StackRadar

CVE-2026-102277

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,091
of 17,957 indexed, latest versions
Container images
1,126
deployed by those charts
Fix available
1 of 2
affected packages

brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service

Carried by container images the latest versions of 1,091 of 17,957 indexed charts deploy, on 1,126 images.

Affected packageAffected versionsFixed inImages
brace-expansionnpm1.1.1, 1.1.2, 1.1.4, 1.1.6+23 more1.1.21, 2.1.7, 5.0.121,126
node-brace-expansiondeb1.1.8-1, 1.1.11-1, 2.0.1+~1.1.0-1no fix listed6
OSV records
GHSA-q2hr-2g5m-vwhrUBUNTU-CVE-2026-102277
Trending
Rank 18 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

1,091 by stars
ChartLatestAffected imagesRadar Score
umamiwaldo-visionVerified publisher0.0.11 of 1See more

umami waldo-vision 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
brace-expansion@2.0.1
2.1.7

Open the chart page →

1,312
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
brace-expansion@1.1.11
1.1.21

Open the chart page →

2,282
uptime-kumaduyet0.1.81 of 1See more

uptime-kuma duyet 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
brace-expansion@2.0.1
2.1.7

Open the chart page →

4,708
docmosthelmforgeVerified publisher1.4.01 of 4See more

docmost helmforge 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
brace-expansion@5.0.9
5.0.12

Open the chart page →

3,937
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
brace-expansion@2.0.1
2.1.7

Open the chart page →

2,992
etherpadnicholaswildeVerified publisher1.0.21 of 1See more

etherpad nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/etherpad:version-1.8.1426bbd45110d5
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,233
redisinsightredisinsight-guiVerified publisher1.3.51 of 1See more

redisinsight redisinsight-gui 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
redis/redisinsight:3.8b5e19ee240ab
brace-expansion@2.0.2
2.1.7

Open the chart page →

1,223
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
brace-expansion@2.0.1
2.1.7

Open the chart page →

1,915
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest4f8c0f8a8ee0
brace-expansion@2.1.4
2.1.7

Open the chart page →

1,112
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
brace-expansion@1.1.11
1.1.21

Open the chart page →

14,384
snyk-monitorsnyk2.23.261 of 2See more

snyk-monitor snyk 2.23.26

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
snyk/kubernetes-monitor:2.23.26fb5ad76ce84e
brace-expansion@5.0.9
5.0.12

Open the chart page →

704
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
brace-expansion@1.1.11
1.1.21

Open the chart page →

6,599
abcdesktopabcdesktopOfficialVerified publisher4.4.131 of 9See more

abcdesktop abcdesktop 4.4.13

1 of the 9 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/abcdesktopio/oc.nginx:4.4.14aec9ad6aa65
brace-expansion@5.0.9
5.0.12

Open the chart page →

970
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
brace-expansion@1.1.11
1.1.21

Open the chart page →

5,489
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
baserow/web-frontend:2.3.3566d24c7d9f5
brace-expansion@5.0.7
5.0.12

Open the chart page →

18,749
carbonetes-analyzercarbonetes-analyzerVerified publisher1.0.61 of 1See more

carbonetes-analyzer carbonetes-analyzer 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
carbonetes/carbonetes-analyzer:1.0.31b9b93c9a37f
brace-expansion@1.1.11
1.1.21

Open the chart page →

1,885
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
brace-expansion@1.1.11
1.1.21

Open the chart page →

137,043
kuttchristianhuthVerified publisher9.11.21 of 3See more

kutt christianhuth 9.11.2

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
kutt/kutt:v3.2.6fa3d24a89b04
brace-expansion@2.0.2
2.1.7

Open the chart page →

614
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
brace-expansion@1.1.11
1.1.21

Open the chart page →

8,632
dialdialOfficialVerified publisher8.0.01 of 4See more

dial dial 8.0.0

1 of the 4 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
epam/ai-dial-chat:1.1.0974c1ddceab6
brace-expansion@2.1.4
2.1.7

Open the chart page →

2,203
foundry-vttfoundry-vttVerified publisher12.343.01 of 1See more

foundry-vtt foundry-vtt 12.343.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
felddy/foundryvtt:12.343.06c5e3e9ffbb0
brace-expansion@2.0.1
2.1.7

Open the chart page →

811
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
brace-expansion@1.1.11
1.1.21

