StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,728
of 18,208 indexed, latest versions
Container images
6,681
deployed by those charts
Fix available
5 of 5
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,728 of 18,208 indexed charts deploy, on 6,681 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+212 more1.26.106,438
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+17 more20260909-r3417
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16103
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1070
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1113
OSV records
CGA-32jh-59ph-xj58GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-4vq7-3845-2x3f, CGA-78cp-qf6f-2wwp, CGA-878x-h4c8-9gjg, CGA-cp2v-52gh-c9fc, CGA-q86x-xxh4-8xv2
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,728 by stars
ChartLatestAffected imagesRadar Score
nginx-gateway-fabricnginx-gateway-fabricOfficialVerified publisher0.0.0-edge1 of 1See more

nginx-gateway-fabric nginx-gateway-fabric 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/nginx/nginx-gateway-fabric:edgee15ba2abf4e6
stdlib@go1.27.2
1.26.10

Open the chart page →

71
rancherrancher-latest2.15.22 of 2See more

rancher rancher-latest 2.15.2

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.20c3d8e570255
stdlib@go1.26.4
1.26.10
rancher/shell:v0.8.21eeed72d4eda
stdlib@go1.26.8
1.26.10

Open the chart page →

2,745
nacosygqygq2Verified publisher2.1.102 of 4See more

nacos ygqygq2 2.1.10

2 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nacos/nacos-peer-finder-plugin:latesta9c769301fa6
stdlib@go1.13.5
1.26.10
ygqygq2/mysql-exec-sql:latest54f30def1558
stdlib@go1.18.2
1.26.10

Open the chart page →

7,428
sealed-secretsbitnamiVerified publisher2.5.191 of 1See more

sealed-secrets bitnami 2.5.19

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/sealed-secrets-controller:0.31.0-debian-12-r074eaff41382b
stdlib@go1.24.6
1.26.10

Open the chart page →

1,168
mariadbcloudpirates-mariadbVerified publisher0.16.161 of 1See more

mariadb cloudpirates-mariadb 0.16.16

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mariadb:13.0.2f1bba652ba57
stdlib@go1.26.7
1.26.10

Open the chart page →

2,001
difydoubanVerified publisher0.10.04 of 6See more

dify douban 0.10.0

4 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
stdlib@go1.21.9
1.26.10
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
stdlib@go1.25.5
1.26.10
langgenius/dify-sandbox:0.2.124e65e8a351a2
stdlib@go1.23.3
1.26.10
langgenius/dify-web:1.10.1-fix.1c306ac577912
stdlib@go1.23.5
1.26.10

Open the chart page →

84,023
kubesharkkubeshark-helm-chartsOfficialVerified publisher53.5.02 of 3See more

kubeshark kubeshark-helm-charts 53.5.0

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kubeshark/hub:v53.50532936678f8
stdlib@go1.27.1
1.26.10
kubeshark/worker:v53.51f3e121224f8
stdlib@go1.26.5
1.26.10

Open the chart page →

1,579
secrets-store-csi-driversecret-store-csi-driver1.6.14 of 4See more

secrets-store-csi-driver secret-store-csi-driver 1.6.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
stdlib@go1.26.8
1.26.10
registry.k8s.io/csi-secrets-store/driver-crds:v1.6.1cdacfdbe8966
stdlib@go1.26.5
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.18.0c4cc074199c0
stdlib@go1.25.7
1.26.10

Open the chart page →

3,323
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.31 of 2See more

stackgres-operator stackgres-charts 1.19.3

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
stdlib@go1.20.10
1.26.10

Open the chart page →

3,317
victoria-logs-singlevictoriametricsVerified publisher0.13.101 of 1See more

victoria-logs-single victoriametrics 0.13.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/victoria-logs:v1.53.0251121fa882a
stdlib@go1.27.1
1.26.10

Open the chart page →

160
mongodbcloudpirates-mongodbVerified publisher0.20.11 of 1See more

mongodb cloudpirates-mongodb 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/mongo:9.0.2bac22ea7710d
stdlib@go1.26.8
1.26.10

Open the chart page →

1,441
kube-image-keeperenixVerified publisher2.3.11 of 1See more

kube-image-keeper enix 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/enix/kube-image-keeper:2.3.1d3ccf28495c3
stdlib@go1.26.6
1.26.10

Open the chart page →

342
mattermost-team-editionmattermostVerified publisher6.6.1091 of 4See more

mattermost-team-edition mattermost 6.6.109

1 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:12.0.0c213d4eb01c2
stdlib@go1.26.7
1.26.10

Open the chart page →

2,132
code-servernicholaswildeVerified publisher1.1.11 of 1See more

code-server nicholaswilde 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
stdlib@go1.16.4
1.26.10

