StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,365
of 18,232 indexed, latest versions
Container images
6,268
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,365 of 18,232 indexed charts deploy, on 6,268 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,155
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3118
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1693
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1065
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,365 by stars
ChartLatestAffected imagesRadar Score
opa-kube-mgmtopa-kube-mgmtVerified publisher11.0.142 of 2See more

opa-kube-mgmt opa-kube-mgmt 11.0.14

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/kube-mgmt:11.0.14758ff3fb4727
stdlib@go1.25.0
1.26.10
openpolicyagent/opa:1.19.0852359995443
ca-certificates@20260413-r0
stdlib@go1.26.5
20260909-r3
1.26.10

Open the chart page →

1,272
redis-operatorot-container-kit0.27.01 of 1See more

redis-operator ot-container-kit 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/opstree/redis-operator:v0.27.025799bf10231
stdlib@go1.25.14
1.26.10

Open the chart page →

328
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.26.10

Open the chart page →

5,697
s3-proxyoxyno-zetaVerified publisher2.28.01 of 1See more

s3-proxy oxyno-zeta 2.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oxynozeta/s3-proxy:5.1.121115040e224
stdlib@go1.27.0
1.26.10

Open the chart page →

462
prefect-serverprefectVerified publisher2026.10.210327301 of 2See more

prefect-server prefect 2026.10.21032730

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prefecthq/prefect:3.9.0-python3.11e5f851d68db9
rustls-webpki@0.103.14
0.103.16

Open the chart page →

5,803
spirespiffeVerified publisher0.30.37 of 10See more

spire spiffe 0.30.3

7 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/spiffe/oidc-discovery-provider:1.15.3bb95f13c2b4e
stdlib@go1.26.6
1.26.10
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
stdlib@go1.24.0
1.26.10
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
stdlib@go1.25.3
1.26.10
ghcr.io/spiffe/spire-agent:1.15.341b0dcd8b258
stdlib@go1.26.6
1.26.10
ghcr.io/spiffe/spire-controller-manager:0.8.019e418e9d7f2
stdlib@go1.27.1
1.26.10
ghcr.io/spiffe/spire-server:1.15.34082f30d3e0d
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10

Open the chart page →

4,148
wireguardwireguardVerified publisher0.32.01 of 3See more

wireguard wireguard 0.32.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-wireguard-mgr:main0c457abd6400
stdlib@go1.27.2
1.26.10

Open the chart page →

294
altinity-clickhouse-operatoraltinity-clickhouse-operator0.27.43 of 3See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.4

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.27.4c60c872fedd8
stdlib@go1.26.8
1.26.10
altinity/metrics-exporter:0.27.4d257a72e6a6a
stdlib@go1.26.8
1.26.10
registry.k8s.io/kubectl:v1.36.36e4fce3c8365
stdlib@go1.26.5
1.26.10

Open the chart page →

956
bytebasebytebase1.1.51 of 1See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bytebase/bytebase:latest97637e4eefdc
stdlib@go1.27.1
1.26.10

Open the chart page →

470
cert-manager-csi-drivercert-managerOfficialVerified publisher0.16.03 of 3See more

cert-manager-csi-driver cert-manager 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-csi-driver:v0.16.09d13db6dc80e
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10

Open the chart page →

1,520
ansible-semaphorecloudhippieVerified publisher15.3.41 of 1See more

ansible-semaphore cloudhippie 15.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.17008dacd9f1ad
stdlib@go1.23.5
1.26.10

Open the chart page →

2,010
etcdcloudpirates-etcdVerified publisher0.8.91 of 1See more

etcd cloudpirates-etcd 0.8.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/etcd-development/etcd:v3.7.27c6c239825d0
stdlib@go1.26.8
1.26.10

Open the chart page →

264
rabbitmq-cluster-operatorcloudpirates-rabbitmq-cluster-operatorVerified publisher0.6.222 of 2See more

rabbitmq-cluster-operator cloudpirates-rabbitmq-cluster-operator 0.6.22

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.23.1a6794c391297
stdlib@go1.27.2
1.26.10
ghcr.io/rabbitmq/messaging-topology-operator:1.20.427988ec3a9f2
stdlib@go1.27.2
1.26.10

Open the chart page →

10
zookeepercloudpirates-zookeeperVerified publisher0.15.31 of 1See more

zookeeper cloudpirates-zookeeper 0.15.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/zookeeper:3.9.65bad433c7170
stdlib@go1.18.1
1.26.10

Open the chart page →

3,719
vertical-pod-autoscalercluster-autoscaler0.15.01 of 4See more

vertical-pod-autoscaler cluster-autoscaler 0.15.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10

