StackRadar

CVE-2026-102277

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,091
of 17,957 indexed, latest versions
Container images
1,126
deployed by those charts
Fix available
1 of 2
affected packages

brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service

Carried by container images the latest versions of 1,091 of 17,957 indexed charts deploy, on 1,126 images.

Affected packageAffected versionsFixed inImages
brace-expansionnpm1.1.1, 1.1.2, 1.1.4, 1.1.6+23 more1.1.21, 2.1.7, 5.0.121,126
node-brace-expansiondeb1.1.8-1, 1.1.11-1, 2.0.1+~1.1.0-1no fix listed6
OSV records
GHSA-q2hr-2g5m-vwhrUBUNTU-CVE-2026-102277
Trending
Rank 18 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

1,091 by stars
ChartLatestAffected imagesRadar Score
langflow-runtimelangflow0.1.11 of 1See more

langflow-runtime langflow 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
langflowai/langflow:latest79c02794adeb
brace-expansion@5.0.9
5.0.12

Open the chart page →

325
bitwarden-crd-operatorlerentisVerified publisher0.19.01 of 1See more

bitwarden-crd-operator lerentis 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.18.0912b19a7f09a
brace-expansion@5.0.4
5.0.12

Open the chart page →

621
lifecycle-jira-integrationlifecycle-jira-integration1.0.01 of 1See more

lifecycle-jira-integration lifecycle-jira-integration 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
anoopnair/lifecycle-jira-integration:latestd80c73a6089d
brace-expansion@1.1.11
1.1.21

Open the chart page →

979
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
brace-expansion@2.0.2
2.1.7

Open the chart page →

4,820
litlyxlitlyx0.2.03 of 5See more

litlyx litlyx 0.2.0

3 of the 5 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
litlyx/litlyx-consumer:latest02225e77d316
brace-expansion@2.0.2
2.1.7
litlyx/litlyx-dashboard:lateste64ff2d52385
brace-expansion@2.0.2
2.1.7
litlyx/litlyx-producer:latest10407f36613f
brace-expansion@2.0.2
2.1.7

Open the chart page →

8,453
jspolicyloftVerified publisher0.2.21 of 1See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
loftsh/jspolicy:0.2.225deb9bd2683
brace-expansion@1.1.11
1.1.21

Open the chart page →

2,350
actualbudgetm0nsterrr-actualbudgetVerified publisher2.10.01 of 1See more

actualbudget m0nsterrr-actualbudget 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
actualbudget/actual-server:26.9.0552beab3dec8
brace-expansion@2.0.3
2.1.7

Open the chart page →

1,303
plane-enterprisemakeplaneOfficialVerified publisher3.10.13 of 13See more

plane-enterprise makeplane 3.10.1

3 of the 13 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.0488a6684637c
brace-expansion@5.0.9
5.0.12
makeplane/silo-commercial:v3.3.027bf6bbf59bd
brace-expansion@5.0.9
5.0.12
makeplane/space-commercial:v3.3.03dba6a659fb9
brace-expansion@5.0.9
5.0.12

Open the chart page →

4,114
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
brace-expansion@1.1.11
1.1.21

Open the chart page →

6,050
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.12 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

2 of the 6 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
brace-expansion@1.1.11
1.1.21
fjvela/urjc-fjvela-server:1.0.53c840aebce22
brace-expansion@1.1.11
1.1.21

Open the chart page →

19,975
mend-renovate-enterprise-editionmend-renovateVerified publisher10.6.01 of 2See more

mend-renovate-enterprise-edition mend-renovate 10.6.0

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/mend/renovate-ee-server:15.6.087b77989f48d
brace-expansion@5.0.9
5.0.12

Open the chart page →

38,423
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
brace-expansion@1.1.11
1.1.21

Open the chart page →

14,572
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
brace-expansion@2.1.0
2.1.7

Open the chart page →

3,070
cloud9nicholaswildeVerified publisher1.0.01 of 1See more

cloud9 nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
linuxserver/cloud9:version-1.29.245c5fe102ff3
brace-expansion@1.1.4
1.1.21

