StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,294
of 18,232 indexed, latest versions
Container images
6,212
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,104
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars
ChartLatestAffected imagesRadar Score
vault-secrets-webhookvault-secrets-webhookVerified publisher1.23.11 of 1See more

vault-secrets-webhook vault-secrets-webhook 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-secrets-webhook:v1.23.198baf045a1c9
stdlib@go1.26.4
1.26.10

Open the chart page →

888
athens-proxyvolker-raschekVerified publisher2.1.01 of 1See more

athens-proxy volker-raschek 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gomods/athens:v0.17.10f61d1e62359
stdlib@go1.25.9
1.26.10

Open the chart page →

2,930
wg-easywg-easyVerified publisher0.1.61 of 1See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:150e7bc9d34e86
stdlib@go1.26.3
1.26.10

Open the chart page →

1,366
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
stdlib@go1.13.10
1.26.10

Open the chart page →

15,242
nfs-server-provisionerwso21.1.01 of 1See more

nfs-server-provisioner wso2 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.26.10

Open the chart page →

4,163
yunikornyunikornVerified publisher1.10.03 of 3See more

yunikorn yunikorn 1.10.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/yunikorn:scheduler-1.10.049fc54894fdf
stdlib@go1.26.7
1.26.10
apache/yunikorn:web-1.10.090e6a62a578a
stdlib@go1.26.7
1.26.10
apache/yunikorn:admission-1.10.095c6b951f38a
stdlib@go1.26.7
1.26.10

Open the chart page →

656
matrixzekker6Verified publisher3.34.01 of 4See more

matrix zekker6 3.34.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.163.141d8a4edfdc6
stdlib@go1.24.4
1.26.10

Open the chart page →

6,555
zenmlzenml0.98.01 of 1See more

zenml zenml 0.98.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.98.06a03880ace49
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10

Open the chart page →

1,390
eshoponabpabp-charts1.0.02 of 15See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
stdlib@go1.18.2
1.26.10
library/postgres:14.13162a6ead070
stdlib@go1.16.7
1.26.10

Open the chart page →

24,395
moon2aerokube2.8.23 of 3See more

moon2 aerokube 2.8.2

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/aerokube/moon:2.8.2072f3c5592dc
stdlib@go1.27.1
1.26.10
quay.io/aerokube/moon-conf:2.8.235c465ab25d8
stdlib@go1.27.1
1.26.10
quay.io/aerokube/moon-ui:2.8.2f374d0b9953b
stdlib@go1.27.1
1.26.10

Open the chart page →

684
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.2.0-debian-11-r113e65a6b89e38
stdlib@go1.18.2
1.26.10

Open the chart page →

5,022
pod-gatewayangelnu7.1.11 of 2See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/angelnu/gateway-admision-controller:v3.12.06f6ab596afd5
stdlib@go1.24.2
1.26.10

Open the chart page →

1,897
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.10086c9d9ea1e37c4
stdlib@go1.27.1
1.26.10

Open the chart page →

1,135
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
stdlib@go1.16.3
1.26.10

Open the chart page →

5,151
aperture-controlleraperture2.34.03 of 5See more

aperture-controller aperture 2.34.0

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
fluxninja/aperture-operator:2.34.0356d7aa86632
stdlib@go1.21.5
1.26.10
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
quay.io/prometheus/prometheus:v2.33.591100b06e86d
stdlib@go1.17.8
1.26.10

Open the chart page →

7,664
k8upappuio2.0.51 of 1See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
stdlib@go1.18
1.26.10

Open the chart page →

4,474
limesurveyarea-42Verified publisher0.3.1011 of 2See more

limesurvey area-42 0.3.101

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
stdlib@go1.25.0
1.26.10

Open the chart page →

5,669
artifact-controllerartifact-controllerOfficialVerified publisher0.9.11 of 1See more

artifact-controller artifact-controller 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kargops/artifact-controller:v0.9.10b42a68e9e27
stdlib@go1.26.7
1.26.10

Open the chart page →

239
athens-proxyathens-chartsOfficialVerified publisher0.19.01 of 1See more

athens-proxy athens-charts 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gomods/athens:v0.20.03620ce7230c7
stdlib@go1.26.9
1.26.10

Open the chart page →

793
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
stdlib@go1.16.9
1.26.10

Open the chart page →

10,545
prometheusaveshaVerified publisher19.3.04 of 4See more

prometheus avesha 19.3.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.26.10
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
stdlib@go1.19.3
1.26.10
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
stdlib@go1.19.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.7.0a15ca437f230
stdlib@go1.19.3
1.26.10

