CLEANSTART-2026-GW20906: On most platforms, Go uses the given system root certificates
Published Nov 12, 2026
·Updated
CVE-2026-111943 affects multiple packages. On most platforms, Go uses the given system root certificates. See references for individual vulnerability details.
Affected Software
2 affected componentsFixes available
cleanstart/kafka_exporter<1.10.0-r0
1.10.0-r0
cleanstart/zookeeper-operator<0.1.1-r0
0.1.1-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/kafka_exporterto a version that resolves this vulnerability.Fixed in 1.10.0-r0 - Upgrade
Upgrade
cleanstart/zookeeper-operatorto a version that resolves this vulnerability.Fixed in 0.1.1-r0
Event History
Nov 12, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionAffected Software