StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,365
of 18,232 indexed, latest versions
Container images
6,268
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,365 of 18,232 indexed charts deploy, on 6,268 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,155
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3118
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1693
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1065
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,365 by stars
ChartLatestAffected imagesRadar Score
opa-kube-mgmtopa-kube-mgmtVerified publisher11.0.142 of 2See more

opa-kube-mgmt opa-kube-mgmt 11.0.14

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/kube-mgmt:11.0.14758ff3fb4727
stdlib@go1.25.0
1.26.10
openpolicyagent/opa:1.19.0852359995443
ca-certificates@20260413-r0
stdlib@go1.26.5
20260909-r3
1.26.10

Open the chart page →

1,272
redis-operatorot-container-kit0.27.01 of 1See more

redis-operator ot-container-kit 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/opstree/redis-operator:v0.27.025799bf10231
stdlib@go1.25.14
1.26.10

Open the chart page →

328
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
stdlib@go1.19.4
1.26.10

Open the chart page →

5,697
s3-proxyoxyno-zetaVerified publisher2.28.01 of 1See more

s3-proxy oxyno-zeta 2.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oxynozeta/s3-proxy:5.1.121115040e224
stdlib@go1.27.0
1.26.10

Open the chart page →

462
prefect-serverprefectVerified publisher2026.10.210327301 of 2See more

prefect-server prefect 2026.10.21032730

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prefecthq/prefect:3.9.0-python3.11e5f851d68db9
rustls-webpki@0.103.14
0.103.16

Open the chart page →

5,803
spirespiffeVerified publisher0.30.37 of 10See more

spire spiffe 0.30.3

7 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/spiffe/oidc-discovery-provider:1.15.3bb95f13c2b4e
stdlib@go1.26.6
1.26.10
ghcr.io/spiffe/spiffe-csi-driver:0.2.79dfe4f0caff0
stdlib@go1.24.0
1.26.10
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
stdlib@go1.25.3
1.26.10
ghcr.io/spiffe/spire-agent:1.15.341b0dcd8b258
stdlib@go1.26.6
1.26.10
ghcr.io/spiffe/spire-controller-manager:0.8.019e418e9d7f2
stdlib@go1.27.1
1.26.10
ghcr.io/spiffe/spire-server:1.15.34082f30d3e0d
stdlib@go1.26.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10

Open the chart page →

4,148
wireguardwireguardVerified publisher0.32.01 of 3See more

wireguard wireguard 0.32.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-wireguard-mgr:main0c457abd6400
stdlib@go1.27.2
1.26.10

Open the chart page →

294
altinity-clickhouse-operatoraltinity-clickhouse-operator0.27.43 of 3See more

altinity-clickhouse-operator altinity-clickhouse-operator 0.27.4

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.27.4c60c872fedd8
stdlib@go1.26.8
1.26.10
altinity/metrics-exporter:0.27.4d257a72e6a6a
stdlib@go1.26.8
1.26.10
registry.k8s.io/kubectl:v1.36.36e4fce3c8365
stdlib@go1.26.5
1.26.10

Open the chart page →

956
bytebasebytebase1.1.51 of 1See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bytebase/bytebase:latest97637e4eefdc
stdlib@go1.27.1
1.26.10

Open the chart page →

470
cert-manager-csi-drivercert-managerOfficialVerified publisher0.16.03 of 3See more

cert-manager-csi-driver cert-manager 0.16.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-csi-driver:v0.16.09d13db6dc80e
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10

Open the chart page →

1,520
ansible-semaphorecloudhippieVerified publisher15.3.41 of 1See more

ansible-semaphore cloudhippie 15.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.17008dacd9f1ad
stdlib@go1.23.5
1.26.10

Open the chart page →

2,010
etcdcloudpirates-etcdVerified publisher0.8.91 of 1See more

etcd cloudpirates-etcd 0.8.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gcr.io/etcd-development/etcd:v3.7.27c6c239825d0
stdlib@go1.26.8
1.26.10