Open the chart page →

8,909
aws-calicoaws0.3.111 of 1See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/tigera/operator:v1.20.1379efe0c2541
stdlib@go1.15.2
1.26.10

Open the chart page →

3,537
aws-node-termination-handleraws-node-termination-handler0.27.61 of 1See more

aws-node-termination-handler aws-node-termination-handler 0.27.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.25.69ad31fb4e5be
stdlib@go1.25.8
1.26.10

Open the chart page →

971
snapschedulerbackube-helm-chartsVerified publisher3.5.02 of 2See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/backube/snapscheduler:3.5.035ac95c51780
stdlib@go1.24.3
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.10

Open the chart page →

2,351
yataibentomlVerified publisher1.1.131 of 1See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
stdlib@go1.20.7
1.26.10

Open the chart page →

2,681
yatai-deploymentbentomlVerified publisher1.1.211 of 2See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
stdlib@go1.19.13
1.26.10

Open the chart page →

1,918
boundaryboundaryVerified publisher0.1.01 of 1See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/boundary:0.21.037bf86488b74
stdlib@go1.25.1
1.26.10

Open the chart page →

2,272
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
stdlib@go1.19.12
1.26.10

Open the chart page →

68,421
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
stdlib@go1.21.4
1.26.10

Open the chart page →

2,664
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
stdlib@go1.19.9
1.26.10

Open the chart page →

2,488
geoservercloudcamptocamp23.0.27 of 7See more

geoservercloud camptocamp2 3.0.2

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.2244572a8e01d
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-gwc:3.0.25f81a737aff3
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-rest:3.0.2c14c7be99fd7
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wcs:3.0.254cfe408a3ef
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-webui:3.0.23d01d85dcff4
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wfs:3.0.267be5bf231e1
stdlib@go1.27.1
1.26.10
geoservercloud/geoserver-cloud-wms:3.0.26243931b4cc7
stdlib@go1.27.1
1.26.10

Open the chart page →

5,930
version-checkercert-managerVerified publisher0.11.01 of 1See more

version-checker cert-manager 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.11.0eae9a374d22f
stdlib@go1.26.4
1.26.10

Open the chart page →

614
cert-managerchoerodon1.8.24 of 4See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.2c010246124c2
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
stdlib@go1.17.11
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
stdlib@go1.17.11
1.26.10

Open the chart page →

11,999
popeyechristianhuthVerified publisher2.4.31 of 1See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
stdlib@go1.23.5
1.26.10

Open the chart page →

2,006
sbom-operatorckotzbauerVerified publisher0.48.01 of 1See more

sbom-operator ckotzbauer 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/sbom-operator:0.47.02916a55055f1
stdlib@go1.26.9
1.26.10

Open the chart page →

10
hellocloudechoVerified publisher0.1.21 of 1See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudecho/hello:0.1.0f76ede067ab9
stdlib@go1.16.6
1.26.10

Open the chart page →

2,829
cloudflare-exportercloudflare-exporter0.2.31 of 1See more

cloudflare-exporter cloudflare-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/lablabs/cloudflare_exporter:0.0.1670d74ec46602
stdlib@go1.22.3
1.26.10

Open the chart page →

1,396
ghostcloudpirates-ghostVerified publisher0.20.323 of 3See more

ghost cloudpirates-ghost 0.20.32

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/ghost:6.72.0c0d83a8d4522
stdlib@go1.26.4
1.26.10
library/mariadb:13.0.20e4bb0f339fe
stdlib@go1.24.6
1.26.10
library/mariadb:12.0.25b6a1eac15b8
stdlib@go1.18.2
1.26.10

Open the chart page →

9,293
cloudprobercloudproberOfficialVerified publisher1.14.281 of 1See more

cloudprober cloudprober 1.14.28

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudprober/cloudprober:v0.14.60902d8adf871
stdlib@go1.26.6
1.26.10

Open the chart page →

281
openstack-manila-csicloud-provider-openstack2.37.15 of 5See more

openstack-manila-csi cloud-provider-openstack 2.37.1

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/manila-csi-plugin:v1.37.146373e7e6a4b
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
stdlib@go1.24.6
1.26.10

Open the chart page →

5,389
dumpscriptcloudscriptVerified publisher1.11.01 of 1See more

dumpscript cloudscript 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.45-alpine-edge99732098a0f3
stdlib@go1.27.1
1.26.10

