StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
openhumanhelmforgeVerified publisher1.1.01 of 1See more

openhuman helmforge 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/tinyhumansai/openhuman-core:v0.64.15c694baccddb4
stdlib@go1.19.8
1.26.10

Open the chart page →

2,944
openreplayhelmforgeVerified publisher1.1.118 of 24See more

openreplay helmforge 1.1.1

18 of the 24 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/git:2.52.04a0e72d49596
stdlib@go1.25.10
1.26.10
library/caddy:2.10.2-alpine4c6e91c6ed0e
stdlib@go1.25.0
1.26.10
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/openreplay/minio:20258cada3c9458a
ca-certificates@20260413-r0
minio@0.20251015.172955-r10
stdlib@go1.26.3
20260909-r3
0.20260922.192518-r5
1.26.10
ghcr.io/openreplay/postgres:173b49780c0497
ca-certificates@20260413-r0
20260909-r3
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
public.ecr.aws/p1t3u8a3/api:v1.28.512aeda8dbac7
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/assets:v1.28.0fee63ead0e74
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/canvases:v1.28.08d2b3a947a14
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
public.ecr.aws/p1t3u8a3/db:v1.28.02c99078d7957
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/ender:v1.28.00f5806583626
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/frontend:v1.28.3bc4452ef9701
ca-certificates@20260909-r2
20260909-r3
public.ecr.aws/p1t3u8a3/http:v1.28.0cd0e4469cd02
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/images:v1.28.004fadd25a569
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/sink:v1.28.06b80fb10b443
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/spot:v1.28.00ba5cb666370
stdlib@go1.26.8
1.26.10
public.ecr.aws/p1t3u8a3/storage:v1.28.02f9784a385ce
stdlib@go1.26.8
1.26.10

Open the chart page →

15,720
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:9.0.4dc28ed5a9d0f
stdlib@go1.26.8
1.26.10

Open the chart page →

69,345
paperless-ngxhelmforgeVerified publisher1.1.12 of 4See more

paperless-ngx helmforge 1.1.1

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
rustls-webpki@0.103.14
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

8,142
paprahelmforgeVerified publisher1.0.21 of 1See more

papra helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.7.0-rootlessbf4a66e776d0
stdlib@go1.23.12
1.26.10

Open the chart page →

3,685
pimcorehelmforgeVerified publisher2.0.72 of 6See more

pimcore helmforge 2.0.7

2 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.2916834e49961
stdlib@go1.26.3
1.26.10
library/mariadb:13.0.20e4bb0f339fe
stdlib@go1.24.6
1.26.10

Open the chart page →

3,677
pocket-idhelmforgeVerified publisher1.0.21 of 2See more

pocket-id helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.14.001540977dcf4
stdlib@go1.26.6
1.26.10

Open the chart page →

742
questdbhelmforgeVerified publisher1.2.01 of 1See more

questdb helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
questdb/questdb:10.0.167eaed863ebb
stdlib@go1.25.14
1.26.10

Open the chart page →

170
reactive-resumehelmforgeVerified publisher1.0.22 of 4See more

reactive-resume helmforge 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
stdlib@go1.26.4
1.26.10

Open the chart page →

4,028
ryothelmforgeVerified publisher1.0.22 of 2See more

ryot helmforge 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
stdlib@go1.23.1
1.26.10

Open the chart page →

7,267
siyuanhelmforgeVerified publisher1.0.41 of 1See more

siyuan helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
b3log/siyuan:v3.8.7aced5ce847dc
stdlib@go1.26.9
1.26.10

Open the chart page →

267
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

2,580
strava-statisticshelmforgeVerified publisher1.1.191 of 2See more

strava-statistics helmforge 1.1.19

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
stdlib@go1.26.3
1.26.10

Open the chart page →

1,256
supersethelmforgeVerified publisher1.4.23 of 5See more

superset helmforge 1.4.2

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
rustls-webpki@0.103.13
webpki-root-certs@1.0.9
0.103.16
1.0.10
helmforge/kubectl:1.35.3c3f97e954c47
stdlib@go1.25.7
1.26.10
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

34,432
temporalhelmforgeVerified publisher1.1.14 of 4See more

temporal helmforge 1.1.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
temporalio/admin-tools:1.32.19ef0dc5b063b
stdlib@go1.26.8
1.26.10
temporalio/server:1.32.1acecbab5b0b8
stdlib@go1.26.8
1.26.10
temporalio/ui:2.56.066d55d383bfb
stdlib@go1.26.9
1.26.10

