CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.001; 3rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5,365; of 18,232 indexed, latest versions
Container images: 6,268; deployed by those charts
Fix available: 6 of 9; affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,365 of 18,232 indexed charts deploy, on 6,268 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+211 more	1.26.10	6,155
ca-certificatesapk	20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more	20260909-r3	118
rustls-webpkicargo	0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more	0.103.16	93
webpki-root-certscargo	0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more	1.0.10	65
webpki-rootscargo	0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more	0.26.11	12
golang-1.19deb	1.19.8-2	no fix listed	1
kineapk	0.17.2-r3	no fix listed	1
kubernetes-1.37apk	1.37.1-r3	no fix listed	1
minioapk	0.20251015.172955-r10	0.20260922.192518-r5	1

OSV records: CGA-32jh-59ph-xj58 CGA-48x4-f6q2-2fc9 CGA-9w23-c7x9-6gcf CGA-pj7v-5f5f-w56q DEBIAN-CVE-2026-111943 GO-2026-6809 RUSTSEC-2026-0381 RUSTSEC-2026-0382 RUSTSEC-2026-0383
Also known as: CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending: Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,365 by stars

Chart

Latest

Affected images

Radar Score

cosignedsigstore

0.1.23

2 of 2 See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
gcr.io/projectsigstore/cosigneddigest-pinned	784518ff3ee7	stdlib@go1.17.9	1.26.10
gcr.io/projectsigstore/policy-webhookdigest-pinned	82940e8c3e0d	stdlib@go1.17.9	1.26.10

Open the chart page →

7,654

rekor-tilessigstore

1.2.7

1 of 1 See more

rekor-tiles sigstore 1.2.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/rekor-tiles/gcp :v2.3.0	e401cfe033c9	stdlib@go1.26.3	1.26.10

Open the chart page →

722

scaffoldsigstore

0.6.117

11 of 15 See more

scaffold sigstore 0.6.117

11 of the 15 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.26.10
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.26.10
ghcr.io/sigstore/fulcio :v1.9.0	2de0226c5f82	stdlib@go1.27.1	1.26.10
ghcr.io/sigstore/rekor/rekor-server :v1.5.4	100d793d68d0	stdlib@go1.26.4	1.26.10
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	4d64dac937e2	stdlib@go1.25.0	1.26.10
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.33	e591f98e3899	stdlib@go1.25.0	1.26.10
ghcr.io/sigstore/scaffolding/createdbdigest-pinned	16673c1099a5	stdlib@go1.25.0	1.26.10
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.33	4c845ced03d8	stdlib@go1.25.0	1.26.10
ghcr.io/sigstore/scaffolding/ct_server :v0.7.33	24293fa1ed50	stdlib@go1.25.0	1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned	32ee491f4d00	stdlib@go1.27.0	1.26.10
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned	3d0152303816	stdlib@go1.27.0	1.26.10

Open the chart page →

12,443

octopusdeploysimcube

1.0.21

1 of 2 See more

octopusdeploy simcube 1.0.21

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnami/kubectl :latest	599e67d36ff5	stdlib@go1.26.9	1.26.10

Open the chart page →

100

simply-dns-webhooksimply-dns-webhook

1.10.0

1 of 1 See more

simply-dns-webhook simply-dns-webhook 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/runnerm/simply-dns-webhook :v1.10.0	fdfffa3984a5	stdlib@go1.26.4	1.26.10

Open the chart page →

783

mongodb-backupsinextra

1.1.0

1 of 1 See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	stdlib@go1.23.8	1.26.10

Open the chart page →

5,606

postgresql-singlesinextra

1.15.2

1 of 1 See more

postgresql-single sinextra 1.15.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	stdlib@go1.24.6	1.26.10

Open the chart page →

6,262

registry-mirrorssinextra

2.0.20

1 of 1 See more

registry-mirrors sinextra 2.0.20

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/project-zot/zot :v2.1.22	96cda11459ce	stdlib@go1.27.1	1.26.10

Open the chart page →

576

skippersinextra

0.9.1

1 of 1 See more

skipper sinextra 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/skipper :v0.28.39	8a50a01aea02	stdlib@go1.27.2	1.26.10

