StackRadar

CVE-2026-111943

Medium

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,239
of 18,232 indexed, latest versions
Container images
6,142
deployed by those charts
Fix available
6 of 9
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,239 of 18,232 indexed charts deploy, on 6,142 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+210 more1.26.106,034
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3112
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.1692
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1064
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r3no fix listed1
kubernetes-1.37apk1.37.1-r3no fix listed1
minioapk0.20251015.172955-r100.20260922.192518-r51
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0382RUSTSEC-2026-0383CGA-48x4-f6q2-2fc9CGA-9w23-c7x9-6gcfCGA-pj7v-5f5f-w56qDEBIAN-CVE-2026-111943RUSTSEC-2026-0381
Also known as
CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-rrcw-jqcr-h2gq
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,239 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

6,142 by charts deploying them

A fixed version is listed for 6 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.10
91
library/postgres:18:18.6:18.6-trixie:latest74935e722416
stdlib@go1.24.6
1.26.10
39
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.10
36
library/postgres:18:18.6:18.6-trixie:latestedb0c08dc33b
stdlib@go1.24.6
1.26.10
34
jenkins/jenkins:2.580.1-jdk21:2.580.1-lts-jdk21:ltsa660310e39ad
stdlib@go1.27.0
1.26.10
19
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10
15
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
14
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
14
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
stdlib@go1.18.10
1.26.10
13
quay.io/prometheus/node-exporter:latest:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
13
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
13
library/mariadb:13.0.2:latest0e4bb0f339fe
stdlib@go1.24.6
1.26.10
12
library/mysql:8:8.476f0358884cb
stdlib@go1.24.6
1.26.10
12
library/postgres:18.6-alpine:18.6-alpine3.24:18-alpine:alpine77f585114c32
stdlib@go1.24.6
1.26.10
12
quay.io/prometheus/prometheus:latest:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.10
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10
12
bitnami/redis:latest33dbb7a4be39
stdlib@go1.26.9
1.26.10
11
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.10
11
ghcr.io/quenchworks/images/kubectl924a275fd41f
kubernetes-1.37@1.37.1-r3
no fix listed
11
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.10
10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.10
10
library/postgres:16.15-alpine:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.10
10
library/postgres:17-alpineb0f9560a2de0
stdlib@go1.24.6
1.26.10
10
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
stdlib@go1.22.5
1.26.10
10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
10
grafana/grafana:latestdbbc38ea2110
stdlib@go1.26.9
1.26.10
9
library/mongo:9.0.4:latestdc28ed5a9d0f
stdlib@go1.26.8
1.26.10
9
quay.io/prometheus/alertmanager:latest:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10
9
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.26.10
8
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
8
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.10
8
library/rabbitmq:3.13-management:3-managemente582c0bc7766
stdlib@go1.22.2
1.26.10
8
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.26.10
8
ghcr.io/jkroepke/kube-webhook-certgen:1.11.0778d97dc3986
stdlib@go1.27.1
1.26.10
8
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
stdlib@go1.26.5
1.26.10
8
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.26.10
8
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
8
bitnami/kubectl:latest999d5eb28f40
stdlib@go1.26.8
1.26.10
7
bitnami/mongodb:latest101ca7755158
stdlib@go1.26.8
1.26.10
7
grafana/grafana:13.2.4-distrolessae3d3add290a
stdlib@go1.26.7
1.26.10
7
library/mysql:8:8.4:8.4.110f51e63e537a
stdlib@go1.24.6
1.26.10
7
library/mysql:26.7.0625f74ddf936
stdlib@go1.24.6
1.26.10
7
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10
7
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.26.10
7
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.26.10
7
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
stdlib@go1.27.2
1.26.10
7
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
stdlib@go1.26.4
1.26.10
7
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.26.10
7
quay.io/prometheus-operator/prometheus-operator:v0.94.17c88d4e7bae6
stdlib@go1.26.8
1.26.10
7

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.