Open the chart page →

2,630
twentyhelmforgeVerified publisher1.0.91 of 5See more

twenty helmforge 1.0.9

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie5486e8fb2069
stdlib@go1.24.6
1.26.10

Open the chart page →

2,792
wallabaghelmforgeVerified publisher1.3.112 of 3See more

wallabag helmforge 1.3.11

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie74935e722416
stdlib@go1.24.6
1.26.10
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.10

Open the chart page →

3,315
webodmhelmforgeVerified publisher1.1.21 of 4See more

webodm helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
postgis/postgis:17-3.501a6a70e41e6
stdlib@go1.18.2
1.26.10

Open the chart page →

13,271
zookeeperhelmforgeVerified publisher1.1.11 of 1See more

zookeeper helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/zookeeper:3.9.65bad433c7170
stdlib@go1.18.1
1.26.10

Open the chart page →

3,724
harborhelm-harborVerified publisher2.3.75 of 8See more

harbor helm-harbor 2.3.7

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.15.47d2ba5304a72
stdlib@go1.26.7
1.26.10
goharbor/harbor-jobservice:v2.15.4f143578ef30e
stdlib@go1.26.7
1.26.10
goharbor/harbor-registryctl:v2.15.430bd1ace4e3b
stdlib@go1.26.7
1.26.10
goharbor/registry-photon:v2.15.4dc0cb388a644
stdlib@go1.26.7
1.26.10
goharbor/trivy-adapter-photon:v2.15.4813ca81b4a4e
stdlib@go1.26.7
1.26.10

Open the chart page →

1,734
openaevhelm-openbasVerified publisher2.0.151 of 7See more

openaev helm-openbas 2.0.15

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
golang-1.19@1.19.8-2
stdlib@go1.19.8
no fix listed
1.26.10

Open the chart page →

79,005
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
golang-1.19@1.19.8-2
stdlib@go1.19.8
no fix listed
1.26.10

Open the chart page →

83,823
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
stdlib@go1.25.6
1.26.10

Open the chart page →

2,614
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.10

Open the chart page →

21,677
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
stdlib@go1.26.1
1.26.10

Open the chart page →

3,909
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
stdlib@go1.24.3
1.26.10

Open the chart page →

7,357
hermes-operatorhermes-agent-operatorVerified publisher0.2.01 of 1See more

hermes-operator hermes-agent-operator 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/paperclipinc/hermes-operator:v0.2.07a491ec9b0ff
stdlib@go1.27.1
1.26.10

Open the chart page →

257
postgres-backup-localheywood8-helm-chartsVerified publisher0.1.131 of 1See more

postgres-backup-local heywood8-helm-charts 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
stdlib@go1.16
1.26.10

Open the chart page →

3,504
kubefaashfoxy-helm-charts0.1.63 of 4See more

kubefaas hfoxy-helm-charts 0.1.6

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hfoxy4/kubefaas-builder:main-2afc7570bfb65aaad93
stdlib@go1.21.11
1.26.10
hfoxy4/kubefaas-controller:main-2afc7570761fe08f14c
stdlib@go1.22.4
1.26.10
library/docker:27.0.1-dind2416984b43dd
stdlib@go1.21.11
1.26.10

Open the chart page →

8,261
tapo-prometheus-exporterhfoxy-helm-charts0.1.111 of 1See more

tapo-prometheus-exporter hfoxy-helm-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hfoxy4/tapo-prometheus-exporter:v0.1.117e385eef6fc7
stdlib@go1.21.3
1.26.10

Open the chart page →

1,447
goshimmerhiveroad0.2.141 of 1See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
iotaledger/goshimmer:v0.8.6b02a8f77474f
stdlib@go1.17.2
1.26.10

Open the chart page →

3,859
cratedb-adapterhmdmph0.1.01 of 1See more

cratedb-adapter hmdmph 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
crate/crate_adapter:latestb8d89fa5d19b
stdlib@go1.16.3
1.26.10

Open the chart page →

4,159
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
stdlib@go1.21.5
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10

Open the chart page →

13,200
imageproxyhmphuVerified publisher0.1.11 of 1See more

imageproxy hmphu 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
willnorris/imageproxy:latest21d0c90f4c31
stdlib@go1.16.8
1.26.10