Open the chart page →

6,156
graphql-gatewaygraphql-gatewayVerified publisher0.1.51 of 1See more

graphql-gateway graphql-gateway 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
hansehe/graphql-gateway:1.0.458e09540afbc
brace-expansion@2.0.1
2.1.7

Open the chart page →

1,704
heimdallheimdallOfficialVerified publisher3.3.31 of 2See more

heimdall heimdall 3.3.3

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
mitre/heimdall2:release-latest06f6e72d416a
brace-expansion@2.1.4
2.1.7

Open the chart page →

2,154
karakeephelmforgeVerified publisher1.2.92 of 3See more

karakeep helmforge 1.2.9

2 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
brace-expansion@5.0.7
5.0.12
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
brace-expansion@2.0.1
2.1.7

Open the chart page →

10,952
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
brace-expansion@2.0.1
2.1.7

Open the chart page →

4,196
openctihelm-openctiVerified publisher3.0.131 of 8See more

opencti helm-opencti 3.0.13

1 of the 8 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
opencti/platform:7.260928.1d40cdb191cd0
brace-expansion@2.0.2
2.1.7

Open the chart page →

3,397
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
brace-expansion@1.1.11
1.1.21

Open the chart page →

3,844
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
brace-expansion@1.1.11
1.1.21

Open the chart page →

166,582
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
brace-expansion@1.1.11
1.1.21

Open the chart page →

11,206
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
brace-expansion@2.0.1
2.1.7

Open the chart page →

3,061
libredb-studiolibredb-studioVerified publisher0.1.721 of 1See more

libredb-studio libredb-studio 0.1.72

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.17.0ce4d58724e25
brace-expansion@5.0.9
5.0.12

Open the chart page →

1,172
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
davdiv/musicociel:deva85f99be882c
brace-expansion@2.0.1
2.1.7

Open the chart page →

4,641
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/tale/headplane:0.5.50dbc52cffc19
brace-expansion@2.0.1
2.1.7

Open the chart page →

8,661
open5gsopen5gsVerified publisher2.3.51 of 5See more

open5gs open5gs 2.3.5

1 of the 5 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
brace-expansion@1.1.11
1.1.21

Open the chart page →

9,492
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
taigaio/taiga-events:6.4.00bf2d24a57d9
brace-expansion@1.1.11
1.1.21

Open the chart page →

7,436
wg-easywg-easyVerified publisher0.1.61 of 1See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:150e7bc9d34e86
brace-expansion@5.0.6
5.0.12

Open the chart page →

848
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
brace-expansion@1.1.11
1.1.21

Open the chart page →

10,257
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
brace-expansion@1.1.11
1.1.21

Open the chart page →

8,571
ghostcloudpirates-ghostVerified publisher0.20.261 of 3See more

ghost cloudpirates-ghost 0.20.26

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
library/ghost:6.64.0586821cfebac
brace-expansion@2.0.2
2.1.7

Open the chart page →

7,632
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
brace-expansion@1.1.11
1.1.21

Open the chart page →

7,779
community-solid-servercommunity-solid-server3.0.01 of 1See more

community-solid-server community-solid-server 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
solidproject/community-server:6.0.2ccc4acb7e9a1
brace-expansion@1.1.11
1.1.21

Open the chart page →

1,732
foremancontane-githubOfficialVerified publisher0.6.01 of 1See more

foreman contane-github 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
contane/foreman:0.5.2efb98bdcc4e9
brace-expansion@2.0.1
2.1.7

Open the chart page →

1,432
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
brace-expansion@1.1.11
1.1.21

Open the chart page →

15,947
cosmocosmo-platformOfficialVerified publisher0.20.03 of 10See more

cosmo cosmo-platform 0.20.0

3 of the 10 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
brace-expansion@2.0.1
2.1.7
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
brace-expansion@2.0.1
2.1.7
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
brace-expansion@2.0.1
2.1.7

Open the chart page →

31,135
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
brace-expansion@1.1.11
1.1.21

Open the chart page →

2,653
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
brace-expansion@2.0.1
2.1.7

Open the chart page →

3,663
duplistatusduplistatusVerified publisher1.3.01 of 2See more

duplistatus duplistatus 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
wsjbr/duplistatus:1.5.0bede86cf183f
brace-expansion@5.0.7
5.0.12

Open the chart page →

961
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
brace-expansion@1.1.11
1.1.21

Open the chart page →

2,640
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
diygod/rsshub:latest22845ada2f14
brace-expansion@5.0.7
5.0.12