Open the chart page →

264
rabbitmq-cluster-operatorcloudpirates-rabbitmq-cluster-operatorVerified publisher0.6.222 of 2See more

rabbitmq-cluster-operator cloudpirates-rabbitmq-cluster-operator 0.6.22

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/rabbitmq/cluster-operator:2.23.1a6794c391297
stdlib@go1.27.2
1.26.10
ghcr.io/rabbitmq/messaging-topology-operator:1.20.427988ec3a9f2
stdlib@go1.27.2
1.26.10

Open the chart page →

10
zookeepercloudpirates-zookeeperVerified publisher0.15.31 of 1See more

zookeeper cloudpirates-zookeeper 0.15.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/zookeeper:3.9.65bad433c7170
stdlib@go1.18.1
1.26.10

Open the chart page →

3,719
vertical-pod-autoscalercluster-autoscaler0.15.01 of 4See more

vertical-pod-autoscaler cluster-autoscaler 0.15.0

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
stdlib@go1.21.3
1.26.10

Open the chart page →

1,734
codefreshcodefresh-onpremOfficialVerified publisher2.12.236 of 42See more

codefresh codefresh-onprem 2.12.23

6 of the 42 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
stdlib@go1.25.0
1.26.10
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
stdlib@go1.21.12
1.26.10
bitnamilegacy/nats:2.11.8-debian-12-r0fa0cfba6034a
stdlib@go1.24.6
1.26.10
ghcr.io/helm/chartmuseum:v0.16.648bc27743c08
stdlib@go1.25.13
1.26.10
quay.io/codefresh/dind:3.0.33feef93b16baa
stdlib@go1.26.9
1.26.10
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
stdlib@go1.23.8
1.26.10

Open the chart page →

70,067
contourcontour0.8.01 of 2See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/projectcontour/contour:v1.33.7d88264ed084a
stdlib@go1.26.8-X:nodwarf5,nogreenteagc,norandomizedheapbase64
1.26.10

Open the chart page →

1,995
couchbase-operatorcouchbaseVerified publisher2.93.02 of 2See more

couchbase-operator couchbase 2.93.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
couchbase/admission-controller:2.9.3bf2d2e87e45f
stdlib@go1.26.5
1.26.10
couchbase/operator:2.9.369a385b49e1f
stdlib@go1.26.5
1.26.10

Open the chart page →

1,456
dash0-operatordash0-operatorOfficialVerified publisher0.158.01 of 1See more

dash0-operator dash0-operator 0.158.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/dash0hq/operator-controller:0.158.01fd9ee8fcbba
stdlib@go1.27.2
1.26.10

Open the chart page →

15
aws-ebs-csi-driverdeliveryheroVerified publisher2.17.46 of 6See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
stdlib@go1.19.6
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
stdlib@go1.19.5
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
stdlib@go1.19.7
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
stdlib@go1.19.8
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
stdlib@go1.19.8
1.26.10
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
stdlib@go1.19.8
1.26.10

Open the chart page →

11,328
eck-exporterenixVerified publisher1.14.01 of 1See more

eck-exporter enix 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10

Open the chart page →

352
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
stdlib@go1.18
1.26.10
grafana/loki:2.6.11ee60f980950
stdlib@go1.17.9
1.26.10

Open the chart page →

8,996
kafkakubelauncherVerified publisher0.1.301 of 1See more

kafka kubelauncher 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/kafkadigest-pinned1cd80b53f4fd
stdlib@go1.26.7
1.26.10

Open the chart page →

1,382
memcachedkubelauncherVerified publisher0.1.351 of 1See more

memcached kubelauncher 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/memcacheddigest-pinned784fc5f58438
stdlib@go1.26.7
1.26.10

Open the chart page →

598
mysqlkubelauncherVerified publisher0.4.81 of 1See more

mysql kubelauncher 0.4.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/mysqldigest-pinnedb9374a84635d
stdlib@go1.26.7
1.26.10

Open the chart page →

724
postgresqlkubelauncherVerified publisher0.5.11 of 1See more

postgresql kubelauncher 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/postgresqldigest-pinned7cc7ce4de0eb
stdlib@go1.26.7
1.26.10

