpirates-ghost 0.20.29

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/ghost :6.69.0	55131b90d48c	stdlib@go1.24.6	1.26.10
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.26.10
library/mariadb :13.0.2	f1bba652ba57	stdlib@go1.26.7	1.26.10

Open the chart page →

8,932

cloudprobercloudprober

1.14.28

1 of 1 See more

cloudprober cloudprober 1.14.28

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/cloudprober/cloudprober :v0.14.6	0902d8adf871	stdlib@go1.26.6	1.26.10

Open the chart page →

280

openstack-manila-csicloud-provider-openstack

2.37.1

5 of 5 See more

openstack-manila-csi cloud-provider-openstack 2.37.1

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/manila-csi-plugin :v1.37.1	46373e7e6a4b	stdlib@go1.26.5	1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.15.0	11f199f6bec4	stdlib@go1.24.6	1.26.10
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	stdlib@go1.24.2	1.26.10
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	stdlib@go1.24.2	1.26.10
registry.k8s.io/sig-storage/csi-snapshotter :v8.4.0	c7e0a3718832	stdlib@go1.24.6	1.26.10

Open the chart page →

5,356

dumpscriptcloudscript

1.11.0

1 of 1 See more

dumpscript cloudscript 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/cloudscript-technology/dumpscript :v0.0.45-alpine-edge	99732098a0f3	stdlib@go1.27.1	1.26.10

Open the chart page →

256

clowardenclowarden

0.2.3

2 of 4 See more

clowarden clowarden 0.2.3

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.26.10
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	stdlib@go1.25.3	1.26.10

Open the chart page →

7,285

cluster-manager-servercluster-manager-server

1.8.0

1 of 1 See more

cluster-manager-server cluster-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	stdlib@go1.24.5	1.26.10

Open the chart page →

1,293

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	stdlib@go1.18	1.26.10

Open the chart page →

2,793

coder-observabilitycoder-observability

0.8.0

13 of 21 See more

coder-observability coder-observability 0.8.0

13 of the 21 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
burningalchemist/sql_exporter :latest	3dabcb7c74e9	stdlib@go1.26.9	1.26.10
grafana/alloy :v1.20.1	2aa2099af76c	stdlib@go1.26.7	1.26.10
grafana/grafana :10.4.19	a9043254ba16	stdlib@go1.24.3	1.26.10
grafana/loki :3.1.0	d947e68a84d9	stdlib@go1.22.2	1.26.10
grafana/loki-canary :3.1.0	39baf6d67f85	stdlib@go1.22.2	1.26.10
prom/memcached-exporter :v0.14.2	d8a61419b841	stdlib@go1.21.5	1.26.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.93.0	0ccb22ca9f3f	stdlib@go1.26.5	1.26.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.94.0	142a1f11df8d	stdlib@go1.26.8	1.26.10
quay.io/prometheus/alertmanager :v0.33.1	9e082985f56f	stdlib@go1.26.4	1.26.10
quay.io/prometheus/node-exporter :v1.12.1	1b4e4438faca	stdlib@go1.26.5	1.26.10
quay.io/prometheus/prometheus :v3.13.2	508729e0e2d1	stdlib@go1.26.5	1.26.10
quay.io/prometheuscommunity/postgres-exporter :latest	ac5ec343104f	stdlib@go1.26.4	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.19.1	85108987d044	stdlib@go1.26.4	1.26.10

Open the chart page →

14,980

convertigoconvertigo

8.4.6

2 of 5 See more

convertigo convertigo 8.4.6

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	stdlib@go1.21.5	1.26.10
timescale/timescaledb :latest-pg16	6f139d560429	stdlib@go1.26.2	1.26.10

