StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,288
of 18,232 indexed, latest versions
Container images
6,198
deployed by those charts
Fix available
6 of 7
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,288 of 18,232 indexed charts deploy, on 6,198 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+209 more1.26.106,092
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3118
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1690
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1065
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+2 more0.26.119
golang-1.19deb1.19.8-2no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,288 by stars
ChartLatestAffected imagesRadar Score
thanosthanos-communityOfficialVerified publisher0.47.31See more

thanos thanos-community 0.47.3

1 container image this version deploys carries CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
stdlib@go1.26.5
1.26.10

Open the chart page →

—
akhqakhq0.28.01 of 1See more

akhq akhq 0.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
tchiotludo/akhq:0.28.0c2824dc2ae44
stdlib@go1.26.5
1.26.10

Open the chart page →

2,403
pulsarapache4.8.06 of 10See more

pulsar apache 4.8.0

6 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
stdlib@go1.25.7
1.26.10
grafana/grafana:12.4.1e932bd6ed0e0
stdlib@go1.25.8
1.26.10
rancher/kubectl:v1.25.085a0d1148784
stdlib@go1.19
1.26.10
victoriametrics/operator:v0.68.3f52e1bd679cb
stdlib@go1.25.8
1.26.10
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

14,055
miniocloudpirates-minioVerified publisher0.14.01 of 1See more

minio cloudpirates-minio 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
stdlib@go1.25.7
1.26.10

Open the chart page →

1,781
vertical-pod-autoscalercowboysysopVerified publisher11.1.14 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
stdlib@go1.21.8
1.26.10
registry.k8s.io/autoscaling/vpa-admission-controller:1.5.19928d59477fb
stdlib@go1.24.6
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.5.1e629c61b75eb
stdlib@go1.24.6
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.5.1cba2aa4b3239
stdlib@go1.24.6
1.26.10

Open the chart page →

9,453
eclipse-cheeclipse-cheVerified publisher7.124.01 of 1See more

eclipse-che eclipse-che 7.124.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/eclipse/che-operator:7.124.0489d858cd5d0
stdlib@go1.26.5
1.26.10

Open the chart page →

1,071
pyroscopegrafana2.4.12 of 3See more

pyroscope grafana 2.4.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.19.2b8ec653c4423
stdlib@go1.26.7
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
stdlib@go1.25.9
1.26.10

Open the chart page →

2,039
botkubeinfracloudioVerified publisher1.14.01 of 1See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
stdlib@go1.21.13
1.26.10

Open the chart page →

1,705
operatorminio-operator7.1.11 of 1See more

operator minio-operator 7.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/minio/operator:v7.1.1cd587f60c43d
stdlib@go1.24.2
1.26.10

Open the chart page →

1,475
unleashunleash5.6.91 of 2See more

unleash unleash 5.6.9

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.10

Open the chart page →

2,475
tetragonciliumOfficialVerified publisher1.7.12 of 3See more

tetragon cilium 1.7.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
stdlib@go1.26.7
1.26.10
quay.io/cilium/tetragon-operator:v1.7.1cd8b71f6860e
stdlib@go1.26.7
1.26.10

Open the chart page →

718
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
stdlib@go1.15
1.26.10

Open the chart page →

5,702
difydify-helmVerified publisher0.39.05 of 11See more

dify dify-helm 0.39.0

5 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.11-debian-11-r121161dcd293a0
stdlib@go1.19.9
1.26.10
langgenius/dify-agent-local-sandbox:1.17.0316279a82ead
stdlib@go1.26.7
1.26.10
langgenius/dify-api:1.17.052be6088dd84
stdlib@go1.26.5
1.26.10
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
rustls-webpki@0.103.13
stdlib@go1.26.5
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
langgenius/dify-sandbox:0.2.15750e1111426e
stdlib@go1.24.13
1.26.10

Open the chart page →

63,621
k6-operatorgrafana4.7.01 of 1See more

k6-operator grafana 4.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/grafana/k6-operator:controller-v1.7.0f56440a22e8f
stdlib@go1.27.1
1.26.10