Open the chart page →

262
clowardenclowarden0.2.32 of 4See more

clowarden clowarden 0.2.3

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.26.10
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
stdlib@go1.25.3
1.26.10

Open the chart page →

7,348
cluster-manager-servercluster-manager-server1.8.01 of 1See more

cluster-manager-server cluster-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server:1.8.0364b3ff0fcb7
stdlib@go1.24.5
1.26.10

Open the chart page →

1,308
cluster-registrycluster-registry-controller0.2.121 of 1See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cisco-open/cluster-registry-controller:v0.2.12937eff91df1e
stdlib@go1.18
1.26.10

Open the chart page →

2,809
coder-observabilitycoder-observabilityVerified publisher0.8.013 of 21See more

coder-observability coder-observability 0.8.0

13 of the 21 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
burningalchemist/sql_exporter:latest3dabcb7c74e9
stdlib@go1.26.9
1.26.10
grafana/alloy:v1.20.12aa2099af76c
stdlib@go1.26.7
1.26.10
grafana/grafana:10.4.19a9043254ba16
stdlib@go1.24.3
1.26.10
grafana/loki:3.1.0d947e68a84d9
stdlib@go1.22.2
1.26.10
grafana/loki-canary:3.1.039baf6d67f85
stdlib@go1.22.2
1.26.10
prom/memcached-exporter:v0.14.2d8a61419b841
stdlib@go1.21.5
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.93.00ccb22ca9f3f
stdlib@go1.26.5
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.94.0142a1f11df8d
stdlib@go1.26.8
1.26.10
quay.io/prometheus/alertmanager:v0.33.19e082985f56f
stdlib@go1.26.4
1.26.10
quay.io/prometheus/node-exporter:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
quay.io/prometheus/prometheus:v3.13.2508729e0e2d1
stdlib@go1.26.5
1.26.10
quay.io/prometheuscommunity/postgres-exporter:latestac5ec343104f
stdlib@go1.26.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.10

Open the chart page →

15,068
convertigoconvertigoOfficialVerified publisher8.4.62 of 5See more

convertigo convertigo 8.4.6

2 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
stdlib@go1.21.5
1.26.10
timescale/timescaledb:latest-pg166f139d560429
stdlib@go1.26.2
1.26.10

Open the chart page →

79,283
core-dump-handlercore-dump-handler9.0.01 of 1See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
stdlib@go1.16.6
1.26.10

Open the chart page →

4,346
cosmocosmo-platformOfficialVerified publisher0.22.16 of 10See more

cosmo cosmo-platform 0.22.1

6 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
stdlib@go1.24.6
1.26.10
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
stdlib@go1.21.10
1.26.10
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
stdlib@go1.22.3
1.26.10
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
stdlib@go1.23.6
1.26.10
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
stdlib@go1.23.6
1.26.10
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
stdlib@go1.20.7
1.26.10

Open the chart page →

94,494
cosmotech-apicosmotech-apiVerified publisher5.3.11 of 1See more

cosmotech-api cosmotech-api 5.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-api:5.3.12ad55850c106
ca-certificates@20260909-r2
20260909-r3

Open the chart page →

90
ocularcrashoverride-helm-chartsVerified publisher0.5.21 of 1See more

ocular crashoverride-helm-charts 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/crashappsec/ocular-controller:v0.4.122060cf61e0e
stdlib@go1.26.6
1.26.10

