StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,294
of 18,232 indexed, latest versions
Container images
6,212
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,294 of 18,232 indexed charts deploy, on 6,212 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,104
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,294 by stars
ChartLatestAffected imagesRadar Score
kubedb-ui-serverappscodeVerified publisher2021.12.211 of 1See more

kubedb-ui-server appscode 2021.12.21

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubedb/kubedb-ui-server:v0.0.1_linux_amd647d27865514ee
stdlib@go1.17.8
1.26.10

Open the chart page →

3,154
kubedb-webhook-serverappscodeVerified publisher0.44.01 of 1See more

kubedb-webhook-server appscode 0.44.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-webhook-server:v0.44.02908cfb91761
stdlib@go1.27.2
1.26.10

Open the chart page →

363
kubeform-provider-awsappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
stdlib@go1.19.1
1.26.10

Open the chart page →

3,812
kubeform-provider-azureappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-azure appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
stdlib@go1.20.5
1.26.10

Open the chart page →

3,726
kubeform-provider-gcpappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-gcp appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
stdlib@go1.19.9
1.26.10

Open the chart page →

3,752
kubestashappscodeVerified publisher2026.10.122 of 2See more

kubestash appscode 2026.10.12

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubestash/kubestash:v0.30.04ff37f9863d5
stdlib@go1.25.5
1.26.10

Open the chart page →

1,880
kubestash-certifiedappscodeVerified publisher2026.7.102 of 2See more

kubestash-certified appscode 2026.7.10

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubestash/kubestash:v0.29.00686b2a40280
stdlib@go1.25.13
1.26.10

Open the chart page →

1,895
kubestash-operatorappscodeVerified publisher0.30.02 of 2See more

kubestash-operator appscode 0.30.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubestash/kubestash:v0.30.04ff37f9863d5
stdlib@go1.25.5
1.26.10

Open the chart page →

1,880
kube-ui-serverappscodeVerified publisher2026.11.301 of 1See more

kube-ui-server appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-ui-server:v0.9.0e93ec35a2b0c
stdlib@go1.27.2
1.26.10

Open the chart page →

383
kubevaultappscodeVerified publisher2026.10.123 of 3See more

kubevault appscode 2026.10.12

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubevault/kubevault-crd-manager:v0.2.088b9a05b49a3
stdlib@go1.27.2
1.26.10
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
stdlib@go1.27.2
1.26.10

Open the chart page →

1,344
kubevault-certifiedappscodeVerified publisher2026.2.271 of 1See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
stdlib@go1.25.9
1.26.10

Open the chart page →

1,669
kubevault-crd-managerappscodeVerified publisher2026.10.121 of 1See more

kubevault-crd-manager appscode 2026.10.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubevault/kubevault-crd-manager:v0.2.088b9a05b49a3
stdlib@go1.27.2
1.26.10

Open the chart page →

285
kubevault-operatorappscodeVerified publisher0.26.01 of 1See more

kubevault-operator appscode 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
stdlib@go1.27.2
1.26.10

Open the chart page →

322
kubevault-webhook-serverappscodeVerified publisher0.26.02 of 2See more

kubevault-webhook-server appscode 0.26.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
stdlib@go1.27.2
1.26.10

Open the chart page →

1,059
kubevirt-infra-csi-driverappscodeVerified publisher0.1.05 of 6See more

kubevirt-infra-csi-driver appscode 0.1.0

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-csi-driver:latest44c98353e613
stdlib@go1.24.13
1.26.10
quay.io/openshift/origin-csi-external-attacher:latestd984102dfcdb
stdlib@go1.24.11
1.26.10
quay.io/openshift/origin-csi-external-provisioner:latest250b9a4fce50
stdlib@go1.24.6
1.26.10
quay.io/openshift/origin-csi-livenessprobe:latesta6341950c413
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v1.13.12a0b297cc7c4
stdlib@go1.23.1
1.26.10

Open the chart page →

6,139
kubevirt-tenant-csi-driverappscodeVerified publisher0.1.04 of 4See more

kubevirt-tenant-csi-driver appscode 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-csi-driver:latest44c98353e613
stdlib@go1.24.13
1.26.10
quay.io/openshift/origin-csi-livenessprobe:latesta6341950c413
stdlib@go1.24.6
1.26.10
quay.io/openshift/origin-csi-node-driver-registrar:latest5102b02862b8
stdlib@go1.24.6
1.26.10
registry.k8s.io/sig-storage/snapshot-controller:v6.3.1ce6ca3c0e30b
stdlib@go1.20.5
1.26.10

Open the chart page →

4,778
license-proxyserverappscodeVerified publisher2026.9.181 of 1See more

license-proxyserver appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.1.28dfd7a44f362
stdlib@go1.25.13
1.26.10