Open the chart page →

11,926
odoonicholaswildeVerified publisher1.0.01 of 1See more

odoo nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/odoo:version-14.07cff9672ce07
brace-expansion@1.1.11
1.1.21

Open the chart page →

6,526
pixapopnicholaswildeVerified publisher1.0.01 of 1See more

pixapop nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pixapop:v1.2-ls15605ebc091fa1
brace-expansion@1.1.11
1.1.21

Open the chart page →

3,529
tristian-idnonkronk0.1.31 of 1See more

tristian-id nonkronk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
nonkronk/tristian-id:latest0a3694d70647
brace-expansion@1.1.11
1.1.21

Open the chart page →

1,146
oadaoadaVerified publisher5.0.610 of 11See more

oada oada 5.0.6

10 of the 11 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
oada/auth:4.0.0c0d077e79ef4
brace-expansion@2.0.2
2.1.7
oada/http-handler:4.0.0d87efe8ba4b0
brace-expansion@2.0.2
2.1.7
oada/rev-graph-update:4.0.0ebc8343f05ff
brace-expansion@2.0.2
2.1.7
oada/shares:4.0.0c6ffb4e8ed63
brace-expansion@2.0.2
2.1.7
oada/startup:4.0.0fc09495e2f3c
brace-expansion@2.0.2
2.1.7
oada/sync-handler:4.0.0b7a2cfc137cf
brace-expansion@2.0.2
2.1.7
oada/users:4.0.0b6c562fa5b1b
brace-expansion@2.0.2
2.1.7
oada/webhooks:4.0.06590c60de347
brace-expansion@2.0.2
2.1.7
oada/well-known:4.0.07943fde43b19
brace-expansion@2.0.2
2.1.7
oada/write-handler:4.0.08464c7f48aae
brace-expansion@2.0.2
2.1.7

Open the chart page →

14,390
dashdotoben01Verified publisher1.5.01 of 1See more

dashdot oben01 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
mauricenino/dashdot:5.9.2236997816917
brace-expansion@2.0.1
2.1.7

Open the chart page →

1,497
observability-mcpobservability-mcpOfficialVerified publisher2.9.121 of 2See more

observability-mcp observability-mcp 2.9.12

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/thotischner/observability-mcp:3.9.11775e1e84d5d1
brace-expansion@5.0.9
5.0.12

Open the chart page →

98
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
growthbook/growthbook:latestcbf1bc59e9a9
brace-expansion@5.0.9
5.0.12

Open the chart page →

1,364
kuttone-acre-fundVerified publisher0.2.51 of 1See more

kutt one-acre-fund 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
kutt/kutt:latestfa3d24a89b04
brace-expansion@2.0.2
2.1.7

Open the chart page →

601
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
brace-expansion@1.1.11
1.1.21

Open the chart page →

5,410
open-api-discoveryopen-api-discoveryVerified publisher0.1.11 of 1See more

open-api-discovery open-api-discovery 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
lukasreining/open-api-schema-collector:0.1.050e021c42e33
brace-expansion@2.0.1
2.1.7

Open the chart page →

2,552
openccuopenccuVerified publisher3.89.111 of 1See more

openccu openccu 3.89.11

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.11.202609193cfcb30e1921
brace-expansion@2.0.2
2.1.7

Open the chart page →

1,583
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.12 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.1

2 of the 34 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.1.0-payment10d6bd20d8a0
brace-expansion@2.1.4
2.1.7
ghcr.io/open-telemetry/demo:3.1.0-frontend28358db46206
brace-expansion@2.1.4
2.1.7

Open the chart page →

22,392
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
brace-expansion@2.0.2
2.1.7

Open the chart page →

7,385
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
brace-expansion@2.0.2
2.1.7

Open the chart page →

7,533
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
brace-expansion@2.0.1
2.1.7

Open the chart page →

2,235
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
brace-expansion@1.1.11
1.1.21

Open the chart page →

4,278
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
brace-expansion@5.0.4
5.0.12

Open the chart page →

7,918
camophntom0.1.11 of 1See more

camo phntom 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
phntom/camo:2.3.1a9b1304d6c71
brace-expansion@1.1.11
1.1.21

