StackRadar

CVE-2026-111943

Unscored

Advisory

Published 19 Oct 2026In the index since 21 Oct 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
5,680
of 18,219 indexed, latest versions
Container images
6,616
deployed by those charts
Fix available
10 of 12
affected packages

Distrust compromised intermediate certificates in crypto/x509

Carried by container images the latest versions of 5,680 of 18,219 indexed charts deploy, on 6,616 images.

Affected packageAffected versionsFixed inImages
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+211 more1.26.106,376
ca-certificatesapk20230506-r0, 20240705-r0, 20241010-r0, 20241010-r1+16 more20260909-r3412
rustls-webpkicargo0.101.7, 0.102.8, 0.103.4, 0.103.9+4 more0.103.16102
webpki-root-certscargo0.26.6, 1.0.6, 1.0.7, 1.0.8+1 more1.0.1068
webpki-rootscargo0.22.6, 0.25.4, 0.26.1, 0.26.8+4 more0.26.1112
kustomizeapk5.8.3-r05.8.3-r12
containerd-2apk2.4.1-r22.4.2-r11
golang-1.19deb1.19.8-2no fix listed1
kineapk0.17.2-r2no fix listed1
kubernetes-1.37apk1.37.1-r21.37.1-r31
minioapk0.20251015.172955-r100.20260922.192518-r51
tetragonapk1.7.1-r61.7.1-r71
OSV records
CGA-32jh-59ph-xj58CGA-7j3j-q347-3xh3CGA-9w23-c7x9-6gcfCGA-g98g-xf3f-2xxgCGA-pj7v-5f5f-w56qCGA-v7mw-hrjj-f3hjCGA-wv85-v6qp-cp86DEBIAN-CVE-2026-111943GO-2026-6809RUSTSEC-2026-0381RUSTSEC-2026-0382RUSTSEC-2026-0383
Also known as
CGA-3mqx-82qg-h2ch, CGA-46mw-f3vv-jw6v, CGA-48x4-f6q2-2fc9, CGA-4vq7-3845-2x3f, CGA-5hw4-vxpx-277g, CGA-6q8c-wppc-7gc4, CGA-78cp-qf6f-2wwp, CGA-7j5f-67g7-49h3, CGA-878x-h4c8-9gjg, CGA-9j8w-f27j-f52r, CGA-c7hp-5w86-wvv8, CGA-cm92-5h34-m89h, CGA-cp2v-52gh-c9fc, CGA-cph2-xr92-g7r6, CGA-g5hq-5rrr-wqpf, CGA-g7qh-qvvc-cfj8, CGA-hh77-8qg8-j3fx, CGA-jpff-w38c-82hp, CGA-mpf6-ggg3-jxjw, CGA-p9x7-h37v-m5jj, CGA-pmwh-qf2w-2gq2, CGA-q64c-f3f6-4mjc, CGA-q86x-xxh4-8xv2, CGA-qgg7-q5rx-rq53, CGA-r72r-28m8-m23r, CGA-rggh-mpvv-m899, CGA-rrcw-jqcr-h2gq, CGA-vh58-35qj-3xw4, CGA-vmjc-wg32-345v, CGA-vx67-6grh-pw5w, CGA-wfr7-pf8h-ww47, CGA-wg6r-5mq3-4c74
Trending
Rank 1 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

5,680 by stars
ChartLatestAffected imagesRadar Score
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
stdlib@go1.23.10
1.26.10

Open the chart page →

4,885
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
stdlib@go1.26.3
1.26.10

Open the chart page →

7,346
mdai-event-hubmdai-event-hubVerified publisher0.1.111 of 1See more

mdai-event-hub mdai-event-hub 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
stdlib@go1.25.11
1.26.10

Open the chart page →

792
mdai-gatewaymdai-gatewayVerified publisher0.1.101 of 1See more

mdai-gateway mdai-gateway 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
stdlib@go1.25.11
1.26.10

