StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,575
of 18,219 indexed, latest versions
Container images
6,494
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,575 of 18,219 indexed charts deploy, on 6,494 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,259
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3410
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1698
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1066
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,575 by stars
ChartLatestAffected imagesRadar Score
kubiks-agentkubiksVerified publisher0.4.03 of 3See more

kubiks-agent kubiks 0.4.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/beyla:2.2.2a9cf4560472e
stdlib@go1.24.1
1.26.10
otel/opentelemetry-collector-contrib:0.128.01ab0baba0ee3
stdlib@go1.24.4
1.26.10
ghcr.io/kubiks-inc/kubiks-k8s-agent:latest8611f74b4b99
stdlib@go1.23.10
1.26.10

Open the chart page →

4,906
kubemodkubmod0.5.22 of 2See more

kubemod kubmod 0.5.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubemod/kubemod:v0.19.11f8154f7e80c
stdlib@go1.18
1.26.10
kubemod/kubemod-crt:v1.3.0028347c9fa77
stdlib@go1.18.1
1.26.10

Open the chart page →

6,707
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.15 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
stdlib@go1.19.12
1.26.10
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
stdlib@go1.20.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
stdlib@go1.20.8
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
stdlib@go1.20.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
stdlib@go1.20.8
1.26.10

Open the chart page →

10,836
kubeservice-cpupools-controllerkubservice-chartsVerified publisher0.1.12 of 2See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dongjiang1989/cpusets-controller:v1.1.1dc5bd483874c
stdlib@go1.19.10
1.26.10
dongjiang1989/cpusets-device-plugin:v1.1.1923085c65123
stdlib@go1.19.10
1.26.10

Open the chart page →

4,603
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.05 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeservice-stack/customlimitrange-manager:v1.3.0d3ed97d142d4
stdlib@go1.24.1
1.26.10
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
stdlib@go1.20.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
stdlib@go1.20.8
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
stdlib@go1.20.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
stdlib@go1.20.8
1.26.10

Open the chart page →

9,687
kubeservice-ebpf-exporterkubservice-chartsVerified publisher1.2.11 of 1See more

kubeservice-ebpf-exporter kubservice-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cloudflare/ebpf_exporter:v2.3.075370b2ec2bb
stdlib@go1.21.5
1.26.10

Open the chart page →

1,068
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.25 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dongjiang1989/ns-node-affinity:latest451f7823723c
stdlib@go1.18.5
1.26.10
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
stdlib@go1.20.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
stdlib@go1.20.8
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
stdlib@go1.20.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
stdlib@go1.20.8
1.26.10

Open the chart page →

10,775
kubeservice-scheduler-pluskubservice-chartsVerified publisher0.2.12 of 2See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
dongjiang1989/crane-scheduler-controller:mainf0055c05dbee
stdlib@go1.19.9
1.26.10
dongjiang1989/node-metrics:latest3f1f266190bb
stdlib@go1.26.7
1.26.10

Open the chart page →

2,827
ingress-annotatorkuossOfficialVerified publisher0.3.01 of 1See more

ingress-annotator kuoss 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kuoss/ingress-annotator:v0.3.0ae179f65d869
stdlib@go1.24.6
1.26.10

Open the chart page →

1,001
kitcaddykvalitetsitVerified publisher1.5.111 of 2See more

kitcaddy kvalitetsit 1.5.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kvalitetsit/kitcaddy:1.5.110e66907ea266
stdlib@go1.26.6
1.26.10

Open the chart page →

449
kube-fencingkvaps2.4.12 of 2See more

kube-fencing kvaps 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
stdlib@go1.18.8
1.26.10
ghcr.io/kvaps/kube-fencing-switcher:v2.4.0f8c378e63b78
stdlib@go1.18.8
1.26.10

Open the chart page →

4,152
linstorkvaps1.14.04 of 11See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kvaps/linstor-controller:v1.14.000ce11c31087
stdlib@go1.15.14
1.26.10
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
stdlib@go1.15.14
1.26.10
ghcr.io/kvaps/linstor-ha-controller:v1.14.08e7b44bbd123
stdlib@go1.15.14
1.26.10
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
stdlib@go1.15.14
1.26.10

