StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,365
of 18,232 indexed, latest versions
Container images
6,268
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,365 of 18,232 indexed charts deploy, on 6,268 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,155
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3118
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1693
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1065
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,365 by stars
ChartLatestAffected imagesRadar Score
opa-kube-mgmtopa-kube-mgmtVerified publisher11.0.142 of 2See more

opa-kube-mgmt opa-kube-mgmt 11.0.14

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/kube-mgmt:11.0.14758ff3fb4727
stdlib@go1.25.0
1.26.10
openpolicyagent/opa:1.19.0852359995443
ca-certificates@20260413-r0
stdlib@go1.26.5
20260909-r3
1.26.10

Open the chart page →

1,272
redis-operatorot-container-kit0.27.01 of 1See more

redis-operator ot-container-kit 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/opstree/redis-operator:v0.27.025799bf10231
stdlib@go1.25.14
1.26.10

Open the chart page →

328
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.26.10

Open the chart page →

5,697
s3-proxyoxyno-zetaVerified publisher2.28.01 of 1See more

s3-proxy oxyno-zeta 2.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oxynozeta/s3-proxy:5.1.121115040e224
stdlib@go1.27.0
1.26.10

Open the chart page →

462
prefect-serverprefectVerified publisher2026.10.210327301 of 2See more

prefect-server prefect 2026.10.21032730

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prefecthq/prefect:3.9.0-python3.11e5f851d68db9
rustls-webpki@0.103.14
0.103.16

Open the chart page →

5,803
spirespiffeVerified publisher0.30.37 of 10See more

spire spiffe 0.30.3

7 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/spiffe/oidc-discovery-provider:1.15.3bb95f13c2b4e
stdlib@go1.26.6
1.26.10
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
stdlib@go1.24.0
1.26.10
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
stdlib@go1.25.3
1.26.10
ghcr.io/spiffe/spire-agent:1.15.341b0dcd8b258
stdlib@go1.26.6
1.26.10
ghcr.io/spiffe/spire-controller-manager:0.8.019e418e9d7f2
stdlib@go1.27.1
1.26.10
ghcr.io/spiffe/spire-server:1.15.34082f30d3e0d
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10

Open the chart page →

4,148
wireguardwireguardVerified publisher0.32.01 of 3See more

wireguard wireguard 0.32.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-wireguard-mgr:main0c457abd6400
stdlib@go1.27.2
1.26.10

Open the chart page →

294
altinity-clickhouse-operatoraltinity-clickhouse-operator0.27.43 of 3See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.4

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.27.4c60c872fedd8
stdlib@go1.26.8
1.26.10
altinity/metrics-exporter:0.27.4d257a72e6a6a
stdlib@go1.26.8
1.26.10
registry.k8s.io/kubectl:v1.36.36e4fce3c8365
stdlib@go1.26.5
1.26.10

Open the chart page →

956
bytebasebytebase1.1.51 of 1See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bytebase/bytebase:latest97637e4eefdc
stdlib@go1.27.1
1.26.10

Open the chart page →

470
cert-manager-csi-drivercert-managerOfficialVerified publisher0.16.03 of 3See more

cert-manager-csi-driver cert-manager 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-csi-driver:v0.16.09d13db6dc80e
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10

Open the chart page →

1,520
ansible-semaphorecloudhippieVerified publisher15.3.41 of 1See more

ansible-semaphore cloudhippie 15.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.17008dacd9f1ad
stdlib@go1.23.5
1.26.10

Open the chart page →

2,010
etcdcloudpirates-etcdVerified publisher0.8.91 of 1See more

etcd cloudpirates-etcd 0.8.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/etcd-development/etcd:v3.7.27c6c239825d0
stdlib@go1.26.8
1.26.10