Open the chart page →

777
mdai-hubmdai-hubVerified publisher0.10.112 of 14See more

mdai-hub mdai-hub 0.10.1

12 of the 14 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnami/kubectl:latest999d5eb28f40
stdlib@go1.26.8
1.26.10
library/nats:2.14.0-alpinedf3dbf761551
stdlib@go1.26.2
1.26.10
natsio/nats-box:0.19.55d513bf0bb82
stdlib@go1.26.2
1.26.10
natsio/nats-server-config-reloader:0.23.064cb6c858e79
stdlib@go1.25.6
1.26.10
natsio/prometheus-nats-exporter:0.19.25387a5923572
stdlib@go1.25.6
1.26.10
ghcr.io/jkroepke/kube-webhook-certgen:1.8.38ce13c365c8e
stdlib@go1.26.3
1.26.10
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.148.0590e50477b76
stdlib@go1.25.8
1.26.10
public.ecr.aws/p3k6k6h3/mdai-event-hub:0.1.1118cae836e9c7
stdlib@go1.25.11
1.26.10
public.ecr.aws/p3k6k6h3/mdai-gateway:0.1.100dfb323978f6
stdlib@go1.25.11
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.91.09e53e1313921
stdlib@go1.25.9
1.26.10
quay.io/prometheus/node-exporter:v1.11.1-distroless6112664fd761
stdlib@go1.26.1
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.06b2f0b6f2f86
stdlib@go1.26.2
1.26.10

Open the chart page →

13,433
mdai-s3-logs-readermdai-s3-logs-readerVerified publisher0.0.81 of 1See more

mdai-s3-logs-reader mdai-s3-logs-reader 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
public.ecr.aws/decisiveai/mdai-s3-logs-reader:0.0.8d1e35167eec5
stdlib@go1.24.10
1.26.10

Open the chart page →

884
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
stdlib@go1.13.10
1.26.10

Open the chart page →

9,453
pod-cleanupmediamarktsaturn1.2.11 of 1See more

pod-cleanup mediamarktsaturn 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/kubectl:v1.34.159bafa07ff3a
stdlib@go1.24.6
1.26.10

Open the chart page →

940
cleanuparrmedia-servarrVerified publisher0.20.41 of 1See more

cleanuparr media-servarr 0.20.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.12d0212e4c66bd
stdlib@go1.22.2
1.26.10

Open the chart page →

1,975
sabnzbdmedia-servarrVerified publisher1.7.01 of 3See more

sabnzbd media-servarr 1.7.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/exportarr:v1.6.160cf3d44aa0b
stdlib@go1.21.6
1.26.10

Open the chart page →

1,105
tinymediamanagermedia-servarrVerified publisher1.7.11 of 2See more

tinymediamanager media-servarr 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.448c15784a127
stdlib@go1.24.4
1.26.10

Open the chart page →

10,611
cameramedia-streaming-meshVerified publisher0.2.51 of 3See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
stdlib@go1.19.2
1.26.10

Open the chart page →

20,906
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
stdlib@go1.20.5
1.26.10

Open the chart page →

4,736
ingressmedia-streaming-meshVerified publisher0.1.82 of 2See more

ingress media-streaming-mesh 0.1.8

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
stdlib@go1.20.1
1.26.10
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.26.10

Open the chart page →

4,932
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
stdlib@go1.24.0
1.26.10
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
stdlib@go1.24.0
1.26.10
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
stdlib@go1.23.1
1.26.10
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
stdlib@go1.23.1
1.26.10
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
stdlib@go1.22.3
1.26.10

Open the chart page →

15,653
msm-rtspmedia-streaming-meshVerified publisher0.0.21 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
stdlib@go1.19.2
1.26.10

Open the chart page →

20,906
rtspmedia-streaming-meshVerified publisher0.0.141 of 2See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ciscolabs/rtsp-server:latestb59fc10bb821
stdlib@go1.19.2
1.26.10