Open the chart page →

18,515
opensearch-operatoropensearch-operatorVerified publisher3.0.141 of 1See more

opensearch-operator opensearch-operator 3.0.14

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
opensearchproject/opensearch-operator:3.0.099d4fb8144cd
stdlib@go1.26.8
1.26.10

Open the chart page →

245
pxc-operatorpercona1.20.11 of 1See more

pxc-operator percona 1.20.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster-operator:1.20.0ac4d0995c71e
stdlib@go1.26.4
1.26.10

Open the chart page →

864
akhqakhq0.28.01 of 1See more

akhq akhq 0.28.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
tchiotludo/akhq:0.28.0c2824dc2ae44
stdlib@go1.26.5
1.26.10

Open the chart page →

2,390
pulsarapache4.8.06 of 10See more

pulsar apache 4.8.0

6 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
stdlib@go1.25.7
1.26.10
grafana/grafana:12.4.1e932bd6ed0e0
stdlib@go1.25.8
1.26.10
rancher/kubectl:v1.25.085a0d1148784
stdlib@go1.19
1.26.10
victoriametrics/operator:v0.68.3f52e1bd679cb
stdlib@go1.25.8
1.26.10
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
stdlib@go1.25.3
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

14,055
miniocloudpirates-minioVerified publisher0.14.01 of 1See more

minio cloudpirates-minio 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
stdlib@go1.25.7
1.26.10

Open the chart page →

1,780
vertical-pod-autoscalercowboysysopVerified publisher11.1.14 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

4 of the 4 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
stdlib@go1.21.8
1.26.10
registry.k8s.io/autoscaling/vpa-admission-controller:1.5.19928d59477fb
stdlib@go1.24.6
1.26.10
registry.k8s.io/autoscaling/vpa-recommender:1.5.1e629c61b75eb
stdlib@go1.24.6
1.26.10
registry.k8s.io/autoscaling/vpa-updater:1.5.1cba2aa4b3239
stdlib@go1.24.6
1.26.10

Open the chart page →

9,443
eclipse-cheeclipse-cheVerified publisher7.124.01 of 1See more

eclipse-che eclipse-che 7.124.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/eclipse/che-operator:7.124.0489d858cd5d0
stdlib@go1.26.5
1.26.10

Open the chart page →

1,070
pyroscopegrafana2.4.03 of 3See more

pyroscope grafana 2.4.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/alloy:v1.19.2b8ec653c4423
stdlib@go1.26.7
1.26.10
grafana/pyroscope:2.4.0b7e62699a274
stdlib@go1.26.9
1.26.10
quay.io/prometheus-operator/prometheus-config-reloader:v0.91.07d9e4eea5f11
stdlib@go1.25.9
1.26.10

Open the chart page →

2,042
botkubeinfracloudioVerified publisher1.14.01 of 1See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
stdlib@go1.21.13
1.26.10

Open the chart page →

1,705
operatorminio-operator7.1.11 of 1See more

operator minio-operator 7.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/minio/operator:v7.1.1cd587f60c43d
stdlib@go1.24.2
1.26.10

Open the chart page →

1,474
thanosthanos-communityOfficialVerified publisher0.47.21 of 1See more

thanos thanos-community 0.47.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.42.4b567818fe608
stdlib@go1.26.5
1.26.10

Open the chart page →

537
unleashunleash5.6.91 of 2See more

unleash unleash 5.6.9

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
stdlib@go1.24.6
1.26.10

Open the chart page →

2,475
tetragonciliumOfficialVerified publisher1.7.12 of 3See more

tetragon cilium 1.7.1

2 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
stdlib@go1.26.7
1.26.10
quay.io/cilium/tetragon-operator:v1.7.1cd8b71f6860e
stdlib@go1.26.7
1.26.10

Open the chart page →

716
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
stdlib@go1.15
1.26.10

Open the chart page →

5,702
difydify-helmVerified publisher0.39.05 of 11See more

dify dify-helm 0.39.0

5 of the 11 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.11-debian-11-r121161dcd293a0
stdlib@go1.19.9
1.26.10
langgenius/dify-agent-local-sandbox:1.17.0316279a82ead
stdlib@go1.26.7
1.26.10
langgenius/dify-api:1.17.052be6088dd84
stdlib@go1.26.5
1.26.10
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
rustls-webpki@0.103.13
stdlib@go1.26.5
webpki-root-certs@1.0.9
0.103.16
1.26.10
1.0.10
langgenius/dify-sandbox:0.2.15750e1111426e
stdlib@go1.24.13
1.26.10

Open the chart page →

63,506
k6-operatorgrafana4.7.01 of 1See more

k6-operator grafana 4.7.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/grafana/k6-operator:controller-v1.7.0f56440a22e8f
stdlib@go1.27.1
1.26.10