Open the chart page →

695
kubernetes-replicatorkubernetes-replicator2.12.41 of 1See more

kubernetes-replicator kubernetes-replicator 2.12.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/mittwald/kubernetes-replicator:v2.12.45dc9fc5ff59a
stdlib@go1.24.13
1.26.10

Open the chart page →

704
lakefslakefsVerified publisher1.12.461 of 1See more

lakefs lakefs 1.12.46

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
treeverse/lakefs:1.88.0237a17c6b2d8
stdlib@go1.26.8
1.26.10

Open the chart page →

573
coreneuvectorchartsVerified publisher2.11.33 of 5See more

core neuvectorcharts 2.11.3

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
neuvector/controller:5.6.3739682010f9a
stdlib@go1.27.2
1.26.10
neuvector/enforcer:5.6.33d176e9f1784
stdlib@go1.27.2
1.26.10
neuvector/scanner:6abb5b6e8be40
stdlib@go1.27.2
1.26.10

Open the chart page →

577
diunnicholaswildeVerified publisher1.0.01 of 1See more

diun nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/diun:4.19.0c94e32b888e4
stdlib@go1.16.5
1.26.10

Open the chart page →

5,037
openclawopenclawVerified publisher1.118.02 of 2See more

openclaw openclaw 1.118.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.57.06bac628b3d82
stdlib@go1.26.7
1.26.10
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.118.05c16346487a4
stdlib@go1.26.4
1.26.10

Open the chart page →

3,432
prometheus-stackdriver-exporterprometheus-communityVerified publisher5.2.01 of 1See more

prometheus-stackdriver-exporter prometheus-community 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prometheuscommunity/stackdriver-exporter:v0.19.0c0a0cbf76570
stdlib@go1.26.4
1.26.10

Open the chart page →

672
adguard-homerm3lVerified publisher0.25.01 of 2See more

adguard-home rm3l 0.25.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.513a143e6c071c
stdlib@go1.22.4
1.26.10

Open the chart page →

1,757
spegelspegelVerified publisher0.8.01 of 1See more

spegel spegel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/spegel-org/spegeldigest-pinnedb48194957bf9
stdlib@go1.27.2
1.26.10

Open the chart page →

82
supabasetokens-studioVerified publisher1.0.03 of 14See more

supabase tokens-studio 1.0.0

3 of the 14 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
stdlib@go1.23.2
1.26.10
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.10
supabase/gotrue:v2.163.0ba4ddc594b0b
stdlib@go1.22.3
1.26.10

Open the chart page →

89,811
woodpeckerwoodpecker-ci3.7.52 of 2See more

woodpecker woodpecker-ci 3.7.5

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
woodpeckerci/woodpecker-agent:v3.19.0f85f163e0949
stdlib@go1.27.1
1.26.10
woodpeckerci/woodpecker-server:v3.19.06ca167a3c58b
stdlib@go1.27.1
1.26.10

Open the chart page →

460
prometheus-operatorarldkaVerified publisher13.0.12 of 2See more

prometheus-operator arldka 13.0.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
stdlib@go1.22.2
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
stdlib@go1.19.4
1.26.10

Open the chart page →

3,620
renterdartur9010Verified publisher1.4.42 of 2See more

renterd artur9010 1.4.4

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
stdlib@go1.22.4
1.26.10
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
stdlib@go1.26.0
1.26.10

Open the chart page →

79,137
nsqbeeinventor1.3.01 of 1See more

nsq beeinventor 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nsqio/nsq:v1.3.01a369c146af7
stdlib@go1.21.5
1.26.10

Open the chart page →

1,394
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
stdlib@go1.17.1
1.26.10

Open the chart page →

4,747
kube-prometheuschoerodon9.3.14 of 7See more

kube-prometheus choerodon 9.3.1

4 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.26.10
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
stdlib@go1.13.11
1.26.10
squareup/ghostunnel:v1.5.270f4cf270425
stdlib@go1.13.4
1.26.10
quay.io/prometheus/node-exporter:v1.0.08a3a33cad0bd
stdlib@go1.14.3
1.26.10