Open the chart page →

20,906
mediawiki-backupmediawiki-backupVerified publisher0.2.11 of 1See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
stdlib@go1.19.5
1.26.10

Open the chart page →

2,810
medik8smedik8sVerified publisher0.2.03 of 3See more

medik8s medik8s 0.2.0

3 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/medik8s/fence-agents-remediation-operator:v0.8.0fab0089a9d65
stdlib@go1.26.3
1.26.10
quay.io/medik8s/node-healthcheck-operator:v0.12.05b048ad5d2b8
stdlib@go1.25.9
1.26.10
quay.io/medik8s/self-node-remediation-operator:v0.13.09ad002dca9ea
stdlib@go1.25.9
1.26.10

Open the chart page →

3,745
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
stdlib@go1.18.2
1.26.10

Open the chart page →

6,938
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
rustls-webpki@0.103.13
webpki-root-certs@1.0.7
0.103.16
1.0.10

Open the chart page →

2,145
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
stdlib@go1.13.10
1.26.10

Open the chart page →

9,595
merge-pilotmerge-pilot1.6.01 of 2See more

merge-pilot merge-pilot 1.6.0

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
jhonbrownn/merge-pilot-backend:1.6.068d6223ea366
stdlib@go1.25.7
1.26.10

Open the chart page →

3,314
dex-k8s-authenticatormesosphere1.4.31 of 1See more

dex-k8s-authenticator mesosphere 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mesosphere/dex-k8s-authenticator:v1.4.1-d2iqf3d9982cc2fd
stdlib@go1.23.0
1.26.10

Open the chart page →

1,633
docker-registrymesosphere2.3.51 of 1See more

docker-registry mesosphere 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/registry:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.26.10

Open the chart page →

1,102
flaggermesosphere0.21.02 of 2See more

flagger mesosphere 0.21.0

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
stdlib@go1.13.1
1.26.10
weaveworks/flagger-loadtester:0.9.03cdac6928a63
stdlib@go1.13.1
1.26.10

Open the chart page →

8,745
gatekeepermesosphere0.6.111 of 2See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
stdlib@go1.16.2
1.26.10

Open the chart page →

4,665
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.26.10

Open the chart page →

6,424
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
stdlib@go1.25.7
1.26.10

Open the chart page →

3,316
istio-helm-istiodmesosphere1.25.12 of 2See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
stdlib@go1.25.7
1.26.10
mesosphere/kubectl:v1.35.0-alpineea01a9387771
stdlib@go1.25.5
1.26.10

Open the chart page →

5,265
kafka-operatormesosphere0.20.21 of 2See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/kafka-operator:v0.20.2e341aefa9a90
stdlib@go1.17.6
1.26.10

Open the chart page →

3,024
karmamesosphere1.3.01 of 1See more

karma mesosphere 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.503751e5eed656
stdlib@go1.13.4
1.26.10

Open the chart page →

3,519
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
stdlib@go1.15.2
1.26.10

Open the chart page →

13,861
kubefedmesosphere0.5.21 of 1See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mesosphere/kubefed:proxyurl4fd8889195fe
stdlib@go1.15.3
1.26.10

Open the chart page →

4,417
kube-oidc-proxymesosphere0.3.41 of 1See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
stdlib@go1.14.1
1.26.10

Open the chart page →

4,480
kube-prometheus-stackmesosphere87.16.06 of 7See more

kube-prometheus-stack mesosphere 87.16.0

6 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.26.10
grafana/grafana:13.1.0121a7a9ece6d
stdlib@go1.25.7
1.26.10
ghcr.io/jkroepke/kube-webhook-certgen:1.8.476a2170cd0c9
stdlib@go1.26.4
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.92.17d9247d23514
stdlib@go1.26.4
1.26.10
quay.io/prometheus/node-exporter:v1.12.0-distroless843ed23bb564
stdlib@go1.26.5
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.19.185108987d044
stdlib@go1.26.4
1.26.10