Open the chart page →

345
license-proxyserver-addon-managerappscodeVerified publisher2024.2.251 of 1See more

license-proxyserver-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.0.8d6c2532ea386
stdlib@go1.22.1
1.26.10

Open the chart page →

2,112
license-proxyserver-managerappscodeVerified publisher2026.9.181 of 1See more

license-proxyserver-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.1.28dfd7a44f362
stdlib@go1.25.13
1.26.10

Open the chart page →

345
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
stdlib@go1.22.0
1.26.10

Open the chart page →

3,211
managed-serviceaccount-managerappscodeVerified publisher2026.2.161 of 1See more

managed-serviceaccount-manager appscode 2026.2.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
stdlib@go1.25.8
1.26.10

Open the chart page →

1,467
marketplace-apiappscodeVerified publisher2026.11.301 of 1See more

marketplace-api appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
stdlib@go1.27.2
1.26.10

Open the chart page →

2,766
monitoring-operatorappscodeVerified publisher2026.6.121 of 1See more

monitoring-operator appscode 2026.6.12

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
stdlib@go1.25.13
1.26.10

Open the chart page →

687
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
stdlib@go1.21.8
1.26.10

Open the chart page →

3,380
multicluster-ingress-readerappscodeVerified publisher2024.7.101 of 1See more

multicluster-ingress-reader appscode 2024.7.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10

Open the chart page →

737
offline-license-serverappscodeVerified publisher2026.11.301 of 2See more

offline-license-server appscode 2026.11.30

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/offline-license-server:v0.0.76e4b66308d8f6
stdlib@go1.25.5
1.26.10

Open the chart page →

2,298
opentelemetry-kube-stackappscodeVerified publisher0.14.123 of 3See more

opentelemetry-kube-stack appscode 0.14.12

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/kubectl:v1.34.1090bef429ed1
stdlib@go1.24.6
1.26.10
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.144.079b81912f1fb
stdlib@go1.25.6
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
stdlib@go1.25.1
1.26.10

Open the chart page →

3,440
operator-shard-managerappscodeVerified publisher2026.6.221 of 1See more

operator-shard-manager appscode 2026.6.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/operator-shard-manager:v0.0.64a16c6ccecb8
stdlib@go1.25.11
1.26.10

Open the chart page →

844
opscenter-configappscodeVerified publisher2022.6.141 of 2See more

opscenter-config appscode 2022.6.14

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/panopticon:v0.0.62cdae231ed8a
stdlib@go1.19.4
1.26.10

Open the chart page →

2,722
opscenter-coreappscodeVerified publisher2022.6.144 of 4See more

opscenter-core appscode 2022.6.14

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana-tools:v0.0.1f60324bca644
stdlib@go1.19.4
1.26.10
ghcr.io/appscode/kube-ui-server:v0.0.1340775d6850b5
stdlib@go1.19.5
1.26.10
ghcr.io/appscode/license-proxyserver:v0.0.372a5c874d854
stdlib@go1.19.6
1.26.10
ghcr.io/appscode/supervisor:v0.0.21a58f56724da
stdlib@go1.19.4
1.26.10

Open the chart page →

11,314
outbox-syncerappscodeVerified publisher2026.11.301 of 1See more

outbox-syncer appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/outboxsyncer:v0.6.0c52861c4669f
stdlib@go1.25.13
1.26.10

Open the chart page →

382
panopticonappscodeVerified publisher2026.9.182 of 2See more

panopticon appscode 2026.9.18

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/appscode/panopticon:v0.0.243ea0e226a86d
stdlib@go1.25.13
1.26.10

Open the chart page →

1,152
persesappscodeVerified publisher2026.6.22 of 2See more

perses appscode 2026.6.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode-images/postgres:18.3-bookworm8d320c6facbc
stdlib@go1.24.6
1.26.10
ghcr.io/opnpulse/perses:v2026.4.2460528178bb53
stdlib@go1.25.14
1.26.10

Open the chart page →

3,859
petsetappscodeVerified publisher2026.9.181 of 1See more

petset appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.2.0acf407bb57d7
stdlib@go1.25.13
1.26.10

Open the chart page →

779
pgoutboxappscodeVerified publisher2026.7.101 of 1See more

pgoutbox appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/pgoutbox:v0.0.4a96e06ec5e9f
stdlib@go1.25.12
1.26.10

Open the chart page →

1,319
platform-apiappscodeVerified publisher2026.11.302 of 3See more

platform-api appscode 2026.11.30

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
stdlib@go1.27.2
1.26.10
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
stdlib@go1.25.4
1.26.10