Open the chart page →

161
rabbitmqgroundhog2k2.3.101 of 2See more

rabbitmq groundhog2k 2.3.10

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/rabbitmq:4.4.071be6ca71cd3
stdlib@go1.27.1
1.26.10

Open the chart page →

1,122
telegrafinfluxdata1.8.781 of 1See more

telegraf influxdata 1.8.78

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/telegraf:1.40-alpined3b22c2bd211
stdlib@go1.27.1
1.26.10

Open the chart page →

244
kiali-serverkiali2.33.01 of 1See more

kiali-server kiali 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kiali/kiali:v2.33.0082246cfc99f
stdlib@go1.26.3
1.26.10

Open the chart page →

603
ingresskongOfficialVerified publisher0.24.01 of 2See more

ingress kong 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.10

Open the chart page →

1,037
vela-corekubevela1.11.03 of 3See more

vela-core kubevela 1.11.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oamdev/cluster-gateway:v1.9.0-alpha.25591e29d66a2
stdlib@go1.19.8
1.26.10
oamdev/kube-webhook-certgen:v2.4.1231c423c2b17
stdlib@go1.17.11
1.26.10
oamdev/vela-core:v1.11.095fa412c934e
stdlib@go1.23.8
1.26.10

Open the chart page →

7,085
oktetooktetoOfficialVerified publisher0.0.0-2026-09-287 of 10See more

okteto okteto 0.0.0-2026-09-28

7 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/okteto/backend:0.0.0-2026-09-28620932869db4
stdlib@go1.26.7
1.26.10
ghcr.io/okteto/buildkit:0.0.0-2026-09-2814527ca5d2a9
stdlib@go1.25.7
1.26.10
ghcr.io/okteto/daemon:0.0.0-2026-09-28a5ca067cb895
stdlib@go1.26.6
1.26.10
ghcr.io/okteto/ingress-nginx-chroot:0.0.0-2026-09-28d6730eb9831b
stdlib@go1.26.6
1.26.10
ghcr.io/okteto/okteto:3.23.1be99de7f8139
stdlib@go1.26.5
1.26.10
ghcr.io/okteto/registry:0.0.0-2026-09-2869131511501f
stdlib@go1.26.5
1.26.10
ghcr.io/okteto/reloader:0.0.0-2026-09-2804a3fce657c4
stdlib@go1.26.4
1.26.10

Open the chart page →

8,447
openbaoopenbaoVerified publisher0.30.12 of 2See more

openbao openbao 0.30.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:1.7.2ae3d307658b7
stdlib@go1.25.5
1.26.10
quay.io/openbao/openbao:2.7.071156a1c6623
stdlib@go1.27.1
1.26.10

Open the chart page →

1,924
hydraory0.64.02 of 2See more

hydra ory 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/hydra:v26.2.0ff67c7fb5f95
stdlib@go1.26.0
1.26.10
oryd/hydra-maester:v0.0.420a7a2bfd0e7d
stdlib@go1.26.3
1.26.10

Open the chart page →

2,174
prometheus-msteamsprometheus-msteams1.3.61 of 1See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
stdlib@go1.24.9
1.26.10

Open the chart page →

1,457
proxmox-csi-pluginproxmox-csi0.5.137 of 7See more

proxmox-csi-plugin proxmox-csi 0.5.13

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/proxmox-csi-controller:v0.21.08f344b70785f
stdlib@go1.27.2
1.26.10
ghcr.io/sergelogvinov/proxmox-csi-node:v0.21.03895d75356d5
stdlib@go1.27.2
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10

Open the chart page →

3,267
victoria-metrics-singlevictoriametricsVerified publisher0.49.01 of 1See more

victoria-metrics-single victoriametrics 0.49.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.154.04bd592341587
stdlib@go1.27.2
1.26.10

Open the chart page →

17
yourlsyourlsOfficialVerified publisher8.10.51 of 2See more

yourls yourls 8.10.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mariadb:latest2c14d1572dd0
stdlib@go1.26.9
1.26.10