Open the chart page →

160
rabbitmqgroundhog2k2.3.91 of 2See more

rabbitmq groundhog2k 2.3.9

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.6720afe694c40
stdlib@go1.22.2
1.26.10

Open the chart page →

1,409
telegrafinfluxdata1.8.781 of 1See more

telegraf influxdata 1.8.78

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/telegraf:1.40-alpined3b22c2bd211
stdlib@go1.27.1
1.26.10

Open the chart page →

244
kiali-serverkiali2.33.01 of 1See more

kiali-server kiali 2.33.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kiali/kiali:v2.33.0082246cfc99f
stdlib@go1.26.3
1.26.10

Open the chart page →

602
ingresskongOfficialVerified publisher0.24.01 of 2See more

ingress kong 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kong/kubernetes-ingress-controller:3.5979f12864a13
stdlib@go1.25.12
1.26.10

Open the chart page →

1,036
vela-corekubevela1.11.03 of 3See more

vela-core kubevela 1.11.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oamdev/cluster-gateway:v1.9.0-alpha.25591e29d66a2
stdlib@go1.19.8
1.26.10
oamdev/kube-webhook-certgen:v2.4.1231c423c2b17
stdlib@go1.17.11
1.26.10
oamdev/vela-core:v1.11.095fa412c934e
stdlib@go1.23.8
1.26.10

Open the chart page →

7,083
oktetooktetoOfficialVerified publisher0.0.0-2026-09-217 of 10See more

okteto okteto 0.0.0-2026-09-21

7 of the 10 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/okteto/backend:0.0.0-2026-09-213264af50b7d1
stdlib@go1.26.7
1.26.10
ghcr.io/okteto/buildkit:0.0.0-2026-09-2114527ca5d2a9
stdlib@go1.25.7
1.26.10
ghcr.io/okteto/daemon:0.0.0-2026-09-21a5ca067cb895
stdlib@go1.26.6
1.26.10
ghcr.io/okteto/ingress-nginx-chroot:0.0.0-2026-09-21d6730eb9831b
stdlib@go1.26.6
1.26.10
ghcr.io/okteto/okteto:3.23.1be99de7f8139
stdlib@go1.26.5
1.26.10
ghcr.io/okteto/registry:0.0.0-2026-09-2169131511501f
stdlib@go1.26.5
1.26.10
ghcr.io/okteto/reloader:0.0.0-2026-09-2104a3fce657c4
stdlib@go1.26.4
1.26.10

Open the chart page →

8,439
openbaoopenbaoVerified publisher0.30.12 of 2See more

openbao openbao 0.30.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:1.7.2ae3d307658b7
stdlib@go1.25.5
1.26.10
quay.io/openbao/openbao:2.7.071156a1c6623
stdlib@go1.27.1
1.26.10

Open the chart page →

1,923
hydraory0.64.02 of 2See more

hydra ory 0.64.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
oryd/hydra:v26.2.0ff67c7fb5f95
stdlib@go1.26.0
1.26.10
oryd/hydra-maester:v0.0.420a7a2bfd0e7d
stdlib@go1.26.3
1.26.10

Open the chart page →

2,174
prometheus-msteamsprometheus-msteams1.3.61 of 1See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
stdlib@go1.24.9
1.26.10

Open the chart page →

1,457
proxmox-csi-pluginproxmox-csi0.5.137 of 7See more

proxmox-csi-plugin proxmox-csi 0.5.13

7 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/proxmox-csi-controller:v0.21.08f344b70785f
stdlib@go1.27.2
1.26.10
ghcr.io/sergelogvinov/proxmox-csi-node:v0.21.03895d75356d5
stdlib@go1.27.2
1.26.10
registry.k8s.io/sig-storage/csi-attacher:v4.12.0b9dc9a714a48
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
registry.k8s.io/sig-storage/livenessprobe:v2.19.006da0d5b8908
stdlib@go1.26.3
1.26.10

Open the chart page →

3,261
victoria-metrics-singlevictoriametricsVerified publisher0.49.01 of 1See more

victoria-metrics-single victoriametrics 0.49.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.154.04bd592341587
stdlib@go1.27.2
1.26.10

Open the chart page →

17
yourlsyourlsOfficialVerified publisher8.10.51 of 2See more

yourls yourls 8.10.5

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/mariadb:latest2c14d1572dd0
stdlib@go1.26.9
1.26.10

Open the chart page →

2,348
apisix-ingress-controllerapisix1.4.01 of 2See more

apisix-ingress-controller apisix 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
stdlib@go1.26.5
1.26.10

Open the chart page →

2,277
volsyncbackube-helm-chartsVerified publisher0.16.01 of 1See more

volsync backube-helm-charts 0.16.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/backube/volsync:0.16.00d03a6aad575
stdlib@go1.25.11
1.26.10