Open the chart page →

1,739

Container images carrying it

1,126 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/nicholaswilde/odoo:version-14.07cff9672ce07
brace-expansion@1.1.11
1.1.21
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
brace-expansion@2.0.2
2.1.7
1
ghcr.io/openccu/openccu:3.89.11.202609193cfcb30e1921
brace-expansion@2.0.2
2.1.7
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
brace-expansion@5.0.6
5.0.12
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
brace-expansion@2.0.1
2.1.7
1
ghcr.io/open-telemetry/demo:3.1.0-payment10d6bd20d8a0
brace-expansion@2.1.4
2.1.7
1
ghcr.io/open-telemetry/demo:3.1.0-frontend28358db46206
brace-expansion@2.1.4
2.1.7
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
brace-expansion@2.0.1
2.1.7
1
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
brace-expansion@2.0.1
2.1.7
1
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
brace-expansion@2.0.1
2.1.7
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
brace-expansion@2.0.1
2.1.7
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
brace-expansion@2.0.1
2.1.7
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
brace-expansion@2.0.2
2.1.7
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
brace-expansion@5.0.7
5.0.12
1
ghcr.io/platform-mesh/portal:v0.27.16a7ecd5a0dc2
brace-expansion@5.0.7
5.0.12
1
ghcr.io/radar-base/radar-self-enrolment-ui:0.1.0b9a7cd3cc099
brace-expansion@2.0.2
2.1.7
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
brace-expansion@2.0.1
2.1.7
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
brace-expansion@2.0.1
2.1.7
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
brace-expansion@1.1.11
1.1.21
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.32c1ec86675d4
brace-expansion@5.0.9
5.0.12
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
brace-expansion@5.0.7
5.0.12
1
ghcr.io/rybbit-io/rybbit-client:latest9a3bbb2e837a
brace-expansion@5.0.7
5.0.12
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
brace-expansion@1.1.11
1.1.21
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
brace-expansion@2.0.1
2.1.7
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
brace-expansion@1.1.11
1.1.21
1
ghcr.io/seanmorley15/adventurelog-frontend:v0.13.051ee22428b41
brace-expansion@5.0.6
5.0.12
1
ghcr.io/seerr-team/seerr:v3.5.027602401178d
brace-expansion@1.1.12
1.1.21
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
brace-expansion@2.0.2
2.1.7
1
ghcr.io/shuguet/pacman:latesta0ec71732c3c
brace-expansion@5.0.4
5.0.12
1
ghcr.io/solucteam/outscale-s3-explorer:v1.0.09665c3e71889
brace-expansion@2.0.1
2.1.7
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main06adb21bfdfc
brace-expansion@5.0.9
5.0.12
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
brace-expansion@2.0.1
2.1.7
1
ghcr.io/talhajuikar/stateful-data-generator:v1.1.1dfd7ea7303a2
brace-expansion@1.1.12
1.1.21
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
brace-expansion@5.0.7
5.0.12
1
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
brace-expansion@2.0.1
2.1.7
1
ghcr.io/techno-tim/littlelink-server:latest735a1fcd078b
brace-expansion@2.0.1
2.1.7
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
brace-expansion@2.0.2
2.1.7
1
ghcr.io/theduffman85/crowdsec-web-ui:2026.9.162614fd45986
brace-expansion@5.0.7
5.0.12
1
ghcr.io/thm-mni-ii/fbs-collab:v2.0.1366bc4ec1079
brace-expansion@2.0.2
2.1.7
1
ghcr.io/thm-mni-ii/fbs-qcm-backend:v2.0.12633b7c61fb1
brace-expansion@2.0.1
2.1.7
1
ghcr.io/thm-mni-ii/fbs-qcm-frontend:v2.0.128c98d86ed77
brace-expansion@1.1.11
1.1.21
1
ghcr.io/thotischner/observability-mcp:3.9.11775e1e84d5d1
brace-expansion@5.0.9
5.0.12
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
brace-expansion@2.0.2
2.1.7
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
brace-expansion@2.0.1
2.1.7
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
brace-expansion@2.0.1
2.1.7
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
brace-expansion@2.0.1
2.1.7
1
ghcr.io/umami-software/umami:3.0.328f263fe06f7
brace-expansion@1.1.12
1.1.21
1
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
brace-expansion@2.0.1
2.1.7
1
ghcr.io/umami-software/umami:postgresql-v2.20.173ca19b41745
brace-expansion@2.0.2
2.1.7
1
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
brace-expansion@2.0.2
2.1.7
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.