Open the chart page →

49,447
platform-linksappscodeVerified publisher2026.11.301 of 1See more

platform-links appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/fileserver:v0.0.2b1857871e06c
stdlib@go1.25.4
1.26.10

Open the chart page →

1,311
prom-label-proxyappscodeVerified publisher2026.9.221 of 1See more

prom-label-proxy appscode 2026.9.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/opnpulse/prom-label-proxy:v2026.9.22cf360f4b79b7
stdlib@go1.25.14
1.26.10

Open the chart page →

380
prom-proxyappscodeVerified publisher2023.3.231 of 1See more

prom-proxy appscode 2023.3.23

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2023.03.235f5a40fc1702
stdlib@go1.20.2
1.26.10

Open the chart page →

3,608
regcacheappscodeVerified publisher2026.11.301 of 1See more

regcache appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/registry:3.1.11be55279f18a
stdlib@go1.25.9
1.26.10

Open the chart page →

1,121
secrets-store-csi-driver-provider-virtual-secretsappscodeVerified publisher2026.8.141 of 1See more

secrets-store-csi-driver-provider-virtual-secrets appscode 2026.8.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/secrets-store-csi-driver-provider-virtual-secrets:v0.2.07afb394f9f97
stdlib@go1.25.12
1.26.10

Open the chart page →

1,087
service-backendappscodeVerified publisher2026.11.301 of 1See more

service-backend appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
stdlib@go1.25.5
1.26.10

Open the chart page →

1,943
service-gatewayappscodeVerified publisher2026.11.303 of 3See more

service-gateway appscode 2026.11.30

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.4.04466bb77dc78
stdlib@go1.25.13
1.26.10
ghcr.io/voyagermesh/echoserver:v20221109fa56a9251de6
stdlib@go1.19
1.26.10
ghcr.io/voyagermesh/gateway:v1.8.24237fd16a3cb
stdlib@go1.26.4
1.26.10

Open the chart page →

3,679
service-presetsappscodeVerified publisher2024.2.111 of 1See more

service-presets appscode 2024.2.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/echoserver:v20221109-7ee2f3efa56a9251de6
stdlib@go1.19
1.26.10

Open the chart page →

1,589
service-providerappscodeVerified publisher2026.11.302 of 2See more

service-provider appscode 2026.11.30

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.18.27de54b6dedc8
stdlib@go1.23.3
1.26.10
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
stdlib@go1.25.5
1.26.10

Open the chart page →

3,459
service-vaultappscodeVerified publisher2026.11.303 of 3See more

service-vault appscode 2026.11.30

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
ghcr.io/kubevault/kubevault-crd-manager:v0.2.088b9a05b49a3
stdlib@go1.27.2
1.26.10
ghcr.io/kubevault/vault-operator:v0.26.0572f2d93c8de
stdlib@go1.27.2
1.26.10

Open the chart page →

1,344
sidekickappscodeVerified publisher2026.7.101 of 1See more

sidekick appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/appscode/sidekick:v0.0.16d8d2a3c22ee7
stdlib@go1.25.12
1.26.10

Open the chart page →

672
stash-communityappscodeVerified publisher0.42.04 of 4See more

stash-community appscode 0.42.0

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.26.10
ghcr.io/appscode/kubectl-nonroot:1.3183d43cc41590
stdlib@go1.24.9
1.26.10
ghcr.io/stashed/stash:v0.42.03a98245a7667
stdlib@go1.25.3
1.26.10
ghcr.io/stashed/stash-crd-installer:v0.42.076f0a650e44b
stdlib@go1.25.3
1.26.10

Open the chart page →

6,419
stash-opscenterappscodeVerified publisher2025.10.171 of 1See more

stash-opscenter appscode 2025.10.17

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
stdlib@go1.25.3
1.26.10

Open the chart page →

1,197
stash-ui-serverappscodeVerified publisher0.23.01 of 1See more

stash-ui-server appscode 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
stdlib@go1.25.3
1.26.10