Open the chart page →

264
rabbitmq-cluster-operatorcloudpirates-rabbitmq-cluster-operatorVerified publisher0.6.222 of 2See more

rabbitmq-cluster-operator cloudpirates-rabbitmq-cluster-operator 0.6.22

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.23.1a6794c391297
stdlib@go1.27.2
1.26.10
ghcr.io/rabbitmq/messaging-topology-operator:1.20.427988ec3a9f2
stdlib@go1.27.2
1.26.10

Open the chart page →

10
zookeepercloudpirates-zookeeperVerified publisher0.15.31 of 1See more

zookeeper cloudpirates-zookeeper 0.15.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/zookeeper:3.9.65bad433c7170
stdlib@go1.18.1
1.26.10

Open the chart page →

3,719
vertical-pod-autoscalercluster-autoscaler0.15.01 of 4See more

vertical-pod-autoscaler cluster-autoscaler 0.15.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10

Open the chart page →

1,734
codefreshcodefresh-onpremOfficialVerified publisher2.12.236 of 42See more

codefresh codefresh-onprem 2.12.23

6 of the 42 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
stdlib@go1.25.0
1.26.10
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
stdlib@go1.21.12
1.26.10
bitnamilegacy/nats:2.11.8-debian-12-r0fa0cfba6034a
stdlib@go1.24.6
1.26.10
ghcr.io/helm/chartmuseum:v0.16.648bc27743c08
stdlib@go1.25.13
1.26.10
quay.io/codefresh/dind:3.0.33feef93b16baa
stdlib@go1.26.9
1.26.10
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
stdlib@go1.23.8
1.26.10

Open the chart page →

70,067
contourcontour0.8.01 of 2See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/projectcontour/contour:v1.33.7d88264ed084a
stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64
1.26.10

Open the chart page →

1,995
couchbase-operatorcouchbaseVerified publisher2.93.02 of 2See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
couchbase/admission-controller:2.9.3bf2d2e87e45f
stdlib@go1.26.5
1.26.10
couchbase/operator:2.9.369a385b49e1f
stdlib@go1.26.5
1.26.10

Open the chart page →

1,456
dash0-operatordash0-operatorOfficialVerified publisher0.158.01 of 1See more

dash0-operator dash0-operator 0.158.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/dash0hq/operator-controller:0.158.01fd9ee8fcbba
stdlib@go1.27.2
1.26.10

Open the chart page →

15
aws-ebs-csi-driverdeliveryheroVerified publisher2.17.46 of 6See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
stdlib@go1.19.6
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
stdlib@go1.19.5
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
stdlib@go1.19.7
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
stdlib@go1.19.8
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
stdlib@go1.19.8
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
stdlib@go1.19.8
1.26.10

Open the chart page →

11,328
eck-exporterenixVerified publisher1.14.01 of 1See more

eck-exporter enix 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

352
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
stdlib@go1.18
1.26.10
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.26.10

Open the chart page →

8,996
kafkakubelauncherVerified publisher0.1.301 of 1See more

kafka kubelauncher 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned1cd80b53f4fd
stdlib@go1.26.7
1.26.10

Open the chart page →

1,382
memcachedkubelauncherVerified publisher0.1.351 of 1See more

memcached kubelauncher 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/memcacheddigest-pinned784fc5f58438
stdlib@go1.26.7
1.26.10

Open the chart page →

598
mysqlkubelauncherVerified publisher0.4.81 of 1See more

mysql kubelauncher 0.4.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mysqldigest-pinnedb9374a84635d
stdlib@go1.26.7
1.26.10

Open the chart page →

724
postgresqlkubelauncherVerified publisher0.5.11 of 1See more

postgresql kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/postgresqldigest-pinned7cc7ce4de0eb
stdlib@go1.26.7
1.26.10

Open the chart page →

695
kubernetes-replicatorkubernetes-replicator2.12.41 of 1See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.12.45dc9fc5ff59a
stdlib@go1.24.13
1.26.10

Open the chart page →

704
lakefslakefsVerified publisher1.12.461 of 1See more

lakefs lakefs 1.12.46

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
treeverse/lakefs:1.88.0237a17c6b2d8
stdlib@go1.26.8
1.26.10