Open the chart page →

2,340
apisix-ingress-controllerapisix1.4.01 of 2See more

apisix-ingress-controller apisix 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
stdlib@go1.26.5
1.26.10

Open the chart page →

2,278
volsyncbackube-helm-chartsVerified publisher0.16.01 of 1See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/backube/volsync:0.16.00d03a6aad575
stdlib@go1.25.11
1.26.10

Open the chart page →

1,993
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
stdlib@go1.16.8
1.26.10

Open the chart page →

5,511
headscalegabe565Verified publisher0.16.01 of 2See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
stdlib@go1.23.4
1.26.10

Open the chart page →

2,523
gocdgocdOfficialVerified publisher2.18.12 of 2See more

gocd gocd 2.18.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gocd/gocd-agent-wolfi:v26.1.0753b9f696f45
ca-certificates@20260413-r0
20260909-r3
gocd/gocd-server:v26.1.0720d1012b93f
ca-certificates@20260413-r0
20260909-r3

Open the chart page →

1,830
oncallgrafana1.16.57 of 12See more

oncall grafana 1.16.5

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
stdlib@go1.22.4
1.26.10
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
stdlib@go1.17.8
1.26.10
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
stdlib@go1.18.2
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
stdlib@go1.16.9
1.26.10

Open the chart page →

24,509
k8sgpt-operatork8sgptOfficialVerified publisher0.2.292 of 2See more

k8sgpt-operator k8sgpt 0.2.29

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/k8sgpt-ai/k8sgpt-operator:v0.2.2982d0adcce816
stdlib@go1.26.5
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
stdlib@go1.24.2
1.26.10

Open the chart page →

1,880
node-feature-discoverynode-feature-discoveryOfficialVerified publisher0.20.01 of 1See more

node-feature-discovery node-feature-discovery 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/nfd/node-feature-discovery:v0.20.03f600513a463
stdlib@go1.27.2
1.26.10

Open the chart page →

140
openprojectopenproject-helm-chartsOfficialVerified publisher13.15.11 of 5See more

openproject openproject-helm-charts 13.15.1

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10

Open the chart page →

72,733
kratosory0.64.01 of 1See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/kratos:v26.2.02a13bb8d362c
stdlib@go1.26.0
1.26.10

Open the chart page →

1,339
sftpgosftpgoOfficialVerified publisher0.48.01 of 1See more

sftpgo sftpgo 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/drakkan/sftpgo:v2.7.59011fe608d33
stdlib@go1.25.12
1.26.10

Open the chart page →

1,751
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
stdlib@go1.14.12
1.26.10

Open the chart page →

13,741
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
stdlib@go1.21.5
1.26.10

Open the chart page →

2,286
zabbixcetic3.1.33 of 5See more

zabbix cetic 3.1.3

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:1414bfab572eec
stdlib@go1.24.6
1.26.10
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
stdlib@go1.18.1
1.26.10
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
stdlib@go1.18.1
1.26.10

Open the chart page →

38,076
chatwootchatwootVerified publisher2.0.272 of 3See more

chatwoot chatwoot 2.0.27

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:6.2.7-debian-11-r37788b908dd0d
stdlib@go1.18.2
1.26.10
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
stdlib@go1.16.7
1.26.10

Open the chart page →

9,200
plugin-barman-cloudcloudnative-pgVerified publisher0.8.11 of 1See more

plugin-barman-cloud cloudnative-pg 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/plugin-barman-cloud:v0.15.1c75acad19a36
stdlib@go1.26.6
1.26.10

Open the chart page →

249
csi-driver-smbcsi-driver-smbVerified publisher1.20.35 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.0a2d40c1c3ccb
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
stdlib@go1.26.4
1.26.10

Open the chart page →

4,996
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
stdlib@go1.15
1.26.10