Open the chart page →

3,353
holmesholmes0.1.01 of 1See more

holmes holmes 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/operator-framework/olm:master39081bf0c4a9
stdlib@go1.19
1.26.10

Open the chart page →

2,957
homeboxhomebox-helmVerified publisher0.3.01 of 2See more

homebox homebox-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
sysadminsmedia/homebox:0.26.056e880b62309
stdlib@go1.26.4
1.26.10

Open the chart page →

1,188
homecharthomechartVerified publisher1.0.11 of 1See more

homechart homechart 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/candiddev/homechart:latest582a76ccdd9f
stdlib@go1.27.2
1.26.10

Open the chart page →

12
adguardhomeenterpriseinc0.12.01 of 1See more

adguard homeenterpriseinc 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.0-b.5a9668737b1d6
stdlib@go1.16.6
1.26.10

Open the chart page →

3,749
cert-managerhomeenterpriseinc1.10.13 of 3See more

cert-manager homeenterpriseinc 1.10.1

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.10.1b5657161d2c2
stdlib@go1.19.3
1.26.10
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
stdlib@go1.19.3
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.10.164121721c665
stdlib@go1.19.3
1.26.10

Open the chart page →

7,396
homeassistanthomeenterpriseinc0.3.01 of 1See more

homeassistant homeenterpriseinc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2022.3.5565751f33794
stdlib@go1.17.1
1.26.10

Open the chart page →

9,543
photoprismhomeenterpriseinc0.8.01 of 1See more

photoprism homeenterpriseinc 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
photoprism/photoprism:20211010f4687352985a
stdlib@go1.17.1
1.26.10

Open the chart page →

3,266
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
stdlib@go1.19.8
1.26.10

Open the chart page →

18,925
honeydipperhoneydipperVerified publisher0.1.111 of 2See more

honeydipper honeydipper 0.1.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/redis:5fc5ecd863862
stdlib@go1.16.7
1.26.10

Open the chart page →

2,873
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
stdlib@go1.21.10
1.26.10

Open the chart page →

4,639
universal-web-apphotrungnhanVerified publisher0.2.61 of 2See more

universal-web-app hotrungnhan 0.2.6

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
traefik/whoami:latestc4717a8d1f01
stdlib@go1.26.5
1.26.10

Open the chart page →

387
hoverflyhoverflyVerified publisher0.2.01 of 1See more

hoverfly hoverfly 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
spectolabs/hoverfly:v1.12.13250986d58ed4
stdlib@go1.27.0
1.26.10

Open the chart page →

326
paperlesshpVerified publisher0.1.23 of 5See more

paperless hp 0.1.2

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/tika:3.3.1.090b7fa1dc018
stdlib@go1.26.2
1.26.10
gotenberg/gotenberg:8.3467097317623a
stdlib@go1.26.2
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rustls-webpki@0.103.13
stdlib@go1.24.4
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

38,296
wallabaghpVerified publisher0.1.71 of 1See more

wallabag hp 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.10

Open the chart page →

1,573
hammerspace-csihscsi1.2.86 of 6See more

hammerspace-csi hscsi 1.2.8

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
stdlib@go1.24.4
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.8.0a399393ff5bd
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.0.25f051159c95f
stdlib@go1.22.5
1.26.10

Open the chart page →

8,009
eoloplanthttpd-eoloplant0.1.03 of 7See more

eoloplant httpd-eoloplant 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
stdlib@go1.18.10
1.26.10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.10
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.10