Open the chart page →

573
coreneuvectorchartsVerified publisher2.11.33 of 5See more

core neuvectorcharts 2.11.3

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
neuvector/controller:5.6.3739682010f9a
stdlib@go1.27.2
1.26.10
neuvector/enforcer:5.6.33d176e9f1784
stdlib@go1.27.2
1.26.10
neuvector/scanner:6abb5b6e8be40
stdlib@go1.27.2
1.26.10

Open the chart page →

577
diunnicholaswildeVerified publisher1.0.01 of 1See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/diun:4.19.0c94e32b888e4
stdlib@go1.16.5
1.26.10

Open the chart page →

5,037
openclawopenclawVerified publisher1.118.02 of 2See more

openclaw openclaw 1.118.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
stdlib@go1.26.7
1.26.10
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.118.05c16346487a4
stdlib@go1.26.4
1.26.10

Open the chart page →

3,432
prometheus-stackdriver-exporterprometheus-communityVerified publisher5.2.01 of 1See more

prometheus-stackdriver-exporter prometheus-community 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prometheuscommunity/stackdriver-exporter:v0.19.0c0a0cbf76570
stdlib@go1.26.4
1.26.10

Open the chart page →

672
adguard-homerm3lVerified publisher0.25.01 of 2See more

adguard-home rm3l 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.513a143e6c071c
stdlib@go1.22.4
1.26.10

Open the chart page →

1,757
spegelspegelVerified publisher0.8.01 of 1See more

spegel spegel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/spegel-org/spegeldigest-pinnedb48194957bf9
stdlib@go1.27.2
1.26.10

Open the chart page →

82
supabasetokens-studioVerified publisher1.0.03 of 14See more

supabase tokens-studio 1.0.0

3 of the 14 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
stdlib@go1.23.2
1.26.10
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.10
supabase/gotrue:v2.163.0ba4ddc594b0b
stdlib@go1.22.3
1.26.10

Open the chart page →

89,811
woodpeckerwoodpecker-ci3.7.52 of 2See more

woodpecker woodpecker-ci 3.7.5

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
woodpeckerci/woodpecker-agent:v3.19.0f85f163e0949
stdlib@go1.27.1
1.26.10
woodpeckerci/woodpecker-server:v3.19.06ca167a3c58b
stdlib@go1.27.1
1.26.10

Open the chart page →

460
prometheus-operatorarldkaVerified publisher13.0.12 of 2See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
stdlib@go1.22.2
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.10

Open the chart page →

3,620
renterdartur9010Verified publisher1.4.42 of 2See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
stdlib@go1.22.4
1.26.10
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
stdlib@go1.26.0
1.26.10

Open the chart page →

79,137
nsqbeeinventor1.3.01 of 1See more

nsq beeinventor 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nsqio/nsq:v1.3.01a369c146af7
stdlib@go1.21.5
1.26.10

Open the chart page →

1,394
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
stdlib@go1.17.1
1.26.10

Open the chart page →

4,747
kube-prometheuschoerodon9.3.14 of 7See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.26.10
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
stdlib@go1.13.11
1.26.10
squareup/ghostunnel:v1.5.270f4cf270425
stdlib@go1.13.4
1.26.10
quay.io/prometheus/node-exporter:v1.0.08a3a33cad0bd
stdlib@go1.14.3
1.26.10

Open the chart page →

17,653
cloudflare-ddnscloudflareVerified publisher1.0.31 of 1See more

cloudflare-ddns cloudflare 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/aureum-cloud/cloudflare-ddns:latestaeb75d1605f4
stdlib@go1.23.12
1.26.10

Open the chart page →

693
timescaledbcloudpirates-timescaledbVerified publisher0.13.131 of 1See more

timescaledb cloudpirates-timescaledb 0.13.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
timescale/timescaledb:2.31.0-pg17b56a3f51991d
stdlib@go1.26.2
1.26.10

