CVE-2025-6176

High

Advisory

Published 31 Oct 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 255; of 17,781 indexed, latest versions
Container images: 287; deployed by those charts
Fix available: 2 of 2; affected packages

Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation

Carried by container images the latest versions of 255 of 17,781 indexed charts deploy, on 287 images.

Affected package	Affected versions	Fixed in	Images
brotlirpm	1.0.6-1.el8, 1.0.6-2.el8, 1.0.6-3.el8, 1.0.9-6.el9+2 more	0:1.0.6-4.el8_10, 0:1.0.9-9.el9_7, 0:1.1.0-7.el10_1	238
brotlipypi	1.0.9, 1.1.0	1.2.0	49

OSV records: GHSA-2qfp-q593-8484 RHSA-2026:0845 RHSA-2026:2042 RHSA-2026:2389 RLSA-2026:2042
Also known as: PYSEC-2026-1906, PYSEC-2026-2401, RHSA-2026:2227, RHSA-2026:2228, RHSA-2026:2229, RHSA-2026:2399, RHSA-2026:2400, RHSA-2026:2401, RHSA-2026:2455

Charts affected

255 by stars

Chart

Latest

Affected images

Radar Score

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-6176.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10

Open the chart page →

6,138

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-6176.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10

Open the chart page →

14,983

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-6176.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-6176.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-6176.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10

Open the chart page →

3,697

Container images carrying it

287 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/apollo :0.0.10	55330b1b60c1	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/canis-major :1.5.15	bb40472e4ff5	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/contract-management :3.3.12	2bcfcf874451	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/credentials-config-service :3.4.3	f2fbced76da8	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/endpoint-configuration-service :0.4.3	0dc38a87b844	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/orion-ld :1.10.0	b7ee7569a9a8	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-account :1.18.0	6b25aac03414	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-agreement :1.18.0	81e7025dc16d	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-customer-bill-management :1.18.0	dee901f1f75d	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-customer-management :1.18.0	d3519cebecd0	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-party-catalog :1.18.0	7d6969a7393a	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-party-role :1.18.0	52db89f17863	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-product-catalog :1.18.0	e409338726da	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-product-inventory :1.18.0	3a5d6dd30f1d	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-product-ordering-management :1.18.0	42c81c291f6f	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-quote :1.18.0	d9ca3a334352	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-resource-catalog :1.18.0	b0d853627c59	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-resource-function-activation :1.18.0	62a5acb63fd1	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-resource-inventory :1.18.0	553b4a47730b	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-resource-order-management :1.18.0	dd1778ad6203	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-service-catalog :1.18.0	74b0fad9e155	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-service-inventory :1.18.0	4be54e8cb5c0	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-service-order-management :1.18.0	d2091785d544	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-software-management :1.18.0	1b74a2f7ba67	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/tmforum-usage-management :1.18.0	42f190c42926	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/fiware/trusted-issuers-registry :0.11.1	a8a9ec461034	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/osm-edge-crds-ubi8 :1.2.1	c3bc5e7a70e6	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/pipy-repo-ubi8 :0.70.0-46	9912fdf6c183	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/pipy-ubi8 :0.50.0-88	24352dca6672	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/pipy-ubi8 :0.70.0-46	35d87a381432	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/flomesh/toolbox-ubi8 :1.2.0	1f5e3161cb84	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	brotli@1.0.6-1.el8	0:1.0.6-4.el8_10	1
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/keycloak/keycloak-operator :19.0.2-legacy	15fa0ed662b1	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	brotli@1.0.6-3.el8	0:1.0.6-4.el8_10	1