Open the chart page →

17,653
cloudflare-ddnscloudflareVerified publisher1.0.31 of 1See more

cloudflare-ddns cloudflare 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/aureum-cloud/cloudflare-ddns:latestaeb75d1605f4
stdlib@go1.23.12
1.26.10

Open the chart page →

693
timescaledbcloudpirates-timescaledbVerified publisher0.13.131 of 1See more

timescaledb cloudpirates-timescaledb 0.13.13

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
timescale/timescaledb:2.31.0-pg17b56a3f51991d
stdlib@go1.26.2
1.26.10

Open the chart page →

1,080
openstack-cinder-csicloud-provider-openstack2.37.17 of 7See more

openstack-cinder-csi cloud-provider-openstack 2.37.1

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/cinder-csi-plugin:v1.37.1ad3832945f1e
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.10.0be59d0556508
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v5.3.0bb057f866177
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.26.10
registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0c7e0a3718832
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.17.09b75b9ade162
stdlib@go1.24.6
1.26.10

Open the chart page →

6,901
csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher1.8.25 of 5See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/azure/secrets-store/provider-azure:v1.8.255a0ad895a8f
stdlib@go1.26.9
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.14.06cb172e3de7e
stdlib@go1.26.5
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
stdlib@go1.25.7
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
stdlib@go1.26.3
1.26.10
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds:v1.5.6cb0112636dc4
stdlib@go1.26.3
1.26.10

Open the chart page →

5,174
paperless-ngxfmjstudios0.2.83 of 5See more

paperless-ngx fmjstudios 0.2.8

3 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/redis:latest33dbb7a4be39
stdlib@go1.26.9
1.26.10
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
stdlib@go1.21.5
1.26.10
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
stdlib@go1.19.8
1.26.10

Open the chart page →

35,881
minifluxgabe565Verified publisher0.9.21 of 2See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
stdlib@go1.23.5
1.26.10

Open the chart page →

2,072
cubestoregadsme1.2.01 of 3See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.24.061d866e93b56
stdlib@go1.19.9
1.26.10

Open the chart page →

3,984
grafana-operatorgrafana5.25.01 of 1See more

grafana-operator grafana 5.25.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/grafana/grafana-operator:v5.25.0bc572995823f
ca-certificates@20260413-r1
stdlib@go1.26.6
20260909-r3
1.26.10

Open the chart page →

261
kubernetes-ingresshaproxytechVerified publisher1.54.31 of 1See more

kubernetes-ingress haproxytech 1.54.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
haproxytech/kubernetes-ingress:3.2.1749e5bccffa05
stdlib@go1.27.2
1.26.10