Open the chart page →

10,440
kudomesosphere0.1.41 of 1See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
kudobuilder/controller:v0.9.069072d979708
stdlib@go1.13
1.26.10

Open the chart page →

7,281
local-path-provisionermesosphere0.0.221 of 1See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.22e34c88ae0aff
stdlib@go1.16.15
1.26.10

Open the chart page →

3,428
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
stdlib@go1.13.4
1.26.10

Open the chart page →

4,145
nvidiamesosphere0.4.41 of 2See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
stdlib@go1.14.2
1.26.10

Open the chart page →

12,270
prometheus-operatormesosphere12.11.135 of 8See more

prometheus-operator mesosphere 12.11.13

5 of the 8 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
stdlib@go1.25.7
1.26.10
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
stdlib@go1.15.3
1.26.10
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
stdlib@go1.14.12
1.26.10
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.26.10
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10

Open the chart page →

16,811
registry-syncermesosphere0.1.01 of 1See more

registry-syncer mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
regclient/regsync:v0.8.33d8d8e40afb7
stdlib@go1.24.2
1.26.10

Open the chart page →

787
traefik2mesosphere9.18.01 of 1See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
library/traefik:2.4.8eda951fd29a8
stdlib@go1.16.2
1.26.10

Open the chart page →

4,686
azuredisk-csi-drivermesosphere-stable0.8.16 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

6 of the 6 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
stdlib@go1.15.4
1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
stdlib@go1.14
1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
stdlib@go1.15
1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
stdlib@go1.15.2
1.26.10
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
stdlib@go1.15.2
1.26.10
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
stdlib@go1.15.6
1.26.10

Open the chart page →

22,165
cert-manager-setupmesosphere-stable0.2.104 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.11.05c3eb25b0854
stdlib@go1.19.5
1.26.10
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
stdlib@go1.19.5
1.26.10
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
stdlib@go1.19.5
1.26.10
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
stdlib@go1.19.5
1.26.10

Open the chart page →

11,338
cosimesosphere-stable0.2.21 of 1See more

cosi mesosphere-stable 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
ghcr.io/mesosphere/dkp-container-images/objectstorage-controller:v0.2.23c708e508197
stdlib@go1.24.11
1.26.10

Open the chart page →

765
dexmesosphere-stable2.14.24 of 5See more

dex mesosphere-stable 2.14.2

4 of the 5 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.26.10
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
stdlib@go1.20.4
1.26.10
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
ca-certificates@20240705-r0
stdlib@go1.22.7
20260909-r3
1.26.10
quay.io/brancz/kube-rbac-proxy:v0.21.18ee55a15d8b0
stdlib@go1.25.8
1.26.10

Open the chart page →

23,045
gatekeepermesosphere-stable0.6.111 of 2See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
stdlib@go1.16.2
1.26.10

Open the chart page →

4,665
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.26.10

Open the chart page →

5,435
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-111943.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
stdlib@go1.21.7
1.26.10