Open the chart page →

17,635

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	stdlib@go1.16.6	1.26.10

Open the chart page →

4,347

cosmocosmo-platform

0.22.1

6 of 10 See more

cosmo cosmo-platform 0.22.1

6 of the 10 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	stdlib@go1.24.6	1.26.10
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	stdlib@go1.21.10	1.26.10
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	stdlib@go1.22.3	1.26.10
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	stdlib@go1.23.6	1.26.10
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	stdlib@go1.23.6	1.26.10
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	stdlib@go1.20.7	1.26.10

Open the chart page →

35,388

cosmotech-apicosmotech-api

5.3.1

1 of 1 See more

cosmotech-api cosmotech-api 5.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-tech/cosmotech-api :5.3.1	2ad55850c106	ca-certificates@20260909-r2	20260909-r3

Open the chart page →

ocularcrashoverride-helm-charts

0.5.2

1 of 1 See more

ocular crashoverride-helm-charts 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/crashappsec/ocular-controller :v0.4.1	22060cf61e0e	stdlib@go1.26.6	1.26.10

Open the chart page →

268

crossviewcrossview

4.6.0

2 of 2 See more

crossview crossview 4.6.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/postgres :latest	74935e722416	stdlib@go1.24.6	1.26.10
ghcr.io/crossplane-contrib/crossview :v4.6.0	7b54c5ba60e5	stdlib@go1.25.14	1.26.10

Open the chart page →

2,174

dapr-dashboarddapr

0.15.0

1 of 1 See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
daprio/dashboard :0.15.0	4be696707bd1	stdlib@go1.21.13	1.26.10

Open the chart page →

1,993

db-operatordb-operator-ng

3.17.0

1 of 1 See more

db-operator db-operator-ng 3.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/db-operator/db-operator :2.44.0	4a789f7347d8	stdlib@go1.26.9	1.26.10

Open the chart page →

deepflowdeepflow

6.2.201

5 of 8 See more

deepflow deepflow 6.2.201

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	stdlib@go1.18.3	1.26.10
deepflowce/deepflow-init-grafana :v6.2.2	7cd16719eb57	stdlib@go1.19.3	1.26.10
deepflowce/deepflow-server :v6.2.2	1477e7334d13	stdlib@go1.18.10	1.26.10
deepflowce/mysql :8.0.31	3d7ae561cf60	stdlib@go1.16.7	1.26.10
grafana/grafana :9.3.6	e5a9655dabef	stdlib@go1.19.4	1.26.10

Open the chart page →

21,564

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	stdlib@go1.21.10	1.26.10

Open the chart page →

4,448

kube-benchdeliveryhero

0.1.17

1 of 1 See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	stdlib@go1.21.7	1.26.10