Open the chart page →

22,580
kymaroskymarosVerified publisher0.6.91 of 1See more

kymaros kymaros 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kymaroshq/kymaros:0.6.9fb3b88633381
stdlib@go1.25.9
1.26.10

Open the chart page →

680
chibisafel4gVerified publisher0.1.12 of 3See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latesta3a8606cd9b5
stdlib@go1.20.12
1.26.10
library/caddy:2-alpined8542f48d34a
stdlib@go1.26.8
1.26.10

Open the chart page →

4,009
auditflowlabs64io-helm-chartsVerified publisher0.15.201 of 3See more

auditflow labs64io-helm-charts 0.15.20

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
labs64/auditflowdigest-pinneda3a8a1aef03f
stdlib@go1.27.1
1.26.10

Open the chart page →

784
authz-pdplabs64io-helm-chartsVerified publisher0.8.71 of 1See more

authz-pdp labs64io-helm-charts 0.8.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cerbos/cerbosdigest-pinned540643bc67ba
stdlib@go1.27.1
1.26.10

Open the chart page →

231
checkoutlabs64io-helm-chartsVerified publisher0.11.102 of 3See more

checkout labs64io-helm-charts 0.11.10

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
labs64/checkoutdigest-pinned5a1a40af9186
stdlib@go1.26.7
1.26.10
library/postgres:1874935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

2,523
payment-gatewaylabs64io-helm-chartsVerified publisher0.10.122 of 2See more

payment-gateway labs64io-helm-charts 0.10.12

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
labs64/payment-gatewaydigest-pinnedf8c76a15b741
stdlib@go1.27.1
1.26.10
library/postgres:1874935e722416
stdlib@go1.24.6
1.26.10

Open the chart page →

2,497
lagoon-remotelagoon-chartsVerified publisher0.107.01 of 1See more

lagoon-remote lagoon-charts 0.107.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
stdlib@go1.24.3
1.26.10

Open the chart page →

3,426
lakilakiOfficialVerified publisher1.11.01 of 2See more

laki laki 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/laki-n/laki:v1.6.0599a10c453a3
stdlib@go1.27.0
1.26.10

Open the chart page →

774
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
stdlib@go1.13.10
1.26.10

Open the chart page →

9,591
glancelbenicio-communityVerified publisher0.1.31 of 1See more

glance lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
glanceapp/glance:latestbc5a392672c1
stdlib@go1.27.1
1.26.10

Open the chart page →

401
lgtmlgtmVerified publisher0.31.17 of 9See more

lgtm lgtm 0.31.1

7 of the 9 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:13.2.3-distroless202e5d5b3f84
stdlib@go1.26.7
1.26.10
grafana/loki:3.7.81107dd5274e0
stdlib@go1.26.6
1.26.10
grafana/pyroscope:2.4.0b7e62699a274
stdlib@go1.26.9
1.26.10
grafana/tempo:3.1.03076b8dcdfb3
stdlib@go1.27.1
1.26.10
ghcr.io/jkroepke/kube-webhook-certgen:1.8.958e4ac2e15bf
stdlib@go1.27.1
1.26.10
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.160.05323a0df9508
stdlib@go1.26.8
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
stdlib@go1.26.8
1.26.10

Open the chart page →

1,727
lgtm-stacklgtm-stackVerified publisher0.1.35 of 8See more

lgtm-stack lgtm-stack 0.1.3

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.10f4434c92b3e
stdlib@go1.26.5
1.26.10
grafana/grafana:13.1.0121a7a9ece6d
stdlib@go1.25.7
1.26.10
grafana/loki:3.7.6efd47c67f9ba
stdlib@go1.26.5
1.26.10
grafana/mimir:3.2.0736f7459913d
stdlib@go1.26.5
1.26.10
grafana/tempo:2.10.8f0561deb1c68
stdlib@go1.26.5
1.26.10

Open the chart page →

4,643
keptn-cert-managerlifecycle-toolkitVerified publisher0.3.01 of 1See more

keptn-cert-manager lifecycle-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keptn/certificate-operator:v3.0.0b82064b0e339
stdlib@go1.23.3
1.26.10