Open the chart page →

1,080
openstack-cinder-csicloud-provider-openstack2.37.17 of 7See more

openstack-cinder-csi cloud-provider-openstack 2.37.1

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/cinder-csi-plugin:v1.37.1ad3832945f1e
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.17.09b75b9ade162
stdlib@go1.24.6
1.26.10

Open the chart page →

6,901
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.25 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure:v1.8.255a0ad895a8f
stdlib@go1.26.9
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
stdlib@go1.26.5
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
stdlib@go1.25.7
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
stdlib@go1.26.3
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds:v1.5.6cb0112636dc4
stdlib@go1.26.3
1.26.10

Open the chart page →

5,174
paperless-ngxfmjstudios0.2.83 of 5See more

paperless-ngx fmjstudios 0.2.8

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/redis:latest33dbb7a4be39
stdlib@go1.26.9
1.26.10
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
stdlib@go1.21.5
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
stdlib@go1.19.8
1.26.10

Open the chart page →

35,881
minifluxgabe565Verified publisher0.9.21 of 2See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
stdlib@go1.23.5
1.26.10

Open the chart page →

2,072
cubestoregadsme1.2.01 of 3See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.24.061d866e93b56
stdlib@go1.19.9
1.26.10

Open the chart page →

3,984
grafana-operatorgrafana5.25.01 of 1See more

grafana-operator grafana 5.25.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/grafana/grafana-operator:v5.25.0bc572995823f
ca-certificates@20260413-r1
stdlib@go1.26.6
20260909-r3
1.26.10

Open the chart page →

261
kubernetes-ingresshaproxytechVerified publisher1.54.31 of 1See more

kubernetes-ingress haproxytech 1.54.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
haproxytech/kubernetes-ingress:3.2.1749e5bccffa05
stdlib@go1.27.2
1.26.10