Open the chart page →

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	stdlib@go1.17.13	1.26.10
altinity/metrics-exporter :0.20.0	1a46d104406d	stdlib@go1.17.13	1.26.10

Open the chart page →

8,462

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	stdlib@go1.18	1.26.10

Open the chart page →

3,320

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	stdlib@go1.13.15	1.26.10

Open the chart page →

3,568

wg-easyslybase-wg-easy

1.2.0

1 of 1 See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/wg-easy/wg-easy :15.4.0	0e7bc9d34e86	stdlib@go1.26.3	1.26.10

Open the chart page →

1,319

wireguardslybase-wireguard

2.0.11

1 of 1 See more

wireguard slybase-wireguard 2.0.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
linuxserver/wireguard :1.0.20260223-r0-ls127	e2f655e1956a	stdlib@go1.26.9	1.26.10

Open the chart page →

606

smallest-self-hostsmallest-self-host

0.2.2

7 of 12 See more

smallest-self-host smallest-self-host 0.2.2

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
bitnami/redis :latest	33dbb7a4be39	stdlib@go1.26.9	1.26.10
grafana/grafana :11.0.0	0dc5a246ab16	stdlib@go1.21.10	1.26.10
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	stdlib@go1.22.3	1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	stdlib@go1.19.4	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	stdlib@go1.21.8	1.26.10
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	stdlib@go1.22.8	1.26.10
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	stdlib@go1.22.2	1.26.10

Open the chart page →

11,918

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	stdlib@go1.19.3	1.26.10

Open the chart page →

2,017

aws-otel-collectorsnowplow-devops

0.17.0

1 of 1 See more

aws-otel-collector snowplow-devops 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-otel-collector :v0.50.0	7968fb60db6a	stdlib@go1.26.7	1.26.10

Open the chart page →

361

yopasssoftizy

1.0.1

1 of 2 See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.4.6	9516e3b3e88c	stdlib@go1.19.1	1.26.10

Open the chart page →

2,346

artifact-hubsoftonic

1.19.0

6 of 8 See more

artifact-hub softonic 1.19.0

6 of the 8 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	stdlib@go1.19.10	1.26.10
artifacthub/db-migrator :v1.19.0	2a746b289fcd	stdlib@go1.22.4	1.26.10
artifacthub/hub :v1.19.0	111918d8c399	stdlib@go1.22.4	1.26.10
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.26.10
artifacthub/scanner :v1.19.0	323d026e78c3	stdlib@go1.21.8	1.26.10
artifacthub/tracker :v1.19.0	6596c8c4d955	stdlib@go1.22.4	1.26.10

Open the chart page →

18,926

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	stdlib@go1.13.12	1.26.10

Open the chart page →

3,928

go-ratelimitsoftonic

1.0.7

2 of 3 See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	stdlib@go1.14	1.26.10
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.26.10

Open the chart page →

7,903

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	stdlib@go1.14.6	1.26.10

Open the chart page →

4,138

redis-shardedsoftonic

0.5.0

1 of 2 See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.26.10

Open the chart page →

3,167

sogosogo

0.3.5

1 of 2 See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	stdlib@go1.24.13	1.26.10

Open the chart page →

8,893

pubsubplussolace

3.10.0

1 of 1 See more

pubsubplus solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
solace/solace-pubsub-standard :latest	59f2a6d8eaba	stdlib@go1.26.8	1.26.10

Open the chart page →

489

pubsubplus-devsolace

3.10.0

1 of 1 See more

pubsubplus-dev solace 3.10.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
solace/solace-pubsub-standard :latest	59f2a6d8eaba	stdlib@go1.26.8	1.26.10

Open the chart page →

489

postgresql-ha-chartsoldevelo-postgresql-ha-chart

16.3.4

1 of 2 See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
soldevelo/pgpool :4.6.3-debian-12-r0	044d16a65129	stdlib@go1.25.4	1.26.10

Open the chart page →

5,380

rabbitmqsolidcharts

0.8.0

1 of 2 See more

rabbitmq solidcharts 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.4.0-management	c200fd496482	stdlib@go1.25.0	1.26.10

Open the chart page →

1,120

thanossolidcharts

0.12.2

1 of 1 See more

thanos solidcharts 0.12.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.42.4	b567818fe608	stdlib@go1.26.5	1.26.10