Open the chart page →

1,066
keptn-lifecycle-operatorlifecycle-toolkitVerified publisher0.6.01 of 1See more

keptn-lifecycle-operator lifecycle-toolkit 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
stdlib@go1.23.3
1.26.10

Open the chart page →

1,182
keptn-metrics-operatorlifecycle-toolkitVerified publisher0.5.01 of 1See more

keptn-metrics-operator lifecycle-toolkit 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
stdlib@go1.23.3
1.26.10

Open the chart page →

1,419
life-dashboardlife-dashboardVerified publisher1.1.21 of 2See more

life-dashboard life-dashboard 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/owen282000/life-dashboard-grafana:1.1.212a7bd52a1aa
stdlib@go1.26.7
1.26.10

Open the chart page →

334
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
stdlib@go1.13.8
1.26.10

Open the chart page →

5,965
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge2 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.3104d224a9999b
stdlib@go1.17.6
1.26.10
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
stdlib@go1.20.7
1.26.10

Open the chart page →

6,323
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
ca-certificates@20250619-r5
rustls-webpki@0.103.4
webpki-roots@1.0.2
20260909-r3
0.103.16
0.26.11

Open the chart page →

5,045
halitesql0.1.51 of 2See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/litesql/ha:latest992944f8e2b5
stdlib@go1.27.2
1.26.10

Open the chart page →

612
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
stdlib@go1.23.8
1.26.10

Open the chart page →

9,922
go-hello-worldloafoe0.17.01 of 1See more

go-hello-world loafoe 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/loafoe/go-hello-world:v2.16.022d94845e317
ca-certificates@20260909-r2
stdlib@go1.26.0
20260909-r3
1.26.10

Open the chart page →

622
stackradarlockdepVerified publisher0.2.04 of 4See more

stackradar lockdep 0.2.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.10
ghcr.io/lockdep/stackradar-client:0.2.01ef6c7132778
stdlib@go1.23.12
1.26.10
ghcr.io/lockdep/stackradar-scanner:0.7.045d82534d1d5
stdlib@go1.25.7
1.26.10
ghcr.io/lockdep/stackradar-server:0.2.046eed1f3046a
stdlib@go1.26.8
1.26.10

Open the chart page →

5,825
locust-k8s-operatorlocust-k8s-operatorVerified publisher2.3.11 of 1See more

locust-k8s-operator locust-k8s-operator 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lotest/locust-k8s-operator:2.3.1859b0d36f371
ca-certificates@20260611-r0
stdlib@go1.26.7
20260909-r3
1.26.10

Open the chart page →

280
home-assistantloeken-at-homeVerified publisher2026.9.21 of 1See more

home-assistant loeken-at-home 2026.9.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
loeken/home-assistant:2026.9.2b1dff5b4c593
rustls-webpki@0.103.13
stdlib@go1.25.6
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10

Open the chart page →

2,513
jspolicyloftVerified publisher0.2.21 of 1See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
loftsh/jspolicy:0.2.225deb9bd2683
stdlib@go1.17.13
1.26.10

Open the chart page →

3,396
vcluster-eksloftVerified publisher0.0.0-ci.33 of 4See more

vcluster-eks loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
stdlib@go1.16.15
1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-apiserver:v1.24.9-eks-1-24-772e06b605692
stdlib@go1.18.9
1.26.10
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager:v1.24.9-eks-1-24-7eaea8c230432
stdlib@go1.18.9
1.26.10

Open the chart page →

5,786
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
stdlib@go1.19.4
1.26.10

Open the chart page →

4,140
log2rbac-operatorlog2rbac-operator0.0.51 of 1See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jkremser/log2rbac:v0.0.5e35cf56ef183
stdlib@go1.17.6
1.26.10

Open the chart page →

3,065
logclilogcliVerified publisher0.1.01 of 1See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/logcli:main-c90366d-amd643d85bb66e39b
stdlib@go1.16.2
1.26.10

Open the chart page →

4,208
lokxylokxyVerified publisher0.2.01 of 1See more

lokxy lokxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lokxy/lokxy:v0.9.0e4ac800dc55d
stdlib@go1.26.4
1.26.10