Open the chart page →

1,257
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
brace-expansion@1.1.11
1.1.21
treskon/portrait-ui:DEV-lateste7970783bc8d
brace-expansion@5.0.8
5.0.12

Open the chart page →

33,687
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
prowlercloud/prowler-ui:5.31.179ee83c8e702
brace-expansion@2.0.2
2.1.7

Open the chart page →

9,277
psa-restricted-patcherpsa-restricted-patcherVerified publisher0.10.11 of 1See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
brace-expansion@2.0.1
2.1.7

Open the chart page →

1,536
pumejwebapppumejnodejswebapp0.1.01 of 1See more

pumejwebapp pumejnodejswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
pumejlab/nodejs-webapp:latestf563eabcb819
brace-expansion@1.1.11
1.1.21

Open the chart page →

1,215
laravel-octanerenoki-co1.0.01 of 1See more

laravel-octane renoki-co 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
brace-expansion@1.1.11
1.1.21

Open the chart page →

3,697
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
brace-expansion@1.1.11
1.1.21

Open the chart page →

2,531
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
brace-expansion@2.0.2
2.1.7

Open the chart page →

6,073
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
brace-expansion@1.1.11
1.1.21

Open the chart page →

7,226
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
brace-expansion@1.1.11
1.1.21

Open the chart page →

3,207
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
brace-expansion@2.0.1
2.1.7

Open the chart page →

32,379
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
brace-expansion@2.0.1
2.1.7

Open the chart page →

41,195
immichsecustorVerified publisher2.0.71 of 1See more

immich secustor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.4d317916b2809
brace-expansion@5.0.9
5.0.12

Open the chart page →

3,160
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
brace-expansion@2.0.2
2.1.7

Open the chart page →

5,505
helm64-toolboxserdigital64Verified publisher0.4.01 of 1See more

helm64-toolbox serdigital64 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox:latest7af2216c7b9e
brace-expansion@5.0.6
5.0.12

Open the chart page →

1,626
vuiseriohub1.0.61 of 3See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
dserio83/velero-ui:0.3.1b4e1ec6664d3
brace-expansion@2.0.1
2.1.7

Open the chart page →

12,131
wg-easyslybase-wg-easyVerified publisher1.2.01 of 1See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:15.4.00e7bc9d34e86
brace-expansion@5.0.6
5.0.12

Open the chart page →

848
speckle-serverspeckleVerified publisher2.26.34 of 4See more

speckle-server speckle 2.26.3

4 of the 4 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
brace-expansion@2.0.1
2.1.7
speckle/speckle-preview-service:2.26.3092384dba45d
brace-expansion@1.1.11
1.1.21
speckle/speckle-server:2.26.379f14a2bf931
brace-expansion@1.1.11
1.1.21
speckle/speckle-webhook-service:2.26.3c58eb372c488
brace-expansion@2.0.1
2.1.7

Open the chart page →

11,459
splice-helmsplice-helm0.1.71 of 13See more

splice-helm splice-helm 0.1.7

1 of the 13 container images this version deploys carry CVE-2026-102277.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:3.0.0c36cf3cc1c99
brace-expansion@1.1.6
1.1.21

