StackRadar

CVE-2026-102277

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,091
of 17,957 indexed, latest versions
Container images
1,126
deployed by those charts
Fix available
1 of 2
affected packages

brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service

Carried by container images the latest versions of 1,091 of 17,957 indexed charts deploy, on 1,126 images.

Affected packageAffected versionsFixed inImages
brace-expansionnpm1.1.1, 1.1.2, 1.1.4, 1.1.6+23 more1.1.21, 2.1.7, 5.0.121,126
node-brace-expansiondeb1.1.8-1, 1.1.11-1, 2.0.1+~1.1.0-1no fix listed6
OSV records
GHSA-q2hr-2g5m-vwhrUBUNTU-CVE-2026-102277
Trending
Rank 18 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

1,091 by stars
ChartLatestAffected imagesRadar Score
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
brace-expansion@1.1.11
1.1.21

Open the chart page →

10,289
k8s-jacoco-operatork8s-jacoco-operator0.4.02 of 4See more

k8s-jacoco-operator k8s-jacoco-operator 0.4.0

2 of the 4 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
library/node:lts-alpineebfe2f904627
brace-expansion@5.0.7
5.0.12
ghcr.io/curium-rocks/k8s-jacoco-operator:maina558ceae6cdb
brace-expansion@2.0.2
2.1.7

Open the chart page →

2,547
k8s-mutating-webhookk8s-mutating-webhook0.3.01 of 2See more

k8s-mutating-webhook k8s-mutating-webhook 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/k8s-mutating-webhook:mainaaab005242ae
brace-expansion@2.0.1
2.1.7

Open the chart page →

2,101
zwave-js-uik8sonlabVerified publisher0.7.121 of 1See more

zwave-js-ui k8sonlab 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.22.314d018bb689e
brace-expansion@2.0.2
2.1.7

Open the chart page →

1,115
k8s-validating-webhookk8s-validating-webhook0.4.01 of 2See more

k8s-validating-webhook k8s-validating-webhook 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/k8s-validating-webhook:main8344061b2f22
brace-expansion@2.0.1
2.1.7

Open the chart page →

2,101
kube-admission-controller-starterk8s-validating-webhook0.2.01 of 2See more

kube-admission-controller-starter k8s-validating-webhook 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/kube-admission-controller-starter:maine9716966f30b
brace-expansion@2.0.1
2.1.7

Open the chart page →

2,260
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
brace-expansion@1.1.11
1.1.21

Open the chart page →

87,459
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
brace-expansion@2.0.1
2.1.7

Open the chart page →

5,605
keycloak-multi-client-notifierkeycloak-multi-client-notifier2.1.21 of 2See more

keycloak-multi-client-notifier keycloak-multi-client-notifier 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/blessingnator/keycloak-mcn-backend:2.0.5967470f05472
brace-expansion@1.1.12
1.1.21

Open the chart page →

1,823
statsdkeyporttech0.1.191 of 1See more

statsd keyporttech 0.1.19

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,562
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service-ui:7.0.34ebd8b4ef340
brace-expansion@1.1.11
1.1.21

Open the chart page →

71,975
skoonerkfirfer0.0.61 of 1See more

skooner kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
brace-expansion@1.1.11
1.1.21

Open the chart page →

1,391
cdashkitwareVerified publisher0.20.01 of 3See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
kitware/cdash:v5.4.0da5abe941506
brace-expansion@5.0.7
5.0.12

Open the chart page →

12,207
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
brace-expansion@1.1.12
1.1.21

Open the chart page →

1,639
visual-regression-trackerkokuwa5.1.02 of 4See more

visual-regression-tracker kokuwa 5.1.0

2 of the 4 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
brace-expansion@2.0.1
2.1.7
visualregressiontracker/migration:5.0.1f983a1d4306e
brace-expansion@1.1.11
1.1.21

Open the chart page →

9,708
apikrateo1.0.31 of 1See more

api krateo 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/api:1.0.3edbaa031754d
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,877
argocd-servicekrateo1.0.71 of 1See more

argocd-service krateo 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/argocd-service:1.0.749b727854938
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,905
auth-servicekrateo1.2.361 of 1See more

auth-service krateo 1.2.36

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/auth-service:1.2.36794bc5877f76
brace-expansion@1.1.11
1.1.21

Open the chart page →

5,355
capi-servicekrateo1.1.91 of 1See more

capi-service krateo 1.1.9

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/capi-service:1.1.92eee721260eb
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,632
codequality-servicekrateo1.1.11 of 1See more

codequality-service krateo 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/codequality-service:1.1.19a9a77b01eb1
brace-expansion@2.0.1
2.1.7

Open the chart page →

4,488
component-servicekrateo0.2.11 of 1See more

component-service krateo 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/component-service:0.2.14a5f506c0560
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,823
deployment-servicekrateo1.2.591 of 1See more

deployment-service krateo 1.2.59

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
brace-expansion@1.1.11
1.1.21