Open the chart page →

538

gloosolo-gloo-edge

0.0.0-fork

4 of 5 See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	stdlib@go1.18.1	1.26.10
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	stdlib@go1.18.1	1.26.10
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	stdlib@go1.18.1	1.26.10
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	stdlib@go1.18.1	1.26.10

Open the chart page →

13,591

sp-otel-collectorsp-otel-collector

1.1.6

1 of 1 See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	stdlib@go1.20.5	1.26.10

Open the chart page →

2,815

sql-exportersql-exporter

0.18.13

1 of 1 See more

sql-exporter sql-exporter 0.18.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
burningalchemist/sql_exporter :0.24.11	92f8210824dd	stdlib@go1.26.9	1.26.10

Open the chart page →

sql-operatorsql-operator

0.11.2

1 of 1 See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	stdlib@go1.17.13	1.26.10

Open the chart page →

2,530

stackradar-scannerstackradar

0.7.0

1 of 1 See more

stackradar-scanner stackradar 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/lockdep/stackradar-scanner :0.7.0	45d82534d1d5	stdlib@go1.25.7	1.26.10

Open the chart page →

1,830

gitwebhookproxystakater

0.2.79

1 of 1 See more

gitwebhookproxy stakater 0.2.79

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
stakater/gitwebhookproxy :v0.2.79	c1226e5270cd	stdlib@go1.13.1	1.26.10

Open the chart page →

2,661

splunk-operatorstakater

0.0.6

1 of 2 See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
splunk/splunk-operator :2.0.0	c4e0d3146226	stdlib@go1.17.12	1.26.10

Open the chart page →

12,623

gethstakewise

2.5.8

1 of 3 See more

geth stakewise 2.5.8

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.15.10	1f36ca5922a5	stdlib@go1.24.2	1.26.10

Open the chart page →

1,906

graph-nodestakewise

3.1.0

2 of 3 See more

graph-node stakewise 3.1.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
graphprotocol/graph-node :v0.37.0	f4452cdedd68	stdlib@go1.24.1	1.26.10
ipfs/kubo :v0.24.0	e3de33bd746b	stdlib@go1.19.8	1.26.10

Open the chart page →

6,141

stardogstardog

3.1.0

1 of 3 See more

stardog stardog 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
stardog/stardog :latest	e09198a37cd8	ca-certificates@20260909-r2	20260909-r3

Open the chart page →

357

mayastorstartechnica

0.2.0

3 of 13 See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	stdlib@go1.18	1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	stdlib@go1.18	1.26.10
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	stdlib@go1.18	1.26.10

Open the chart page →

7,558

multusstartechnica

0.1.2

1 of 1 See more

multus startechnica 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :stable	9dc8ca645a78	stdlib@go1.26.8	1.26.10

Open the chart page →

707

statpingstatping

0.1.14

1 of 1 See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	stdlib@go1.14.13	1.26.10

Open the chart page →

4,640

thanosstevehipwell-helm-charts-thanos

1.24.1

1 of 1 See more

thanos stevehipwell-helm-charts-thanos 1.24.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
quay.io/thanos/thanos :v0.42.4	b567818fe608	stdlib@go1.26.5	1.26.10

Open the chart page →

538

stornxstornx

1.1.1

9 of 9 See more

stornx stornx 1.1.1

9 of the 9 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	stdlib@go1.24.13	1.26.10
alazidis/stornx :1.1.1	602d4f7f090c	stdlib@go1.25.7	1.26.10
istio/pilot :1.29.1	f8b0e412ac4a	stdlib@go1.25.8	1.26.10
quay.io/kiali/kiali :v2.23.0	7652b1285f50	stdlib@go1.25.0	1.26.10
quay.io/prometheus-operator/prometheus-config-reloader :v0.90.0	e5aab3be6873	stdlib@go1.25.8	1.26.10
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	stdlib@go1.25.3	1.26.10
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	stdlib@go1.26.0	1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	stdlib@go1.25.5	1.26.10
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	stdlib@go1.24.4	1.26.10

Open the chart page →

16,958

consolestratos

4.4.0

1 of 4 See more

console stratos 4.4.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
splatform/stratos-jetstream :4.4.0-bc65c315c	886311c331b9	stdlib@go1.13.4	1.26.10