Open the chart page →

1,518

Container images carrying it

1,126 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
fosrl/pangolin:1.13.0c32ad797ab96
brace-expansion@2.0.2
2.1.7
1
frappe/frappe-socketio:v13.4.12095767a9e82
brace-expansion@1.1.11
1.1.21
1
frinx/frinx-frontend:7.0.1ab716463b8df
brace-expansion@2.0.1
2.1.7
1
frinx/frinx-frontend:6.1.0ac593f5b2e2f
brace-expansion@1.1.11
1.1.21
1
frinx/frinx-graphql-proxy:7.0.017a139608024
brace-expansion@2.0.1
2.1.7
1
frinx/frinx-graphql-proxy:6.1.05f1368ef47b8
brace-expansion@2.0.1
2.1.7
1
frinx/frinx-inventory-server:7.0.16b1992c79e78
brace-expansion@2.0.1
2.1.7
1
frinx/frinx-inventory-server:6.1.086c9ce1f5e31
brace-expansion@2.0.1
2.1.7
1
fthomas/scala-steward:latesta8eb43927576
brace-expansion@5.0.4
5.0.12
1
galaxy/galaxy-init:v18.010267bad550e6
brace-expansion@1.1.8
1.1.21
1
gethue/hue:4.11.011b649636e68
brace-expansion@1.1.11
1.1.21
1
gethue/hue:4.10.05702b2c37ff9
brace-expansion@1.1.11
1.1.21
1
getwud/wud:8.1.1b1cd01c43839
brace-expansion@2.0.1
2.1.7
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
brace-expansion@2.0.2
2.1.7
1
glenndehaan/api-mapper:latest6ff6310683bf
brace-expansion@1.1.11
1.1.21
1
glenndehaan/contentbridge:latest99b9e4f73848
brace-expansion@2.0.1
2.1.7
1
glenndehaan/kube-hook:latest0a7116f48bfe
brace-expansion@2.0.1
2.1.7
1
globalping/globalping-probe:latestb8469caf783a
brace-expansion@1.1.11
1.1.21
1
gonzague/monopoly:latest70465995deea
brace-expansion@1.1.11
1.1.21
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
brace-expansion@1.1.11
1.1.21
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
brace-expansion@1.1.11
1.1.21
1
gristlabs/grist:0.7.96e71b1914a7e
brace-expansion@1.1.11
1.1.21
1
growthbook/growthbook:5.1.0c8a124f55dca
brace-expansion@5.0.9
5.0.12
1
growthbook/growthbook:latestcbf1bc59e9a9
brace-expansion@5.0.9
5.0.12
1
gtato/demo-model-server:1.0.018b5a55180d7
brace-expansion@1.1.11
1.1.21
1
gtato/demo-multiclus-registrator:1.0.09a744588fab3
brace-expansion@1.1.11
1.1.21
1
gtato/demo-multiclus-registry:1.0.02df5174f3cfd
brace-expansion@1.1.11
1.1.21
1
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
brace-expansion@1.1.11
1.1.21
1
halkeye/hubot:latest9764d2202130
brace-expansion@1.1.11
1.1.21
1
halkeye/irslackd:latest7638bfba70b0
brace-expansion@1.1.11
1.1.21
1
hamid2021/nodejs-dockercli:latest429d99890c3c
brace-expansion@1.1.11
1.1.21
1
hansehe/graphql-gateway:1.0.458e09540afbc
brace-expansion@2.0.1
2.1.7
1
haohanyang/compass-web:0.5.054f2112602ee
brace-expansion@5.0.6
5.0.12
1
haohanyang/compass-web:0.1.1e3952b14ae8e
brace-expansion@2.0.1
2.1.7
1
haohanyang/compass-web:0.5.1f4f8fe4e21f1
brace-expansion@5.0.7
5.0.12
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
brace-expansion@1.1.11
1.1.21
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
brace-expansion@2.0.1
2.1.7
1
hbjy/cardinal:v1.2.29b80656585cc
brace-expansion@1.1.11
1.1.21
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
brace-expansion@2.0.1
2.1.7
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
brace-expansion@1.1.11
1.1.21
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
brace-expansion@1.1.11
1.1.21
1
helmforge/opencut:v0.3.0bf11156e0ab5
brace-expansion@5.0.6
5.0.12
1
helmforge/strapi-base:5.52.270e9143d6d92
brace-expansion@2.1.4
2.1.7
1
henrywhitaker3/speedtest-tracker:latest47159a940229
brace-expansion@1.1.11
1.1.21
1
heywood8/redisinsight:2.28.00bc9ab313d37
brace-expansion@2.0.1
2.1.7
1
hhaluk/crypto-watchdog:0.4.0a6555953d941
brace-expansion@1.1.11
1.1.21
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
brace-expansion@2.0.2
2.1.7
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
brace-expansion@1.1.11
1.1.21
1
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
brace-expansion@2.0.1
2.1.7
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
brace-expansion@2.0.1
2.1.7
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.