Open the chart page →

6,424

Container images carrying it

6,616 by charts deploying them

A fixed version is listed for 10 of the 12 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.26.10
91
library/postgres:18:18.6:18.6-trixie:latest74935e722416
stdlib@go1.24.6
1.26.10
60
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.26.10
36
ghcr.io/quenchworks/images/postgresqle3b4a823a4eb
ca-certificates@20260909-r2
20260909-r3
34
jenkins/jenkins:2.580.1-jdk21:2.580.1-lts-jdk21:ltsa660310e39ad
stdlib@go1.27.0
1.26.10
19
quay.io/prometheus/prometheus:latest:v3.15.0efd719c99d83
stdlib@go1.27.1
1.26.10
16
library/postgres:16.15-alpine:16-alpine721873c34ceb
stdlib@go1.24.6
1.26.10
15
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.20.042cfe3723a5f
stdlib@go1.26.6
1.26.10
15
bitnami/kubectl:latestf7f9e4f64d9e
stdlib@go1.26.8
1.26.10
14
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.26.10
14
library/postgres:18.6-alpine:18.6-alpine3.24:18-alpine:alpine77f585114c32
stdlib@go1.24.6
1.26.10
14
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.26.10
14
quay.io/prometheus/node-exporter:latest:v1.12.11b4e4438faca
stdlib@go1.26.5
1.26.10
14
bitnami/kubectl:latest999d5eb28f40
stdlib@go1.26.8
1.26.10
13
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
stdlib@go1.18.10
1.26.10
13
library/postgres:18:18.6-trixie:latestedb0c08dc33b
stdlib@go1.24.6
1.26.10
13
registry.k8s.io/sig-storage/csi-provisioner:v6.3.0a4b0b1a37605
stdlib@go1.26.3
1.26.10
13
bitnami/redis:latest33dbb7a4be39
stdlib@go1.26.9
1.26.10
12
library/postgres:172d2b8998d310
stdlib@go1.24.6
1.26.10
12
library/postgres:17-alpineb0f9560a2de0
stdlib@go1.24.6
1.26.10
12
library/postgres:15-alpinef7d23353e1b1
stdlib@go1.24.6
1.26.10
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.26.10
12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.17.0f9de845b1701
stdlib@go1.26.3
1.26.10
12
library/mariadb:13.0.2:latest0e4bb0f339fe
stdlib@go1.24.6
1.26.10
11
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.26.10
11
ghcr.io/quenchworks/images/kubectld5c4037b5c93
ca-certificates@20260909-r2
kubernetes-1.37@1.37.1-r2
kustomize@5.8.3-r0
stdlib@go1.27.2
20260909-r3
1.37.1-r3
5.8.3-r1
1.26.10
11
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.26.10
10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.26.10
10
library/postgres:16ca0bd484cb98
stdlib@go1.24.6
1.26.10
10
ghcr.io/quenchworks/images/grafanab7bda86e876d
ca-certificates@20260909-r2
stdlib@go1.26.9
20260909-r3
1.26.10
10
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
stdlib@go1.22.5
1.26.10
10
quay.io/prometheus/alertmanager:latest:v0.34.1e9733bafb1bd
stdlib@go1.26.8
1.26.10
9
registry.k8s.io/sig-storage/csi-resizer:v2.2.1ea1d25e23479
stdlib@go1.26.3
1.26.10
9
dtzar/helm-kubectl:3.14.455429449408e
stdlib@go1.21.8
1.26.10
8
library/rabbitmq:3.13-management:3-managemente582c0bc7766
stdlib@go1.22.2
1.26.10
8
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.26.10
8
ghcr.io/jkroepke/kube-webhook-certgen:1.11.0778d97dc3986
stdlib@go1.27.1
1.26.10
8
quay.io/prometheus/node-exporter:v1.12.1-distroless8c9bac11973b
stdlib@go1.26.5
1.26.10
8
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.26.10
8
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.26.10
8
grafana/grafana:13.2.4-distrolessae3d3add290a
stdlib@go1.26.7
1.26.10
7
library/mongo:9.0.2:latestbac22ea7710d
stdlib@go1.26.8
1.26.10
7
library/mysql:8:8.4:8.4.110f51e63e537a
stdlib@go1.24.6
1.26.10
7
library/mysql:26.7.0625f74ddf936
stdlib@go1.24.6
1.26.10
7
library/mysql:8:8.4:8.4.116ea90827b110
stdlib@go1.24.6
1.26.10
7
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.26.10
7
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.26.10
7
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
stdlib@go1.27.2
1.26.10
7
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.2.2:8.2.2-1-ubi98e01c0305844
stdlib@go1.26.4
1.26.10
7
quay.io/jetstack/cert-manager-cainjector:v1.21.2c85268c64f2e
stdlib@go1.26.8
1.26.10
7

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.