Open the chart page →

31,546

stunner-gateway-operatorstunner

1.1.0

2 of 2 See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
l7mp/stunner-auth-server :1.1.0	2f8114477ba6	stdlib@go1.23.8	1.26.10
l7mp/stunner-gateway-operator :1.1.0	c34f7c931491	stdlib@go1.23.8	1.26.10

Open the chart page →

2,451

hlf-k8ssubstra

10.2.4

4 of 7 See more

hlf-k8s substra 10.2.4

4 of the 7 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.0	f270dfeee91d	stdlib@go1.15.7	1.26.10
jwilder/dockerize :latest	f94fb59fb4f6	stdlib@go1.25.5	1.26.10
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	stdlib@go1.18.10	1.26.10
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	stdlib@go1.18.10	1.26.10

Open the chart page →

17,146

supabasesupabse

0.8.0

4 of 11 See more

supabase supabse 0.8.0

4 of the 11 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.30.1	3b709e4a0e5e	stdlib@go1.25.1	1.26.10
library/postgres :17-alpine	b0f9560a2de0	stdlib@go1.24.6	1.26.10
supabase/gotrue :v2.189.0	385184459f57	stdlib@go1.25.8	1.26.10
supabase/postgres :17.6.1.136	f371b5f3f2ac	stdlib@go1.26.1	1.26.10

Open the chart page →

55,104

Grafanasurajwarbhe-grafana

0.1.0

1 of 1 See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
surajwarbhe/grafana :v1	85248611e9f1	stdlib@go1.14.3	1.26.10

Open the chart page →

3,918

switchboardswitchboard

0.7.4

1 of 1 See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container image	Digest	Package	Fixed in
ghcr.io/borchero/switchboard :0.7.4	54a193b757da	stdlib@go1.26.1	1.26.10