Open the chart page →

1,734
codefreshcodefresh-onpremOfficialVerified publisher2.12.236 of 42See more

codefresh codefresh-onprem 2.12.23

6 of the 42 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
stdlib@go1.25.0
1.26.10
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
stdlib@go1.21.12
1.26.10
bitnamilegacy/nats:2.11.8-debian-12-r0fa0cfba6034a
stdlib@go1.24.6
1.26.10
ghcr.io/helm/chartmuseum:v0.16.648bc27743c08
stdlib@go1.25.13
1.26.10
quay.io/codefresh/dind:3.0.33feef93b16baa
stdlib@go1.26.9
1.26.10
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
stdlib@go1.23.8
1.26.10

Open the chart page →

70,067
contourcontour0.8.01 of 2See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/projectcontour/contour:v1.33.7d88264ed084a
stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64
1.26.10

Open the chart page →

1,995
couchbase-operatorcouchbaseVerified publisher2.93.02 of 2See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
couchbase/admission-controller:2.9.3bf2d2e87e45f
stdlib@go1.26.5
1.26.10
couchbase/operator:2.9.369a385b49e1f
stdlib@go1.26.5
1.26.10

Open the chart page →

1,456
dash0-operatordash0-operatorOfficialVerified publisher0.158.01 of 1See more

dash0-operator dash0-operator 0.158.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/dash0hq/operator-controller:0.158.01fd9ee8fcbba
stdlib@go1.27.2
1.26.10

Open the chart page →

15
aws-ebs-csi-driverdeliveryheroVerified publisher2.17.46 of 6See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
stdlib@go1.19.6
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
stdlib@go1.19.5
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
stdlib@go1.19.7
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
stdlib@go1.19.8
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
stdlib@go1.19.8
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
stdlib@go1.19.8
1.26.10

Open the chart page →

11,328
eck-exporterenixVerified publisher1.14.01 of 1See more

eck-exporter enix 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

352
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
stdlib@go1.18
1.26.10
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.26.10

Open the chart page →

8,996
kafkakubelauncherVerified publisher0.1.301 of 1See more

kafka kubelauncher 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned1cd80b53f4fd
stdlib@go1.26.7
1.26.10

Open the chart page →

1,382
memcachedkubelauncherVerified publisher0.1.351 of 1See more

memcached kubelauncher 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/memcacheddigest-pinned784fc5f58438
stdlib@go1.26.7
1.26.10

Open the chart page →

598
mysqlkubelauncherVerified publisher0.4.81 of 1See more

mysql kubelauncher 0.4.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mysqldigest-pinnedb9374a84635d
stdlib@go1.26.7
1.26.10

Open the chart page →

724
postgresqlkubelauncherVerified publisher0.5.11 of 1See more

postgresql kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/postgresqldigest-pinned7cc7ce4de0eb
stdlib@go1.26.7
1.26.10

Open the chart page →

695
kubernetes-replicatorkubernetes-replicator2.12.41 of 1See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.12.45dc9fc5ff59a
stdlib@go1.24.13
1.26.10

Open the chart page →

704
lakefslakefsVerified publisher1.12.461 of 1See more

lakefs lakefs 1.12.46

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
treeverse/lakefs:1.88.0237a17c6b2d8
stdlib@go1.26.8
1.26.10

Open the chart page →

573
coreneuvectorchartsVerified publisher2.11.33 of 5See more

core neuvectorcharts 2.11.3

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
neuvector/controller:5.6.3739682010f9a
stdlib@go1.27.2
1.26.10
neuvector/enforcer:5.6.33d176e9f1784
stdlib@go1.27.2
1.26.10
neuvector/scanner:6abb5b6e8be40
stdlib@go1.27.2
1.26.10

Open the chart page →

577
diunnicholaswildeVerified publisher1.0.01 of 1See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/diun:4.19.0c94e32b888e4
stdlib@go1.16.5
1.26.10

Open the chart page →

5,037
openclawopenclawVerified publisher1.118.02 of 2See more

openclaw openclaw 1.118.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
stdlib@go1.26.7
1.26.10
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.118.05c16346487a4
stdlib@go1.26.4
1.26.10

Open the chart page →

3,432
prometheus-stackdriver-exporterprometheus-communityVerified publisher5.2.01 of 1See more

prometheus-stackdriver-exporter prometheus-community 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prometheuscommunity/stackdriver-exporter:v0.19.0c0a0cbf76570
stdlib@go1.26.4
1.26.10

Open the chart page →

672
adguard-homerm3lVerified publisher0.25.01 of 2See more

adguard-home rm3l 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.513a143e6c071c
stdlib@go1.22.4
1.26.10