Open the chart page →

537
plexluiscajl1.0.11 of 2See more

plex luiscajl 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:latestfc852e4c2135
stdlib@go1.27.1
1.26.10

Open the chart page →

799
lumenvoxlumenvox8.0.011 of 11See more

lumenvox lumenvox 8.0.0

11 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lumenvox/admin-portal:8.0258583dde8a7
stdlib@go1.27.1
1.26.10
lumenvox/archive:8.04611915d66f6
stdlib@go1.27.1
1.26.10
lumenvox/cloud-init-tools:8.0c01faf8d628d
stdlib@go1.27.1
1.26.10
lumenvox/configuration:8.07badfce0df13
stdlib@go1.27.1
1.26.10
lumenvox/deployment:8.0dce4f18b4945
stdlib@go1.27.1
1.26.10
lumenvox/deployment-portal:8.04cf9bad0381d
stdlib@go1.27.1
1.26.10
lumenvox/file-store:8.08090031da992
stdlib@go1.27.1
1.26.10
lumenvox/license:8.01f985ca4d603
stdlib@go1.27.1
1.26.10
lumenvox/management-api:8.098fe71067039
stdlib@go1.27.1
1.26.10
lumenvox/resource:8.026edd01fa2ee
stdlib@go1.27.1
1.26.10
lumenvox/storage:8.057d15feb3603
stdlib@go1.27.1
1.26.10

Open the chart page →

2,668
voice-biometricslumenvox2.0.18 of 26See more

voice-biometrics lumenvox 2.0.1

8 of the 26 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
library/traefik:v2.57d5a6ae66572
stdlib@go1.17.6
1.26.10
lumenvox/cloud-init-tools:2.0.07ff037a71c50
stdlib@go1.17.3
1.26.10
lumenvox/cloud-license:2.0.09a69862e1248
stdlib@go1.17.3
1.26.10
prom/pushgateway:v1.3.18305a33fb80a
stdlib@go1.15.6
1.26.10
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
stdlib@go1.14.4
1.26.10
quay.io/prometheus/node-exporter:v1.1.222fbde17ab64
stdlib@go1.15.8
1.26.10
quay.io/prometheus/prometheus:v2.26.038d40a760569
stdlib@go1.16.2
1.26.10

Open the chart page →

84,407
dnsbl-exporterluzillaVerified publisher0.5.01 of 2See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/luzilla/dnsbl_exporter:v0.12.0ecba7360ff12
stdlib@go1.25.0
1.26.10

Open the chart page →

2,146
lynqlynqVerified publisher1.1.221 of 1See more

lynq lynq 1.1.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/k8s-lynq/lynq:1.1.22229b05e3c717
stdlib@go1.24.13
1.26.10

Open the chart page →

1,075
cert-manager-webhook-infomaniakm0nsterrr-cert-manager-webhook-infomaniakVerified publisher1.1.31 of 1See more

cert-manager-webhook-infomaniak m0nsterrr-cert-manager-webhook-infomaniak 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/cert-manager-webhook-infomaniak:v0.1.65b7373bc3664
stdlib@go1.27.1
1.26.10

Open the chart page →

248
magentomagento3.2.35 of 12See more

magento magento 3.2.3

5 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
stdlib@go1.18.2
1.26.10
library/rabbitmq:4.1.0-management935b3f84c1e4
stdlib@go1.22.2
1.26.10
longhornio/longhorn-manager:v1.10.05b0bc1b88f0c
stdlib@go1.24.6
1.26.10
longhornio/longhorn-share-manager:v1.10.09f6e5e3be8ab
stdlib@go1.24.6
1.26.10
longhornio/longhorn-ui:v1.10.0e60f36161511
stdlib@go1.24.6
1.26.10