Open the chart page →

6,433
gadgetgadgetOfficialVerified publisher0.57.01 of 1See more

gadget gadget 0.57.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/inspektor-gadget/inspektor-gadget:v0.57.063dea10c1e9e
stdlib@go1.26.6
1.26.10

Open the chart page →

276
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
stdlib@go1.17.1
1.26.10

Open the chart page →

9,560
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
stdlib@go1.19.8
1.26.10

Open the chart page →

7,931
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
google/cloud-sdk:alpine9c32b1ffea1f
stdlib@go1.26.6
1.26.10

Open the chart page →

8,889
hpe-csi-driverhpe-storageVerified publisher3.3.013 of 14See more

hpe-csi-driver hpe-storage 3.3.0

13 of the 14 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/hpestorage/alletra-9000-primera-and-3par-csp:v3.3.0046215e41416
stdlib@go1.26.7
1.26.10
quay.io/hpestorage/alletrastoragemp-b10000-nfs-csp:v1.3.0efaca660f9f0
stdlib@go1.26.7
1.26.10
quay.io/hpestorage/alletrastoragemp-x10000-nfs-csp:v1.1.0043bb2ddb642
stdlib@go1.26.7
1.26.10
quay.io/hpestorage/csi-driver:v3.3.0e58e22427b38
stdlib@go1.26.7
1.26.10
quay.io/hpestorage/csi-extensions:v1.3.0df65cea35805
stdlib@go1.26.7
1.26.10
quay.io/hpestorage/volume-group-provisioner:v1.1.09ba017780f80
stdlib@go1.26.7
1.26.10
quay.io/hpestorage/volume-group-snapshotter:v1.1.0b26660528928
stdlib@go1.26.7
1.26.10
quay.io/hpestorage/volume-mutator:v1.4.03890d0b3aa89
stdlib@go1.26.7
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.6.042af0929bcd6
stdlib@go1.26.3
1.26.10

Open the chart page →

5,812
imgproxyimgproxy1.1.01 of 1See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
stdlib@go1.25.1
1.26.10