Open the chart page →

1,993
concourseconcourseVerified publisher20.3.12 of 2See more

concourse concourse 20.3.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
concourse/concourse:8.3.1c9d48dfbf4f9
ca-certificates@20260909-r1
stdlib@go1.27.1
20260909-r3
1.26.10
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10

Open the chart page →

2,193
dynatrace-operatordynatraceVerified publisher1.11.01 of 1See more

dynatrace-operator dynatrace 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/dynatrace/dynatrace-operator:v1.11.05b772cfaad48
stdlib@go1.27.1
1.26.10

Open the chart page →

265
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
stdlib@go1.16.8
1.26.10

Open the chart page →

5,520
headscalegabe565Verified publisher0.16.01 of 2See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
stdlib@go1.23.4
1.26.10

Open the chart page →

2,523
gocdgocdOfficialVerified publisher2.18.12 of 2See more

gocd gocd 2.18.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
gocd/gocd-agent-wolfi:v26.1.0753b9f696f45
ca-certificates@20260413-r0
20260909-r3
gocd/gocd-server:v26.1.0720d1012b93f
ca-certificates@20260413-r0
20260909-r3

Open the chart page →

1,821
oncallgrafana1.16.57 of 12See more

oncall grafana 1.16.5

7 of the 12 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
stdlib@go1.22.4
1.26.10
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
stdlib@go1.17.8
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
stdlib@go1.17.8
1.26.10
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
stdlib@go1.18.2
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
stdlib@go1.16.9
1.26.10

Open the chart page →

24,506

Container images carrying it

6,681 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.10
91
library/postgres:18:18.6:18.6-trixie:latest74935e722416
stdlib@go1.24.6
1.26.10
60
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.10
36
ghcr.io/quenchworks/images/postgresqle3b4a823a4eb
ca-certificates@20260909-r2
20260909-r3
34
library/postgres:16.15-alpine:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.10
21
quay.io/prometheus/prometheus:latest:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.10
20
jenkins/jenkins:2.580.1-jdk21:2.580.1-lts-jdk21:ltsa660310e39ad
stdlib@go1.27.0
1.26.10
19
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.10
18
library/postgres:18.6-alpine:18.6-alpine3.24:18-alpine:alpine77f585114c32
stdlib@go1.24.6
1.26.10
17
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10
15
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
14
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
14
quay.io/prometheus/node-exporter:latest:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
14
bitnami/kubectl:latest999d5eb28f40
stdlib@go1.26.8
1.26.10
13
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
stdlib@go1.18.10
1.26.10
13
library/postgres:17-alpineb0f9560a2de0
stdlib@go1.24.6
1.26.10
13
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
13
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10
12
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.10
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10
12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
12
bitnami/redis:latest33dbb7a4be39
stdlib@go1.26.9
1.26.10
11
library/mysql:8:8.4:8.4.116ea90827b110
stdlib@go1.24.6
1.26.10
11
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.10
11
ghcr.io/quenchworks/images/kubectld5c4037b5c93
ca-certificates@20260909-r2
stdlib@go1.27.2
20260909-r3
1.26.10
11
ethpandaops/xatu:latestef8eb43af9bb
stdlib@go1.26.8
1.26.10
10
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.10
10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.10
10
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
10
ghcr.io/quenchworks/images/grafanab7bda86e876d
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
10
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
stdlib@go1.22.5
1.26.10
10
library/postgres:18:18.6-trixie:latestfc973eb97c9f
stdlib@go1.24.6
1.26.10
9
quay.io/prometheus/alertmanager:latest:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10
9
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
9
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.26.10
8
library/mongo:9.0.2:latestbac22ea7710d
stdlib@go1.26.8
1.26.10
8
library/rabbitmq:3.13-management:3-managemente582c0bc7766
stdlib@go1.22.2
1.26.10
8
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.26.10
8
ghcr.io/jkroepke/kube-webhook-certgen:1.11.0778d97dc3986
stdlib@go1.27.1
1.26.10
8
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
stdlib@go1.26.5
1.26.10
8
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.26.10
8
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
8
grafana/grafana:13.2.4-distrolessae3d3add290a
stdlib@go1.26.7
1.26.10
7
library/mariadb:13.0.2:latest0e4bb0f339fe
stdlib@go1.24.6
1.26.10
7
library/mariadb:13.0.2:latestf1bba652ba57
stdlib@go1.26.7
1.26.10
7
library/mysql:8:8.4:8.4.110f51e63e537a
stdlib@go1.24.6
1.26.10
7
library/mysql:26.7.0:latest9d48c42f8341
stdlib@go1.24.6
1.26.10
7
library/postgres:18:18.6-trixie:latest5486e8fb2069
stdlib@go1.24.6
1.26.10
7
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.26.10
7
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.26.10
7

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.