Open the chart page →

2,346

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	stdlib@go1.17.6	1.26.10

Open the chart page →

3,727

Container images carrying it

6,681 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
natsio/nats-box :0.20.0	d2f04223f40e	stdlib@go1.26.6	1.26.10	3
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	stdlib@go1.25.6	1.26.10	3
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.26.10	3
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	stdlib@go1.24.2	1.26.10	3
oamdev/kube-webhook-certgen :v2.4.1	231c423c2b17	stdlib@go1.17.11	1.26.10	3
oliver006/redis_exporter :v1.94.0	0842ef7110e6	stdlib@go1.27.2	1.26.10	3
opencsghq/postgres :15.19	b98600564e07	stdlib@go1.24.6	1.26.10	3
opencsghq/stakater-reloader :v1.4.19	0491782f7bac	stdlib@go1.26.4	1.26.10	3
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	stdlib@go1.19.3	1.26.10	3
openebs/node-disk-operator :2.1.0	6afe2123c457	stdlib@go1.19.3	1.26.10	3
openebs/provisioner-localpv :3.5.0	aea39e49bb97	stdlib@go1.19.13	1.26.10	3
openfga/openfga :latest :v1.22.0	9cf9a20af32a	ca-certificates@20260909-r2 stdlib@go1.26.8	20260909-r3 1.26.10	3
oryd/hydra :v2.2.0	2c93beb5e5f2	stdlib@go1.21.5	1.26.10	3
otel/opentelemetry-collector :latest	310a800ad69e	stdlib@go1.26.8	1.26.10	3
otel/opentelemetry-collector-contrib :0.162.0 :latest	39923a8e431b	stdlib@go1.26.8	1.26.10	3
pgsty/silo :RELEASE.2026-09-16T00-00-00Z	635197cb9f36	stdlib@go1.27.1	1.26.10	3
pgsty/silo :RELEASE.2026-09-03T13-18-01Z	b616a0cf8cb2	stdlib@go1.27.1	1.26.10	3
prom/alertmanager :v0.28.0	d5155cfac40a	stdlib@go1.23.4	1.26.10	3
prom/memcached-exporter :v0.14.2	d8a61419b841	stdlib@go1.21.5	1.26.10	3
prom/prometheus :v3.0.1	565ee8650122	stdlib@go1.23.3	1.26.10	3
prom/prometheus :v2.19.0	bfad037f95e5	stdlib@go1.14.4	1.26.10	3
prom/pushgateway :v1.2.0	0a9031142481	stdlib@go1.13.8	1.26.10	3
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.26.10	3
prom/pushgateway :v1.0.1	a5df60347882	stdlib@go1.13.5	1.26.10	3
prom/statsd-exporter :v0.18.0	d23aca343b86	stdlib@go1.14.7	1.26.10	3
qingcloud/cloud-controller-manager :v1.4.12	10f66b5df886	stdlib@go1.18.2	1.26.10	3
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	stdlib@go1.16.3	1.26.10	3
rancher/kubectl :v1.34.1	090bef429ed1	stdlib@go1.24.6	1.26.10	3
rancher/system-upgrade-controller :v0.20.2	61b68d4372ba	stdlib@go1.26.8	1.26.10	3
rcdelacruz/my-strapi-app :js-amd64	38007f358355	stdlib@go1.19.4	1.26.10	3
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	stdlib@go1.21.3	1.26.10	3
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.26.10	3
solace/solace-pubsub-standard :latest	59f2a6d8eaba	stdlib@go1.26.8	1.26.10	3
stakater/proxyinjector :v0.0.23	83fef483d497	stdlib@go1.13.1	1.26.10	3
tykio/tyk-dashboard :v5.13.2	1161bd297135	stdlib@go1.26.7	1.26.10	3
tykio/tyk-gateway-ee :v5.13.2	50b3e4f5398a	stdlib@go1.26.7	1.26.10	3
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	stdlib@go1.22.7	1.26.10	3
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	stdlib@go1.22.7	1.26.10	3
tykio/tyk-k8s-bootstrap-pre-install :v2.2.0	205215b815a4	stdlib@go1.22.7	1.26.10	3
vikunja/vikunja :0.24.6	ed1f3ed467fe	stdlib@go1.23.4	1.26.10	3
wallabag/wallabag :2.6.14	4a527e027e0d	stdlib@go1.25.1	1.26.10	3
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	stdlib@go1.26.7	1.26.10	3
gcr.io/trillian-opensource-ci/db_server	2a685a38dd01	stdlib@go1.18.2	1.26.10	3
ghcr.io/appscode/sidekick :v0.0.15	d1036b07e348	stdlib@go1.25.11	1.26.10	3
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	stdlib@go1.23.4	1.26.10	3
ghcr.io/coder/coder :v2.38.1	fcddd64d5f08	stdlib@go1.26.8	1.26.10	3
ghcr.io/dapr/injector :1.18.7	4a7b491b2ac5	stdlib@go1.26.9	1.26.10	3
ghcr.io/dapr/operator :1.18.7	42192d91b094	stdlib@go1.26.9	1.26.10	3
ghcr.io/dapr/placement :1.18.7	c9da106eddcb	stdlib@go1.26.9	1.26.10	3
ghcr.io/dapr/scheduler :1.18.7	2cc2da2f7c4e	stdlib@go1.26.9	1.26.10	3