Open the chart page →

3,218

Container images carrying it

6,198 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/appscode/smtprelay:v0.0.479c9c76a78e6
stdlib@go1.23.2
1.26.10
1
ghcr.io/appscode/storage-metrics-server:v0.1.09cb4acb742a9
stdlib@go1.25.12
1.26.10
1
ghcr.io/appscode/supervisor:v0.0.21a58f56724da
stdlib@go1.19.4
1.26.10
1
ghcr.io/appscode/supervisor:v0.0.1223affde10a92
stdlib@go1.25.12
1.26.10
1
ghcr.io/appscode/taskqueue:v0.0.36877c958a3c6
stdlib@go1.25.5
1.26.10
1
ghcr.io/appscode/trickster:v2.0.0cdbbed831f28
stdlib@go1.25.5
1.26.10
1
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
stdlib@go1.20.2
1.26.10
1
ghcr.io/appscode/vcd-lb-gc:v0.1.0524c4045cd21
stdlib@go1.25.11
1.26.10
1
ghcr.io/appscode/virtual-secrets-server:v0.4.0efa03f4c9551
stdlib@go1.25.12
1.26.10
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
stdlib@go1.20.4
1.26.10
1
ghcr.io/arch-anes/homer-operator:0.3.404e3b7d1bfa6
stdlib@go1.26.7
1.26.10
1
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
stdlib@go1.23.10
1.26.10
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
stdlib@go1.22.7
1.26.10
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
stdlib@go1.22.5
1.26.10
1
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
stdlib@go1.24.2
1.26.10
1
ghcr.io/ashvinbambhaniya/nexus-tasks-backend:2.0.0f80349eb018b
stdlib@go1.26.0
1.26.10
1
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
stdlib@go1.26.1
1.26.10
1
ghcr.io/astradns/astradns-operator:v0.2.909e58b62416a
stdlib@go1.26.1
1.26.10
1
ghcr.io/astriaorg/astria-indexer:0.1.05cf1e5709820
stdlib@go1.23.1
1.26.10
1
ghcr.io/astriaorg/astria-indexer-api:0.1.03490d9900af1
stdlib@go1.23.1
1.26.10
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
stdlib@go1.20.12
1.26.10
1
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
stdlib@go1.22.12
1.26.10
1
ghcr.io/astriaorg/ria-faucet:0.0.1a06c8ebef427
stdlib@go1.17.13
1.26.10
1
ghcr.io/astriaorg/seq-faucet:0.9.0bf3cb9b505b6
stdlib@go1.22.6
1.26.10
1
ghcr.io/atolat/open-cache:latestd6105dd73eb4
stdlib@go1.25.8
1.26.10
1
ghcr.io/atrox/alertmanager-discord:v1.0.0ac011a4b6df1
stdlib@go1.20.5
1.26.10
1
ghcr.io/attestkeep/attestkeep-k8s:1.3.71fbf69c89003
stdlib@go1.26.4
1.26.10
1
ghcr.io/aureq/cert-manager-webhook-ovh:0.9.184c1afb84579d
stdlib@go1.27.2
1.26.10
1
ghcr.io/aureum-cloud/cloudflare-ddns:latestaeb75d1605f4
stdlib@go1.23.12
1.26.10
1
ghcr.io/aureum-cloud/frp-operator:v1.0.196b01d7e7025
stdlib@go1.24.13
1.26.10
1
ghcr.io/authelia/authelia:4.39.248f428b06bb07
stdlib@go1.27.1
1.26.10
1
ghcr.io/autobrr/autobrr:v1.10.0d4022cd32df5
stdlib@go1.19.3
1.26.10
1
ghcr.io/autobrr/qui:v1.14.110b7945d4f09
stdlib@go1.25.7
1.26.10
1
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
stdlib@go1.22.1
1.26.10
1
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox:latest7af2216c7b9e
rustls-webpki@0.103.13
stdlib@go1.26.4
webpki-root-certs@1.0.7
0.103.16
1.26.10
1.0.10
1
ghcr.io/avistotelecom/kubebrowser:0.10.0a354b8dc7e6a
ca-certificates@20251003-r3
stdlib@go1.24.1
20260909-r3
1.26.10
1
ghcr.io/axonops/axonops-developer-operator:v0.1.0b3d6600c8ba5
stdlib@go1.22.10
1.26.10
1
ghcr.io/axonops/axonops-operator:0.1.0e0cdb993f0b1
stdlib@go1.25.9
1.26.10
1
ghcr.io/b100to/idle-reaper:0.1.447b4a0e091f0
stdlib@go1.26.7
1.26.10
1
ghcr.io/bamaas/gofit:0.0.132b6a174b419
stdlib@go1.22.11
1.26.10
1
ghcr.io/bank-vaults/bank-vaults:v1.33.198b6ea2ed319
stdlib@go1.26.3
1.26.10
1
ghcr.io/bank-vaults/vault-secrets-webhook:v1.23.198baf045a1c9
stdlib@go1.26.4
1.26.10
1
ghcr.io/banzaicloud/kafka-operator:v0.25.113dcbc7ebfc6
stdlib@go1.19.11
1.26.10
1
ghcr.io/banzaicloud/kafka-operator:v0.20.2e341aefa9a90
stdlib@go1.17.6
1.26.10
1
ghcr.io/banzaicloud/logging-operator:3.17.623c2d4d54a64
stdlib@go1.17.9
1.26.10
1
ghcr.io/banzaicloud/log-socket:latesta514736d2d4d
stdlib@go1.18.6
1.26.10
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
stdlib@go1.22.10
1.26.10
1
ghcr.io/bbdsoftware/litellm-operator:1.1.2167a51113d90
stdlib@go1.26.2
1.26.10
1
ghcr.io/beezlabs-org/cloudflare-tunnel-operator:v0.1.09afcd070940f
stdlib@go1.17.12
1.26.10
1
ghcr.io/behappy-project/behappy-tencentcloud-exporter:0.1.3a0ba56e1501b
stdlib@go1.21.13
1.26.10
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.