Open the chart page →

37,945

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
minio/operator:v4.3.754393e03f3b2
stdlib@go1.17.4
1.26.10
3
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
stdlib@go1.13.11
1.26.10
3
natsio/nats-account-server:1.0.0a3381560aab6
stdlib@go1.16.6
1.26.10
3
natsio/nats-box:0.20.0d2f04223f40e
stdlib@go1.26.6
1.26.10
3
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.10
3
natsio/nats-server-config-reloader:0.13.0b3359eeb10bf
stdlib@go1.20.5
1.26.10
3
natsio/prometheus-nats-exporter:0.17.326c826662ac8
stdlib@go1.24.2
1.26.10
3
oamdev/kube-webhook-certgen:v2.4.1231c423c2b17
stdlib@go1.17.11
1.26.10
3
oliver006/redis_exporter:v1.94.00842ef7110e6
stdlib@go1.27.2
1.26.10
3
opencsghq/postgres:15.19b98600564e07
stdlib@go1.24.6
1.26.10
3
opencsghq/stakater-reloader:v1.4.190491782f7bac
stdlib@go1.26.4
1.26.10
3
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
stdlib@go1.19.3
1.26.10
3
openebs/node-disk-operator:2.1.06afe2123c457
stdlib@go1.19.3
1.26.10
3
openebs/provisioner-localpv:3.5.0aea39e49bb97
stdlib@go1.19.13
1.26.10
3
openfga/openfga:latest:v1.22.09cf9a20af32a
ca-certificates@20260909-r2
stdlib@go1.26.8
20260909-r3
1.26.10
3
oryd/hydra:v2.2.02c93beb5e5f2
stdlib@go1.21.5
1.26.10
3
otel/opentelemetry-collector:latest310a800ad69e
stdlib@go1.26.8
1.26.10
3
pgsty/silo:RELEASE.2026-09-16T00-00-00Z635197cb9f36
stdlib@go1.27.1
1.26.10
3
pgsty/silo:RELEASE.2026-09-03T13-18-01Zb616a0cf8cb2
stdlib@go1.27.1
1.26.10
3
prom/alertmanager:v0.28.0d5155cfac40a
stdlib@go1.23.4
1.26.10
3
prom/memcached-exporter:v0.14.2d8a61419b841
stdlib@go1.21.5
1.26.10
3
prom/prometheus:v3.0.1565ee8650122
stdlib@go1.23.3
1.26.10
3
prom/prometheus:v2.19.0bfad037f95e5
stdlib@go1.14.4
1.26.10
3
prom/pushgateway:v1.2.00a9031142481
stdlib@go1.13.8
1.26.10
3
prom/pushgateway:v1.3.18305a33fb80a
stdlib@go1.15.6
1.26.10
3
prom/pushgateway:v1.0.1a5df60347882
stdlib@go1.13.5
1.26.10
3
prom/statsd-exporter:v0.18.0d23aca343b86
stdlib@go1.14.7
1.26.10
3
qingcloud/cloud-controller-manager:v1.4.1210f66b5df886
stdlib@go1.18.2
1.26.10
3
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
stdlib@go1.16.3
1.26.10
3
rancher/kubectl:v1.34.1090bef429ed1
stdlib@go1.24.6
1.26.10
3
rancher/system-upgrade-controller:v0.20.261b68d4372ba
stdlib@go1.26.8
1.26.10
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
stdlib@go1.19.4
1.26.10
3
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
stdlib@go1.21.3
1.26.10
3
signoz/zookeeper:3.7.1fcc4a3288154
stdlib@go1.21.2
1.26.10
3
solace/solace-pubsub-standard:latest59f2a6d8eaba
stdlib@go1.26.8
1.26.10
3
stakater/proxyinjector:v0.0.2383fef483d497
stdlib@go1.13.1
1.26.10
3
tykio/tyk-dashboard:v5.13.21161bd297135
stdlib@go1.26.7
1.26.10
3
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
stdlib@go1.26.7
1.26.10
3
tykio/tyk-k8s-bootstrap-post:v2.2.055b4d31c7a01
stdlib@go1.22.7
1.26.10
3
tykio/tyk-k8s-bootstrap-pre-delete:v2.2.01489b58f642b
stdlib@go1.22.7
1.26.10
3
tykio/tyk-k8s-bootstrap-pre-install:v2.2.0205215b815a4
stdlib@go1.22.7
1.26.10
3
vikunja/vikunja:0.24.6ed1f3ed467fe
stdlib@go1.23.4
1.26.10
3
wallabag/wallabag:2.6.144a527e027e0d
stdlib@go1.25.1
1.26.10
3
yugabytedb/yugabyte:2026.1.2.0-b137b6dba322c734
stdlib@go1.26.7
1.26.10
3
gcr.io/trillian-opensource-ci/db_server2a685a38dd01
stdlib@go1.18.2
1.26.10
3
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
stdlib@go1.25.11
1.26.10
3
ghcr.io/cloudnative-pg/cloudnative-pg:1.25.0a27779ed1085
stdlib@go1.23.4
1.26.10
3
ghcr.io/coder/coder:v2.38.1fcddd64d5f08
stdlib@go1.26.8
1.26.10
3
ghcr.io/devplayer0/kubelan:0.2.3b776dae45d08
stdlib@go1.16.5
1.26.10
3
ghcr.io/external-secrets/external-secrets:v2.13.0f799d87a6a95
stdlib@go1.27.2
1.26.10
3

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.