Open the chart page →

1,352

Container images carrying it

6,268 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/crossplane-contrib/crossview :v4.6.0	7b54c5ba60e5	stdlib@go1.25.14	1.26.10	1
ghcr.io/csepulveda/trivy-webhook-aws-security-hub :v0.1.20	6836b779b060	stdlib@go1.26.2	1.26.10	1
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	stdlib@go1.20.10	1.26.10	1
ghcr.io/cubefs/cfs-csi-driver :3.2.0.150.0	8723616a976a	stdlib@go1.18.4	1.26.10	1
ghcr.io/cybozu-go/accurate :2.1.0	b5cc37ab4d9c	stdlib@go1.26.3	1.26.10	1
ghcr.io/cybozu-go/moco :0.37.0	32e7cab1bdd8	stdlib@go1.26.8	1.26.10	1
ghcr.io/d0ugal/ghcr-exporter :v2.13.66	402ad8ba0751	stdlib@go1.27.2	1.26.10	1
ghcr.io/d0ugal/github-exporter :v0.5.73	3c710feb81b3	stdlib@go1.27.2	1.26.10	1
ghcr.io/d0ugal/internet-perf-exporter :v0.2.91	f5c9a96fe52a	stdlib@go1.26.4	1.26.10	1
ghcr.io/dadrus/heimdall :0.17.26	ae63f0099687	stdlib@go1.27.2	1.26.10	1
ghcr.io/danieldonoghue/vault-sync-operator :v0.0.1-beta.3	8d7ec69a193c	stdlib@go1.25.9	1.26.10	1
ghcr.io/daocloud/crproxy/crproxy :v0.12.6	fdbb975902e7	stdlib@go1.22.0	1.26.10	1
ghcr.io/dapr/injector :1.17.0-rc.3	7a2fd888ed5f	stdlib@go1.24.11	1.26.10	1
ghcr.io/dapr/operator :1.17.0-rc.3	d5cc61cbe735	stdlib@go1.24.11	1.26.10	1
ghcr.io/dapr/placement :1.17.0-rc.3	a237b43cd5c6	stdlib@go1.24.11	1.26.10	1
ghcr.io/dapr/scheduler :1.17.0-rc.3	6c62e01e736b	stdlib@go1.24.11	1.26.10	1
ghcr.io/dapr/sentry :1.17.0-rc.3	bf79b03591e0	stdlib@go1.24.11	1.26.10	1
ghcr.io/dash0hq/operator-controller :0.158.0	1fd9ee8fcbba	stdlib@go1.27.2	1.26.10	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	stdlib@go1.21.5	1.26.10	1
ghcr.io/davidkarlsen/flyway-operator :0.2.13	66f60b461c0d	stdlib@go1.24.4	1.26.10	1
ghcr.io/db-operator/db-operator :2.44.0	4a789f7347d8	stdlib@go1.26.9	1.26.10	1
ghcr.io/dcristobalhmad/kube-secrets-exporter :latest	a9043737cb73	stdlib@go1.22.3	1.26.10	1
ghcr.io/debridmediamanager/zurg-testing :v0.9.3-final	5c47ef99443a	stdlib@go1.22.5	1.26.10	1
ghcr.io/decayofmind/kube-better-node :master	ccd2ce03b682	stdlib@go1.16.6	1.26.10	1
ghcr.io/deliveryhero/field-exporter :v1.4.0	6b71ba4f9297	stdlib@go1.22.12	1.26.10	1
ghcr.io/dellnoantechnp/alloy-remote-config/fleet-management :master	4371b566d238	stdlib@go1.25.10	1.26.10	1
ghcr.io/deltabadger/deltabadger :2.23.3	bffe3c22fabc	stdlib@go1.24.4	1.26.10	1
ghcr.io/depthmark/github-sts :0.1.2	f09fbbcca2f8	ca-certificates@20260611-r1 stdlib@go1.27.1	20260909-r3 1.26.10	1
ghcr.io/desuuuu/cluster-network-policy-operator :v1.1.0	d943d13c5281	stdlib@go1.26.0	1.26.10	1
ghcr.io/devangradadiya/k8s-s3-bucket-operator :0.2.2	58288de9f9fa	stdlib@go1.25.8	1.26.10	1
ghcr.io/developmentseed/tipg :1.6.1	30b88f2a6b73	ca-certificates@20260611-r1	20260909-r3	1
ghcr.io/developmentseed/titiler :latest	988cc5e4a600	ca-certificates@20260909-r2	20260909-r3	1
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	stdlib@go1.20.14	1.26.10	1
ghcr.io/devops-dojo7/fauxgpu/device-plugin :0.2.4	e5a12388e3d8	stdlib@go1.23.12	1.26.10	1
ghcr.io/devops-ia/cp-schema-registry :8.1.1-msk-iam-auth2.3.5	30d1a445acc7	stdlib@go1.25.4	1.26.10	1
ghcr.io/devops-ia/dwpk :1.0.2	780cecbfb26b	stdlib@go1.27.1	1.26.10	1
ghcr.io/devops-ia/dwpk-gateway :1.0.2	c489cf07fba5	stdlib@go1.27.1	1.26.10	1
ghcr.io/devops-ia/dwpk-ui :1.0.2	d86c9fcc5266	stdlib@go1.27.1	1.26.10	1
ghcr.io/devops-ia/steampipe :v2.4.1	a982103d91d3	stdlib@go1.26.1	1.26.10	1
ghcr.io/devplayer0/lxd8s :0.3.1	e159ba41aede	stdlib@go1.17	1.26.10	1
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	stdlib@go1.16.6	1.26.10	1
ghcr.io/dexidp/dex :v2.43.1	0881d3c9359b	stdlib@go1.24.3	1.26.10	1
ghcr.io/dexidp/dex :v2.35.3	13964b29d63e	stdlib@go1.19.2	1.26.10	1
ghcr.io/dexidp/dex :v2.42.1	8186d6dd81f4	stdlib@go1.23.4	1.26.10	1
ghcr.io/dexidp/dex :v2.38.0	b1d793440a98	stdlib@go1.21.6	1.26.10	1
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	stdlib@go1.19.6	1.26.10	1
ghcr.io/digitalis-io/vals-operator :v0.8.1	7c776499b8c9	stdlib@go1.25.7	1.26.10	1
ghcr.io/dirien/minecraft-exporter :0.24.0	61d89bf99ff7	ca-certificates@20251003-r0 stdlib@go1.25.10	20260909-r3 1.26.10	1
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	stdlib@go1.23.7	1.26.10	1
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	stdlib@go1.17.5	1.26.10	1