Open the chart page →

269

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
wallarm/aih-webhook:2.16.0d9f9c4a26964
stdlib@go1.26.9
1.26.10
1
wallarm/api-firewall:v0.9.64d45db0ff240
stdlib@go1.25.8
1.26.10
1
wallarm/ebpf-agent:0.11.0-rc0c8920e60c726
stdlib@go1.22.1
1.26.10
1
wallarm/gateway-control-plane:0.2.0a321bc974a19
stdlib@go1.24.13
1.26.10
1
wallarm/ingress-controller:5.3.10.1a1fecfdf987e
stdlib@go1.23.1
1.26.10
1
wallarm/ingress-controller:4.8.0-1a591b9c91570
stdlib@go1.20.5
1.26.10
1
wallarm/ingress-python:4.6.0-15cb2ae08b40f
stdlib@go1.18.2
1.26.10
1
wallarm/ingress-ruby:4.2.1-195ea2632326c
stdlib@go1.18.3
1.26.10
1
wallarm/ingress-ruby:4.6.0-1aecdb35c4def
stdlib@go1.18.3
1.26.10
1
wallarm/kong-kubernetes-ingress-controller:2.8b55ff6cecbd5
stdlib@go1.19.4
1.26.10
1
wallarm/node-helpers:5.0.2-1097cadc42336
stdlib@go1.22.7
1.26.10
1
wallarm/node-helpers:6.13.2290a87f01799
stdlib@go1.26.8
1.26.10
1
wallarm/node-helpers:6.13.3437b5ce6ec17
stdlib@go1.26.9
1.26.10
1
wallarm/node-helpers:6.10.1aecd88b24c51
stdlib@go1.25.7
1.26.10
1
wallarm/node-native-processing:0.23.07db2da8fce0b
stdlib@go1.26.0
1.26.10
1
wallarm/node-native-processing:0.25.10cd48c2bd8363
stdlib@go1.27.2
1.26.10
1
wallarm/node-next:0.5.24314f3d2b918
stdlib@go1.22.7
1.26.10
1
wateim/lighthouse-launch:latest2520149ee574
stdlib@go1.23.8
1.26.10
1
wavefronthq/prometheus-storage-adapter:latestded77b38c7c6
stdlib@go1.18
1.26.10
1
wavefronthq/wavefront-hpa-adapter:0.9.12af5fef9a4768
stdlib@go1.18
1.26.10
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
stdlib@go1.14.12
1.26.10
1
wazuh/wazuh-manager:4.4.121994f40e0da
stdlib@go1.18.9
1.26.10
1
wazuh/wazuh-manager:4.14.45a065930682d
stdlib@go1.14.12
1.26.10
1
wazuh/wazuh-manager:4.14.3f09282d281f6
stdlib@go1.14.12
1.26.10
1
weaveworks/flagger:1.0.0-rc.5174307de1b36
stdlib@go1.14.2
1.26.10
1
weaveworks/flagger:0.19.0a9c2e9df4227
stdlib@go1.13.1
1.26.10
1
weaveworks/flagger-loadtester:0.9.03cdac6928a63
stdlib@go1.13.1
1.26.10
1
webdevops/azure-janitor:24.9.02446baee7b69
stdlib@go1.23.1
1.26.10
1
webdevops/azure-keyvault-exporter:24.9.1f333704ecd60
stdlib@go1.23.1
1.26.10
1
webdevops/azure-loganalytics-exporter:25.12.0051845d06d85
stdlib@go1.25.5
1.26.10
1
webdevops/azure-metrics-exporter:25.12.01d3b453fba99
stdlib@go1.25.5
1.26.10
1
webdevops/azure-resourcegraph-exporter:24.9.0381136dda026
stdlib@go1.23.1
1.26.10
1
webdevops/azure-resourcemanager-exporter:26.1.0d3e1842ad419
stdlib@go1.25.5
1.26.10
1
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
stdlib@go1.22.5
1.26.10
1
webdevops/kube-pool-manager:24.9.04fad7e14ad67
stdlib@go1.23.1
1.26.10
1
webdevops/pagerduty-exporter:25.12.183b95faf10a0
stdlib@go1.25.5
1.26.10
1
webhookrelay/webhookrelay-operator:0.8.0afffa826f068
ca-certificates@20260611-r1
stdlib@go1.27.1
20260909-r3
1.26.10
1
weblate/weblate:2026.10.1.26663a7c8b444
rustls-webpki@0.103.14
webpki-root-certs@1.0.9
0.103.16
1.0.10
1
weblate/weblate:3.11.3-182848df56ecd
stdlib@go1.13.5
1.26.10
1
wernight/ngrok:latestd211f29ebcfe
stdlib@go1.21.6
1.26.10
1
willnorris/imageproxy:latest21d0c90f4c31
stdlib@go1.16.8
1.26.10
1
wistefan/vcbackend:0.0.13bd436164b51
stdlib@go1.18.3
1.26.10
1
wolveix/satisfactory-server:v1.9.1199be1064b18
stdlib@go1.18.1
1.26.10
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
stdlib@go1.18.1
1.26.10
1
wolveix/satisfactory-server:latestac252dba4165
stdlib@go1.18.1
1.26.10
1
wolveix/satisfactory-server:latest:v1.9.10e103700ae6ae
stdlib@go1.18.1
1.26.10
1
woodpeckerci/woodpecker-agent:v3.19.0f85f163e0949
stdlib@go1.27.1
1.26.10
1
woodpeckerci/woodpecker-server:v3.19.06ca167a3c58b
stdlib@go1.27.1
1.26.10
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
stdlib@go1.20.12
1.26.10
1
wuhan005/forklift:daemon4e6da210e449
stdlib@go1.19.8
1.26.10
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.