Open the chart page →

10,081
endpoint-servicekrateo1.0.11 of 1See more

endpoint-service krateo 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/endpoint-service:1.0.16c3777c042f7
brace-expansion@2.0.1
2.1.7

Open the chart page →

5,467
event-servicekrateo1.1.61 of 1See more

event-service krateo 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/event-service:1.1.671fd074020f4
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,920
git-servicekrateo1.0.131 of 1See more

git-service krateo 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/git-service:1.0.13c22f183fedf0
brace-expansion@1.1.11
1.1.21

Open the chart page →

5,914
keptn-servicekrateo1.0.121 of 1See more

keptn-service krateo 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/keptn-service:1.0.12f9fef2435636
brace-expansion@2.0.1
2.1.7

Open the chart page →

5,067
keptn-service-insielkrateo0.1.31 of 1See more

keptn-service-insiel krateo 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/keptn-service-insiel:0.1.3c1d475bb7f06
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,802
krateo-remote-clientkrateo0.4.161 of 1See more

krateo-remote-client krateo 0.4.16

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/krateo-remote-client:0.4.167ccd4382f3fa
brace-expansion@2.0.1
2.1.7

Open the chart page →

5,131
krateo-remote-serverkrateo0.2.41 of 1See more

krateo-remote-server krateo 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/krateo-remote-server:0.2.40df58c99cc6f
brace-expansion@2.0.1
2.1.7

Open the chart page →

5,264
kubernetes-servicekrateo1.1.11 of 1See more

kubernetes-service krateo 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kubernetes-service:1.1.1974fbc0d93ed
brace-expansion@2.0.1
2.1.7

Open the chart page →

4,880
log-servicekrateo1.0.01 of 1See more

log-service krateo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/log-service:1.0.0b431a8154be0
brace-expansion@1.1.11
1.1.21

Open the chart page →

5,166
notification-servicekrateo1.1.61 of 1See more

notification-service krateo 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/notification-service:1.1.6f9eeac1d7e47
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,972
pipeline-servicekrateo1.1.21 of 1See more

pipeline-service krateo 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/pipeline-service:1.1.25e6ad7395921
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,371
provider-servicekrateo1.0.81 of 1See more

provider-service krateo 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/provider-service:1.0.8014ed41cb6e5
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,823
secret-servicekrateo1.1.41 of 1See more

secret-service krateo 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/secret-service:1.1.4292bd05fb781
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,798
service-deploymentkrateo0.1.61 of 1See more

service-deployment krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/service-deployment:0.1.541fb833f36ee
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,684
template-servicekrateo1.2.131 of 1See more

template-service krateo 1.2.13

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/template-service:1.2.139f82e7cb2348
brace-expansion@1.1.11
1.1.21

Open the chart page →

6,231
terminal-clientkrateo0.1.31 of 1See more

terminal-client krateo 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
brace-expansion@2.0.1
2.1.7

Open the chart page →

7,159
terminal-serverkrateo0.1.61 of 1See more

terminal-server krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
brace-expansion@2.0.1
2.1.7

Open the chart page →

7,112
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
brace-expansion@1.1.11
1.1.21

Open the chart page →

74,154
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.11.0d0cd3d868aca
brace-expansion@1.1.11
1.1.21

Open the chart page →

5,869
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
brace-expansion@1.1.11
1.1.21

Open the chart page →

3,556
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,395
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
brace-expansion@2.0.2
2.1.7

Open the chart page →

3,642
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
brace-expansion@1.1.11
1.1.21

Open the chart page →

5,849
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
brace-expansion@1.1.11
1.1.21

Open the chart page →

2,264
tampkubebb5.6.01 of 2See more

tamp kubebb 5.6.0

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
kubebb/tamp-portal:v5.6.0fadac6d52470
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,721
tapm-componentkubebb5.7.11 of 3See more

tapm-component kubebb 5.7.1

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
refar/apm-portal:v5.7.1dcca8e4477a6
brace-expansion@1.1.11
1.1.21

Open the chart page →

10,354
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
kubebb/tdsf-portal:v5.7.0258458311bc9
brace-expansion@1.1.11
1.1.21

Open the chart page →

6,546
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
brace-expansion@2.0.1
2.1.7