Open the chart page →

1,757
spegelspegelVerified publisher0.8.01 of 1See more

spegel spegel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/spegel-org/spegeldigest-pinnedb48194957bf9
stdlib@go1.27.2
1.26.10

Open the chart page →

82
supabasetokens-studioVerified publisher1.0.03 of 14See more

supabase tokens-studio 1.0.0

3 of the 14 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
stdlib@go1.23.2
1.26.10
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.10
supabase/gotrue:v2.163.0ba4ddc594b0b
stdlib@go1.22.3
1.26.10

Open the chart page →

89,811
woodpeckerwoodpecker-ci3.7.52 of 2See more

woodpecker woodpecker-ci 3.7.5

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
woodpeckerci/woodpecker-agent:v3.19.0f85f163e0949
stdlib@go1.27.1
1.26.10
woodpeckerci/woodpecker-server:v3.19.06ca167a3c58b
stdlib@go1.27.1
1.26.10

Open the chart page →

460
prometheus-operatorarldkaVerified publisher13.0.12 of 2See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
stdlib@go1.22.2
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.10

Open the chart page →

3,620
renterdartur9010Verified publisher1.4.42 of 2See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
stdlib@go1.22.4
1.26.10
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
stdlib@go1.26.0
1.26.10

Open the chart page →

79,137
nsqbeeinventor1.3.01 of 1See more

nsq beeinventor 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nsqio/nsq:v1.3.01a369c146af7
stdlib@go1.21.5
1.26.10

Open the chart page →

1,394
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
stdlib@go1.17.1
1.26.10

Open the chart page →

4,747
kube-prometheuschoerodon9.3.14 of 7See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.26.10
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
stdlib@go1.13.11
1.26.10
squareup/ghostunnel:v1.5.270f4cf270425
stdlib@go1.13.4
1.26.10
quay.io/prometheus/node-exporter:v1.0.08a3a33cad0bd
stdlib@go1.14.3
1.26.10

Open the chart page →

17,653
cloudflare-ddnscloudflareVerified publisher1.0.31 of 1See more

cloudflare-ddns cloudflare 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/aureum-cloud/cloudflare-ddns:latestaeb75d1605f4
stdlib@go1.23.12
1.26.10

Open the chart page →

693
timescaledbcloudpirates-timescaledbVerified publisher0.13.131 of 1See more

timescaledb cloudpirates-timescaledb 0.13.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
timescale/timescaledb:2.31.0-pg17b56a3f51991d
stdlib@go1.26.2
1.26.10

Open the chart page →

1,080
openstack-cinder-csicloud-provider-openstack2.37.17 of 7See more

openstack-cinder-csi cloud-provider-openstack 2.37.1

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/cinder-csi-plugin:v1.37.1ad3832945f1e
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.17.09b75b9ade162
stdlib@go1.24.6
1.26.10

Open the chart page →

6,901
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.25 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure:v1.8.255a0ad895a8f
stdlib@go1.26.9
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
stdlib@go1.26.5
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
stdlib@go1.25.7
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
stdlib@go1.26.3
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds:v1.5.6cb0112636dc4
stdlib@go1.26.3
1.26.10

Open the chart page →

5,174
paperless-ngxfmjstudios0.2.83 of 5See more

paperless-ngx fmjstudios 0.2.8

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/redis:latest33dbb7a4be39
stdlib@go1.26.9
1.26.10
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
stdlib@go1.21.5
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
stdlib@go1.19.8
1.26.10

Open the chart page →

35,881
minifluxgabe565Verified publisher0.9.21 of 2See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
stdlib@go1.23.5
1.26.10

Open the chart page →

2,072
cubestoregadsme1.2.01 of 3See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.24.061d866e93b56
stdlib@go1.19.9
1.26.10

Open the chart page →

3,984
grafana-operatorgrafana5.25.01 of 1See more

grafana-operator grafana 5.25.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/grafana/grafana-operator:v5.25.0bc572995823f
ca-certificates@20260413-r1
stdlib@go1.26.6
20260909-r3
1.26.10

Open the chart page →

261
kubernetes-ingresshaproxytechVerified publisher1.54.31 of 1See more

kubernetes-ingress haproxytech 1.54.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
haproxytech/kubernetes-ingress:3.2.1749e5bccffa05
stdlib@go1.27.2
1.26.10