Open the chart page →

17

Container images carrying it

6,268 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
stdlib@go1.20
1.26.10
1
ghcr.io/eraser-dev/eraser-manager:v1.4.2cda6025d1152
stdlib@go1.26.5
1.26.10
1
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
stdlib@go1.26.7
1.26.10
1
ghcr.io/erpc/erpc:0.1.18bfed3d49a08
stdlib@go1.26.4
1.26.10
1
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
stdlib@go1.23.9
1.26.10
1
ghcr.io/eryalito/kubensync-operator:0.14.1483efca276a8
stdlib@go1.26.8
1.26.10
1
ghcr.io/esdmitrii/kconmon-ng-agent:2.5.10cbfd4f7a9f5
stdlib@go1.27.1
1.26.10
1
ghcr.io/esdmitrii/kconmon-ng-controller:2.5.1ae1eda37ec0f
stdlib@go1.27.1
1.26.10
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
stdlib@go1.21.6
1.26.10
1
ghcr.io/ethan-kane-ops/cellcast-hub:v0.5.0c450eb54b7e4
stdlib@go1.26.8
1.26.10
1
ghcr.io/ethan-kane-ops/k8s-pod-oom-oracle:0.1.2538ed30a4c62
stdlib@go1.26.8
1.26.10
1
ghcr.io/ethan-kane-ops/scale-sentry:0.5.017a54e1f7c0b
stdlib@go1.26.8
1.26.10
1
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
stdlib@go1.24.13
1.26.10
1
ghcr.io/ethpandaops/dispatchoor-api:latesta0b272f6682a
stdlib@go1.24.13
1.26.10
1
ghcr.io/ethpandaops/syncoor:masterb63af9919a4e
stdlib@go1.26.9
1.26.10
1
ghcr.io/eugenmayer/whatsmyip:0.0.14b6700cc0e2d
stdlib@go1.22.1
1.26.10
1
ghcr.io/eugenmayer/whoami-tls:0.1.0477be2d05aba
stdlib@go1.24.1
1.26.10
1
ghcr.io/eumel8/rancher-servicemonitor:0.2.1f34428cac187
stdlib@go1.22.1
1.26.10
1
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
stdlib@go1.24.13
1.26.10
1
ghcr.io/exalsius/exalsius-operator:0.12.15e21ecd86281
stdlib@go1.26.8
1.26.10
1
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
stdlib@go1.17.5
1.26.10
1
ghcr.io/external-secrets/external-secrets:v2.11.066fb710878cb
stdlib@go1.26.6
1.26.10
1
ghcr.io/external-secrets/external-secrets:v2.10.0814117b0fd6d
stdlib@go1.26.6
1.26.10
1
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
stdlib@go1.26.2
1.26.10
1
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
stdlib@go1.20.6
1.26.10
1
ghcr.io/fabioluciano/tekton-events-relay:0.10.184cb5a2b8b81
stdlib@go1.26.4
1.26.10
1
ghcr.io/fastly/fastly-exporter:v10.3.02aa6d2ede814
stdlib@go1.27.0
1.26.10
1
ghcr.io/fbuchner/meerkat-crm:1.7.0d513bdd3ae80
stdlib@go1.26.5
1.26.10
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
stdlib@go1.21.6
1.26.10
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
stdlib@go1.17.8
1.26.10
1
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
stdlib@go1.19.5
1.26.10
1
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
stdlib@go1.25.4
1.26.10
1
ghcr.io/ferro-labs/ai-gateway:1.2.0baa285ec0fc9
stdlib@go1.25.12
1.26.10
1
ghcr.io/fikaworks/grgate:v0.6.37104f60d8972
stdlib@go1.20.2
1.26.10
1
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
stdlib@go1.26.8
1.26.10
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
stdlib@go1.24.6
1.26.10
1
ghcr.io/fission/fission-bundle:v1.27.0d353720b037a
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
1
ghcr.io/fission/pre-upgrade-checks:v1.27.0b053fc3539b4
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
1
ghcr.io/fission/reporter:v1.27.0c77cc925debe
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
1
ghcr.io/fjogeleit/trivy-operator-polr-adapter:0.11.537029b4d464f
ca-certificates@20260413-r0
stdlib@go1.26.4
20260909-r3
1.26.10
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
stdlib@go1.23.12
1.26.10
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
stdlib@go1.25.4
1.26.10
1
ghcr.io/flannel-io/flannel:v0.28.10f26b2403273c
stdlib@go1.26.8
1.26.10
1
ghcr.io/flannel-io/flannel-cni-plugin:v1.9.1-flannel39fccdf677e6e
stdlib@go1.26.5
1.26.10
1
ghcr.io/flatcar/flatcar-linux-update-operator:v0.10.0-rc1f9063e20b1f6
stdlib@go1.20.6
1.26.10
1
ghcr.io/flohansen/dasher-server:latest7cde8c3fa2d1
stdlib@go1.22.5
1.26.10
1
ghcr.io/fluent/fluent-operator/fluent-operator:3.10.03108194a4ecc
stdlib@go1.26.3
1.26.10
1
ghcr.io/fluxcd/flagger:1.45.015b372d35012
stdlib@go1.26.7
1.26.10
1
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
stdlib@go1.24.12
1.26.10
1
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
stdlib@go1.26.4
1.26.10
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.