Open the chart page →

13,953

Container images carrying it

1,126 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
brace-expansion@2.0.1
2.1.7
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
brace-expansion@2.0.1
2.1.7
1
anoopnair/lifecycle-jira-integration:latestd80c73a6089d
brace-expansion@1.1.11
1.1.21
1
aolde/bredbandskollen-prometheus-exporter:1.0.2dc61ee713720
brace-expansion@1.1.11
1.1.21
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
brace-expansion@2.0.1
2.1.7
1
apimap/developer:v1.3.1406d3858e20c
brace-expansion@1.1.11
1.1.21
1
apimap/portal:v2.4.0041a4790c65c
brace-expansion@1.1.11
1.1.21
1
appwrite/new:1.1.159-self-hosted1811ce1d8154
brace-expansion@5.0.6
5.0.12
1
arbuzov/claude-code-api:0.1.02d7dd8070610
brace-expansion@2.0.1
2.1.7
1
archivebox/archivebox:0.9.708c21bb233130
brace-expansion@2.0.2
2.1.7
1
arfath29/3-tier-app-backend:latestee0750b18406
brace-expansion@1.1.11
1.1.21
1
arfath29/3-tier-app-frontend:latest384b3e377f47
brace-expansion@1.1.11
1.1.21
1
arturisimo/server-urjc:v1.0d8dc4430531e
brace-expansion@1.1.11
1.1.21
1
assistiot/composite-services-manager_agent-http-mqtt:latest16d21bc5e42e
brace-expansion@1.1.11
1.1.21
1
assistiot/composite-services-manager_agent-mqtt-http:latest27d58b8911cd
brace-expansion@1.1.11
1.1.21
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
brace-expansion@1.1.11
1.1.21
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
brace-expansion@1.1.8
1.1.21
1
assistiot/dlt_api:2.1.0c8a170683be7
brace-expansion@2.0.1
2.1.7
1
assistiot/fl_orchestrator:api-latest7473d77448e1
brace-expansion@1.1.11
1.1.21
1
assistiot/monitoring_notifying:2.0.068324d0fa5bb
brace-expansion@1.1.11
1.1.21
1
assistiot/multi-link_client:latestcf048365d042
brace-expansion@1.1.11
1.1.21
1
assistiot/multi-link_server:latestf38c76a4c960
brace-expansion@1.1.11
1.1.21
1
assistiot/open_api_frontend:1.0.1f11d82defc70
brace-expansion@1.1.11
1.1.21
1
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
brace-expansion@1.1.11
1.1.21
1
assistiot/smart-orchestrator_enabler:latest89f37e88c871
brace-expansion@1.1.11
1.1.21
1
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
brace-expansion@1.1.11
1.1.21
1
aureliengasser/http-folder:1.1.111c4318c2571
brace-expansion@1.1.11
1.1.21
1
automatischio/automatisch:0.15.03bace7a12d5f
brace-expansion@1.1.11
1.1.21
1
baserow/baserow:1.30.1df0c42eb67e8
brace-expansion@1.1.11
1.1.21
1
baserow/web-frontend:2.3.3566d24c7d9f5
brace-expansion@5.0.7
5.0.12
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
brace-expansion@1.1.11
1.1.21
1
belirta/beli-docker:v1.0.0f65ad0e23b4d
brace-expansion@1.1.11
1.1.21
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
brace-expansion@2.0.1
2.1.7
1
bicarus/http-https-echo:2785dd6a7e805e
brace-expansion@1.1.11
1.1.21
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
brace-expansion@1.1.11
1.1.21
1
billimek/node-influx-uptimerobot:latest5814f0bcf5ba
brace-expansion@1.1.11
1.1.21
1
blockscout/blockscout:5.1.5c365a8f2dc12
brace-expansion@1.1.11
1.1.21
1
bluerange/bluerange-mosquitto:2690a4e5b92cc6
brace-expansion@1.1.18
1.1.21
1
bnjbvr/kresus:0.22.137e216b182c8
brace-expansion@2.0.1
2.1.7
1
bnwokoye/nodejswebapp:latest74de7dc7ebfb
brace-expansion@2.0.1
2.1.7
1
bpatrik/pigallery2:1.9.0-debian-buster21fbaa5fae61
brace-expansion@1.1.11
1.1.21
1
broadinstitute/dsde-toolbox:master656131886a08
brace-expansion@1.1.11
1.1.21
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
brace-expansion@1.1.11
1.1.21
1
budibase/apps:3.41.344fe6feab985
brace-expansion@2.0.2
2.1.7
1
budibase/database:2.1.0d90f656261c9
brace-expansion@5.0.4
5.0.12
1
budibase/worker:3.41.3de5e2e560ce8
brace-expansion@2.0.2
2.1.7
1
camptocamp/geomapfishapp-geoportal:latestae874f70cc16
brace-expansion@2.0.1
node-brace-expansion@2.0.1+~1.1.0-1
2.1.7
no fix listed
1
carbonetes/carbonetes-analyzer:1.0.31b9b93c9a37f
brace-expansion@1.1.11
1.1.21
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
brace-expansion@2.0.1
2.1.7
1
catalysm/csmm:latestf003b35f54d9
brace-expansion@1.1.11
1.1.21
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.