Open the chart page →

17

Container images carrying it

6,268 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/candiddev/homechart:latest582a76ccdd9f
stdlib@go1.27.2
1.26.10
1
ghcr.io/caninehq/canine:latest70d5fa5a3fd8
stdlib@go1.26.8
1.26.10
1
ghcr.io/castai/images/clm:v0.141.226d34e7489bb
stdlib@go1.26.6
1.26.10
1
ghcr.io/castai/images/cpa/cpvpa:v0.8.14dd5743f37f60
stdlib@go1.26.5
1.26.10
1
ghcr.io/castai/images/evictor:v0.35.1510dba49d30fca
stdlib@go1.26.6
1.26.10
1
ghcr.io/castai/images/watchdog:v0.2.4828f70018e61ca
stdlib@go1.26.6
1.26.10
1
ghcr.io/cedar2025/xboard:latest2633d6085768
stdlib@go1.26.9
1.26.10
1
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
stdlib@go1.23.6
1.26.10
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
stdlib@go1.24.6
1.26.10
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
stdlib@go1.23.0
1.26.10
1
ghcr.io/certainty3452/dbtether:0.10.057c52804624e
stdlib@go1.26.9
1.26.10
1
ghcr.io/certforge-llc/certforge-issuer:0.2.430f73d255939
stdlib@go1.26.6
1.26.10
1
ghcr.io/cfgate/cfgate6cd934b258ee
stdlib@go1.27.1
1.26.10
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
stdlib@go1.22.10
1.26.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.65e735d875fe7
stdlib@go1.25.11
1.26.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
stdlib@go1.25.11
1.26.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
stdlib@go1.16.2
1.26.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
stdlib@go1.18
1.26.10
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
stdlib@go1.24.4
1.26.10
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.610f8e6caba67
stdlib@go1.25.11
1.26.10
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
stdlib@go1.20.8
1.26.10
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
stdlib@go1.18
1.26.10
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
stdlib@go1.24.4
1.26.10
1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
stdlib@go1.24.4
1.26.10
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
stdlib@go1.18
1.26.10
1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
stdlib@go1.20.8
1.26.10
1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.3bdb31f3121a2
stdlib@go1.25.11
1.26.10
1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.6ccdb92ca6d8e
stdlib@go1.25.11
1.26.10
1
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
stdlib@go1.16.7
1.26.10
1
ghcr.io/chilledornaments/redirector:latest94d48447d967
stdlib@go1.26.4
1.26.10
1
ghcr.io/chmouel/gosmee:v0.32.060b8db1f68cc
stdlib@go1.26.5
1.26.10
1
ghcr.io/chronicleprotocol/challenger-go:0.1.2c8d5a3c0e966
stdlib@go1.22.12
1.26.10
1
ghcr.io/chronicleprotocol/ghost:0.81.0417b664eee72
stdlib@go1.27.1
1.26.10
1
ghcr.io/chronicleprotocol/gofer:0.613915d2e41e04
stdlib@go1.24.6
1.26.10
1
ghcr.io/chronicleprotocol/oracles-updates-exporter:0.0.4992d0e793af6
stdlib@go1.19.13
1.26.10
1
ghcr.io/chronicleprotocol/spectre:0.68.34e872bc016e8
stdlib@go1.25.5
1.26.10
1
ghcr.io/chronicleprotocol/spire:0.68.379df4fb20322
stdlib@go1.25.5
1.26.10
1
ghcr.io/chrxmvtik/gitlab-mr-conform:0.6.0facdb9bf0394
stdlib@go1.25.9
1.26.10
1
ghcr.io/cisco-open/cluster-registry-controller:v0.2.12937eff91df1e
stdlib@go1.18
1.26.10
1
ghcr.io/ckotzbauer/access-managerdd584fcda0ff
stdlib@go1.22.1
1.26.10
1
ghcr.io/ckotzbauer/chekrf299baf467b5
stdlib@go1.17.3
1.26.10
1
ghcr.io/ckotzbauer/sbom-operator:0.47.02916a55055f1
stdlib@go1.26.9
1.26.10
1
ghcr.io/ckotzbauer/vulnerability-operator:0.28.18ae88c863cfec
stdlib@go1.26.9
1.26.10
1
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
stdlib@go1.23.7
1.26.10
1
ghcr.io/cleanuparr/cleanuparr:2.10.12d0212e4c66bd
stdlib@go1.22.2
1.26.10
1
ghcr.io/clickhouse/clickhouse-operator:v0.0.880ff894a42fb
stdlib@go1.27.1
1.26.10
1
ghcr.io/clm-cloud-solutions/kubebolt/api:2.4.19a93f8cce9cc
stdlib@go1.26.9
1.26.10
1
ghcr.io/clouddrove/syncerd:latest73a1bb038de3
stdlib@go1.26.7
1.26.10
1
ghcr.io/cloudeteer/m365-exporter:3.9.4eb604f3fb313
stdlib@go1.27.2
1.26.10
1
ghcr.io/cloudflare/ebpf_exporter:v2.3.075370b2ec2bb
stdlib@go1.21.5
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.