Open the chart page →

1,197

Container images carrying it

6,212 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
stdlib@go1.24.9
1.26.10
1
ghcr.io/kagent-dev/kagent/tools:0.3.0cb89eb762161
stdlib@go1.26.7
1.26.10
1
ghcr.io/kagent-dev/kmcp/controller:0.2.283276357d448
stdlib@go1.24.11
1.26.10
1
ghcr.io/kagent-dev/kmcp/controller:0.3.086ab878da25a
stdlib@go1.24.13
1.26.10
1
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
stdlib@go1.23.5
1.26.10
1
ghcr.io/kamu-data/kamu-api-server:0.94.093a07071cf3a
stdlib@go1.15.2
1.26.10
1
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
stdlib@go1.20.7
1.26.10
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
stdlib@go1.23.10
1.26.10
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
stdlib@go1.23.10
1.26.10
1
ghcr.io/kargops/artifact-controller:v0.9.10b42a68e9e27
stdlib@go1.26.7
1.26.10
1
ghcr.io/karlderkaefer/argocd-ecr-updater:1.4.6ed5d4b74792c
stdlib@go1.26.5
1.26.10
1
ghcr.io/kcp-dev/kcp-operator:v0.9.0cd8bf46d98e0
stdlib@go1.26.4
1.26.10
1
ghcr.io/kedacore/http-add-on-interceptor:0.16.03a9a454b949e
stdlib@go1.27.1
1.26.10
1
ghcr.io/kedacore/http-add-on-operator:0.16.02ae0076d549f
stdlib@go1.27.1
1.26.10
1
ghcr.io/kedacore/http-add-on-scaler:0.16.0db5223b1a375
stdlib@go1.27.1
1.26.10
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
stdlib@go1.23.3
1.26.10
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
stdlib@go1.23.8
1.26.10
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
stdlib@go1.23.8
1.26.10
1
ghcr.io/kedacore/keda:2.21.081fe6547ce8d
stdlib@go1.26.8
1.26.10
1
ghcr.io/kedacore/keda-admission-webhooks:2.17.0a87c42275757
stdlib@go1.23.8
1.26.10
1
ghcr.io/kedacore/keda-admission-webhooks:2.17.2c8227c6edb4d
stdlib@go1.23.8
1.26.10
1
ghcr.io/kedacore/keda-admission-webhooks:2.21.0e1969628cca6
stdlib@go1.26.8
1.26.10
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
stdlib@go1.23.8
1.26.10
1
ghcr.io/kedacore/keda-metrics-apiserver:2.21.0255375037fe5
stdlib@go1.26.8
1.26.10
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
stdlib@go1.23.3
1.26.10
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
stdlib@go1.23.8
1.26.10
1
ghcr.io/keel-hq/keel:0.22.409872633675d
stdlib@go1.26.5
1.26.10
1
ghcr.io/keiailab/mongodb-operator:v1.16.10fd3625695d18
stdlib@go1.26.8
1.26.10
1
ghcr.io/keiailab/nodevitals:0.9.4b07e506d4cb1
stdlib@go1.26.8
1.26.10
1
ghcr.io/keiailab/qdrant-operator:v0.10.23da83bf91aa1
stdlib@go1.26.8
1.26.10
1
ghcr.io/keiailab/valkey-operator:1.5.42fd8f2768634
stdlib@go1.26.8
1.26.10
1
ghcr.io/keptn/certificate-operator:v1.1.08fdd311a6d33
stdlib@go1.20.4
1.26.10
1
ghcr.io/keptn/lifecycle-operator:v0.8.2487bfc37c4b4
stdlib@go1.20.4
1.26.10
1
ghcr.io/keptn/metrics-operator:v0.8.2acf22310e9dd
stdlib@go1.20.4
1.26.10
1
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
stdlib@go1.20.4
1.26.10
1
ghcr.io/kgma74/dockyard:0.5.015d1d5769e91
stdlib@go1.22.7
1.26.10
1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
stdlib@go1.18.9
1.26.10
1
ghcr.io/kikplate/kikplate-api:main2fbce0601a3c
stdlib@go1.25.11
1.26.10
1
ghcr.io/kite-org/kite:v0.16.0951616cbaf9c
stdlib@go1.26.8
1.26.10
1
ghcr.io/kj187/jarvis:2.1.0da86a4711677
stdlib@go1.27.2
1.26.10
1
ghcr.io/kkb0318/irsa-manager:0.3.296d600ae97b4
stdlib@go1.22.7
1.26.10
1
ghcr.io/kkb0318/kom:0.3.04e77eff2d906
stdlib@go1.24.4
1.26.10
1
ghcr.io/kluster-manager/cluster-gateway:v1.12.158bed8d1e7fc
stdlib@go1.25.11
1.26.10
1
ghcr.io/kluster-manager/cluster-gateway-manager:v1.12.1f22cae0e6cf3
stdlib@go1.25.11
1.26.10
1
ghcr.io/kluster-manager/cluster-profile:v0.13.0596172d6c495
stdlib@go1.25.13
1.26.10
1
ghcr.io/kluster-manager/cluster-proxy:latest27a5c64b7ea8
stdlib@go1.21.8
1.26.10
1
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
stdlib@go1.25.11
1.26.10
1
ghcr.io/kluster-manager/fluxcd-addon:v0.0.1137105f529ed0
stdlib@go1.25.13
1.26.10
1
ghcr.io/kluster-manager/fluxcd-addon:v0.0.23acba3df8827
stdlib@go1.22.3
1.26.10
1
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
stdlib@go1.22.0
1.26.10
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.