Open the chart page →

17,905

Container images carrying it

6,494 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
stdlib@go1.25.5
1.26.10
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
stdlib@go1.18
1.26.10
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
stdlib@go1.25.6
1.26.10
3
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
stdlib@go1.16.10
1.26.10
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
stdlib@go1.25.5
1.26.10
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
stdlib@go1.14.15
1.26.10
3
quay.io/devtron/jcmhproxy-ingress:v0.14.64286bcccda3e
stdlib@go1.19.13
1.26.10
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
stdlib@go1.20.4
1.26.10
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
stdlib@go1.25.0
1.26.10
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
stdlib@go1.25.0
1.26.10
3
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
stdlib@go1.25.5
1.26.10
3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
stdlib@go1.20.7
1.26.10
3
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
stdlib@go1.25.5
1.26.10
3
quay.io/devtron/nats:2.9.3-alpinef0cf3c3ab495
stdlib@go1.19.2
1.26.10
3
quay.io/devtron/nats-box:latest48cdd3054b20
stdlib@go1.19.2
1.26.10
3
quay.io/devtron/nats-server-config-reloader:0.6.2b5252e783fb2
stdlib@go1.15.14
1.26.10
3
quay.io/devtron/prometheus-nats-exporter:0.9.094044746cbce
stdlib@go1.16.15
1.26.10
3
quay.io/devtron/silver-surfer:e3b9a2f6-1191-387899640e2dc4316
stdlib@go1.21.5
1.26.10
3
quay.io/devtron/winter-soldier:abf5a822-196-14744093844c46c19
stdlib@go1.18.10
1.26.10
3
quay.io/dexidp/dex:v2.25.07bcf286807b8
stdlib@go1.14.9
1.26.10
3
quay.io/metallb/controller:v0.13.101b33357b3595
stdlib@go1.19.5
1.26.10
3
quay.io/oliver006/redis_exporter:v1.35.1908dbee5c546
stdlib@go1.17.7
1.26.10
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
stdlib@go1.20.10
1.26.10
3
quay.io/prometheus/alertmanager:v0.26.0361db356b330
stdlib@go1.20.7
1.26.10
3
quay.io/prometheus/node-exporter:v1.1.222fbde17ab64
stdlib@go1.15.8
1.26.10
3
quay.io/prometheus/node-exporter:v1.6.181f94e50ea37
stdlib@go1.20.6
1.26.10
3
quay.io/prometheus/node-exporter:v1.8.08a57af80a4c7
stdlib@go1.22.2
1.26.10
3
quay.io/prometheus/node-exporter:v1.2.2a990408ed288
stdlib@go1.16.7
1.26.10
3
quay.io/prometheus-operator/prometheus-operator:v0.90.152a6a92d915e
stdlib@go1.25.8
1.26.10
3
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
stdlib@go1.22.3
1.26.10
3
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
stdlib@go1.26.4
1.26.10
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
stdlib@go1.19.4
1.26.10
3
quay.io/prometheus/prometheus:v2.55.0378f4e037035
stdlib@go1.23.2
1.26.10
3
quay.io/prometheus/prometheus:v2.26.038d40a760569
stdlib@go1.16.2
1.26.10
3
quay.io/prometheus/prometheus:latest:v3.14.05ce7540c3c00
stdlib@go1.26.6
1.26.10
3
quay.io/prometheus/prometheus:v3.10.07571a304e67f
stdlib@go1.26.0
1.26.10
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
stdlib@go1.17.3
1.26.10
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
stdlib@go1.19.7
1.26.10
3
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
stdlib@go1.22.6
1.26.10
3
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
stdlib@go1.23.1
1.26.10
3
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
stdlib@go1.22.1
1.26.10
3
quay.io/prometheus/snmp-exporter:v0.30.1e5fd5e8b43ac
stdlib@go1.25.5
1.26.10
3
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
stdlib@go1.16.8
1.26.10
3
quay.io/tigera/operator:v1.44.0066c2e8d6745
stdlib@go1.27.1-X:boringcrypto
1.26.10
3
registry.k8s.io/autoscaling/vpa-admission-controller:1.7.1be29624f7f12
stdlib@go1.26.5
1.26.10
3
registry.k8s.io/autoscaling/vpa-recommender:1.7.189cea705535f
stdlib@go1.26.5
1.26.10
3
registry.k8s.io/autoscaling/vpa-updater:1.7.1feb42a526970
stdlib@go1.26.5
1.26.10
3
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
stdlib@go1.19.2
1.26.10
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
stdlib@go1.20.5
1.26.10
3
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.136d05b4077fb
stdlib@go1.22.2
1.26.10
3

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.