Open the chart page →

17

Container images carrying it

6,268 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
stdlib@go1.21.0
1.26.10
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
stdlib@go1.23.1
1.26.10
1
ghcr.io/dmazhukov/cronguard:0.4.50d84c52695aa
stdlib@go1.27.2
1.26.10
1
ghcr.io/dntosas/capi2argo-cluster-operator:v1.5.0fb8c6457ef6e
stdlib@go1.25.6
1.26.10
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
stdlib@go1.17.9
1.26.10
1
ghcr.io/dodevops/cloudian-exporter:0.1.18b7f2816541c
stdlib@go1.23.2
1.26.10
1
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
stdlib@go1.18.1
1.26.10
1
ghcr.io/dodevops/vmware-rest-proxy:0.1.730f7f73b0a10
stdlib@go1.21.7
1.26.10
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
stdlib@go1.19.8
1.26.10
1
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
stdlib@go1.19.8
1.26.10
1
ghcr.io/doodlescheduling/k8sdb-controller:v0.0.1a6c2251a6263
stdlib@go1.16.14
1.26.10
1
ghcr.io/doodlescheduling/k8skeycloak-controller:v0.0.19befc51b1ad6
stdlib@go1.15.15
1.26.10
1
ghcr.io/doodlescheduling/k8soauth2-proxy-controller:v0.1.280d049c9da31
stdlib@go1.17.11
1.26.10
1
ghcr.io/doodlescheduling/k8s-pause:v0.1.16b3215e37738
stdlib@go1.17.8
1.26.10
1
ghcr.io/doodlescheduling/k8sprom-patch-controller:v0.1.243b92c9cf029
stdlib@go1.17.8
1.26.10
1
ghcr.io/doodlescheduling/k8stcpmap-controller:v0.0.1ff005643dc97
stdlib@go1.16.14
1.26.10
1
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
stdlib@go1.16.15
1.26.10
1
ghcr.io/doodlescheduling/saml-exporter:v0.5.03d5a99841bc2
stdlib@go1.22.3
1.26.10
1
ghcr.io/douban/aliyun-exporter:mainb7c694331362
stdlib@go1.24.2
1.26.10
1
ghcr.io/douban/qiniu-exporter:maind1da3bcfad7d
stdlib@go1.19.5
1.26.10
1
ghcr.io/douban/ucloud-exporter:mainb4bb8a9021a2
stdlib@go1.24.2
1.26.10
1
ghcr.io/douban/upyun-exporter:main6810900c9c4a
stdlib@go1.25.5
1.26.10
1
ghcr.io/dpicillo/paguro/paguro-agent:v0.1.2a97d0d66820e
stdlib@go1.26.9
1.26.10
1
ghcr.io/dpicillo/paguro/paguro-controller:v0.1.2ffbb6f1b51fc
stdlib@go1.26.9
1.26.10
1
ghcr.io/dpicillo/paguro/paguro-node-installer:v0.1.2526c1324e1dc
stdlib@go1.26.6
1.26.10
1
ghcr.io/dploeger/cloudflare-ddns-update:v0.1.0ec06685b9ff4
stdlib@go1.22.4
1.26.10
1
ghcr.io/drakkan/sftpgo:v2.7.59011fe608d33
stdlib@go1.25.12
1.26.10
1
ghcr.io/druggeri/nut_exporter:3.3.0276460d141c7
stdlib@go1.26.3
1.26.10
1
ghcr.io/dsp0x4/cloudfront-tenant-operator:0.3.0eb40174cd20d
stdlib@go1.26.2
1.26.10
1
ghcr.io/duyet/gaxy:latest6927faec38c2
stdlib@go1.27.2
1.26.10
1
ghcr.io/dynamia-ai/hami-enterprise:v2.10.0-r0-openshift.c4e22e88745504757300
stdlib@go1.26.5
1.26.10
1
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
stdlib@go1.16.12
1.26.10
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
stdlib@go1.22.2
1.26.10
1
ghcr.io/edgelesssys/continuum/continuum-proxy24c76f294a80
stdlib@go1.23.3
1.26.10
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
stdlib@go1.16.7
1.26.10
1
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
stdlib@go1.26.1
1.26.10
1
ghcr.io/edgelesssys/privatemode/privatemode-proxycc1c8460c199
stdlib@go1.26.8
1.26.10
1
ghcr.io/eenchev/prometheus-universal-exporter:1.6.0c7ffe36f13c6
stdlib@go1.27.2
1.26.10
1
ghcr.io/einstack/glide:0.0.1-alpineab3f7d0a1d50
stdlib@go1.21.6
1.26.10
1
ghcr.io/element-hq/ess-helm/matrix-tools:0.3.20eac0521be29
stdlib@go1.23.7
1.26.10
1
ghcr.io/element-hq/matrix-authentication-service:1.27.0085e37263957
rustls-webpki@0.103.15
webpki-roots@1.0.2
0.103.16
0.26.11
1
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
rustls-webpki@0.102.8
webpki-roots@0.26.8
0.103.16
0.26.11
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
stdlib@go1.19.8
1.26.10
1
ghcr.io/eminaktas/kubedns-shepherd:v0.4.40a20e1b41740
stdlib@go1.26.8
1.26.10
1
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
stdlib@go1.25.1
1.26.10
1
ghcr.io/emircanagac/northscope:1.2.0e7477c2bea2a
stdlib@go1.27.2
1.26.10
1
ghcr.io/emissary-ingress/emissary:4.1.04a981156abee
stdlib@go1.24.13
1.26.10
1
ghcr.io/emqx/emqx-operator:3.0.02ce80aeb59d6
stdlib@go1.26.8
1.26.10
1
ghcr.io/ente/server:0472c929b6070e61fecaf2013d47efce2dcda462f646b68a1b8d
stdlib@go1.26.4
1.26.10
1
ghcr.io/eosc-lot-1/logrotate:3-alpineb0e20d200f89
stdlib@go1.22.4
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.