StackRadar

CVE-2026-102278

High

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,091
of 17,957 indexed, latest versions
Container images
1,126
deployed by those charts
Fix available
1 of 2
affected packages

brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

Carried by container images the latest versions of 1,091 of 17,957 indexed charts deploy, on 1,126 images.

Affected packageAffected versionsFixed inImages
brace-expansionnpm1.1.1, 1.1.2, 1.1.4, 1.1.6+23 more1.1.20, 2.1.6, 5.0.111,126
node-brace-expansiondeb1.1.8-1, 1.1.11-1, 2.0.1+~1.1.0-1no fix listed6
OSV records
GHSA-qhr7-859c-m2p7UBUNTU-CVE-2026-102278
Trending
Rank 14 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

1,091 by stars
ChartLatestAffected imagesRadar Score
decisionrules-eksdecisionrules-eksVerified publisher0.3.01 of 2See more

decisionrules-eks decisionrules-eks 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
brace-expansion@2.0.2
2.1.6

Open the chart page →

436
decisionrules-ingressdecisionrules-ingressVerified publisher0.2.01 of 2See more

decisionrules-ingress decisionrules-ingress 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
decisionrules/server:latest6a8f32aa11bc
brace-expansion@2.0.2
2.1.6

Open the chart page →

436
decisionrules-ocpdecisionrules-ocpVerified publisher0.1.02 of 4See more

decisionrules-ocp decisionrules-ocp 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
decisionrules/business-intelligence:latest45a54ef6ade6
brace-expansion@2.0.2
2.1.6
decisionrules/server:latest6a8f32aa11bc
brace-expansion@2.0.2
2.1.6

Open the chart page →

1,881
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
defactops/defactops-backend:1.0.2307b663c0092a
brace-expansion@2.0.1
2.1.6

Open the chart page →

4,754
airtraildefault-ghVerified publisher0.2.21 of 2See more

airtrail default-gh 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
johly/airtrail:v3.11.19f702b91e0e7
brace-expansion@2.0.2
2.1.6

Open the chart page →

1,666
homarrdelerVerified publisher1.0.11 of 1See more

homarr deler 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
brace-expansion@1.1.11
1.1.20

Open the chart page →

1,985
demo-model-chartdemo-model-chart2.0.01 of 3See more

demo-model-chart demo-model-chart 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
gtato/demo-model-server:1.0.018b5a55180d7
brace-expansion@1.1.11
1.1.20

Open the chart page →

1,177
demo-multiclust-chartdemo-model-chart1.0.02 of 3See more

demo-multiclust-chart demo-model-chart 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
gtato/demo-multiclus-registrator:1.0.09a744588fab3
brace-expansion@1.1.11
1.1.20
gtato/demo-multiclus-registry:1.0.02df5174f3cfd
brace-expansion@1.1.11
1.1.20

Open the chart page →

1,851
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
brace-expansion@2.0.1
2.1.6

Open the chart page →

7,579
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
brace-expansion@1.1.11
1.1.20

Open the chart page →

8,475
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
brace-expansion@2.0.1
2.1.6

Open the chart page →

2,635
backend-servicedev-krishan-dhaka-charts1.0.31 of 1See more

backend-service dev-krishan-dhaka-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
devkrishan001/backend:latestf1c3acadeabe
brace-expansion@2.0.1
2.1.6

Open the chart page →

1,366
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
brace-expansion@2.0.1
2.1.6

Open the chart page →

121,940
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
brace-expansion@2.0.1
2.1.6

Open the chart page →

120,938
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
brace-expansion@1.1.12
1.1.20

Open the chart page →

71,602
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
brace-expansion@1.1.11
1.1.20

Open the chart page →

12,256
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
brace-expansion@1.1.12
1.1.20

Open the chart page →

71,602
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
brace-expansion@1.1.11
1.1.20

Open the chart page →

12,256
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
brace-expansion@1.1.11
1.1.20
oscarsotosanchez/weatherservice:v1.0911ec961d10b
brace-expansion@1.1.11
1.1.20

Open the chart page →

28,643
dial-admindialVerified publisher0.19.01 of 3See more

dial-admin dial 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
epam/ai-dial-admin-frontend:0.21.01ecee9f1aa09
brace-expansion@5.0.7
5.0.11

Open the chart page →

3,948
difydify1.0.02 of 4See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.009b7e8705673
brace-expansion@2.0.1
2.1.6
langgenius/dify-web:1.0.0d64914ff0d6d
brace-expansion@2.0.1
2.1.6

Open the chart page →

56,519
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
brace-expansion@2.0.1
2.1.6

Open the chart page →

4,858
disk-resizer-controllerdisk-resizer-controller0.0.0-3fa07c21 of 1See more

disk-resizer-controller disk-resizer-controller 0.0.0-3fa07c2

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
cubos/disk-resizer-controller:0.0.0-3fa07c2b0c4a82d13c2
brace-expansion@2.0.1
2.1.6

Open the chart page →

1,317
node-reddjdl-charts0.33.01 of 1See more

node-red djdl-charts 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
nodered/node-red:latesta649dd711d55
brace-expansion@5.0.7
5.0.11

Open the chart page →

245
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-frontend:v0.13.051ee22428b41
brace-expansion@5.0.6
5.0.11

Open the chart page →

8,087
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
brace-expansion@2.0.1
2.1.6

Open the chart page →

4,486
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
brace-expansion@2.0.1
2.1.6

Open the chart page →

2,801
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
brace-expansion@1.1.11
1.1.20

Open the chart page →

4,488
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.02 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
brace-expansion@1.1.11
1.1.20
oscarsotosanchez/weatherservice:v1.0911ec961d10b
brace-expansion@1.1.11
1.1.20

Open the chart page →

25,642
dumpstoredumpstore0.1.12 of 2See more

dumpstore dumpstore 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
brace-expansion@1.1.12
1.1.20
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
brace-expansion@1.1.11
1.1.20

Open the chart page →

4,603
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
brace-expansion@1.1.11
1.1.20

Open the chart page →

11,353
clickhouse-monitoringduyet0.1.31 of 2See more

clickhouse-monitoring duyet 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/duyet/clickhouse-monitoring:latest84edfe8a67a8
brace-expansion@5.0.6
5.0.11

Open the chart page →

1,167
dyff-frontenddyff-frontendVerified publisher0.20.21 of 1See more

dyff-frontend dyff-frontend 0.20.2

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-frontend:0.20.2481be0beaafe
brace-expansion@2.0.1
2.1.6

Open the chart page →

1,232
benchmarking-tooleclipse-aeriosVerified publisher1.0.01 of 1See more

benchmarking-tool eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
eclipseaerios/benchmarking-tool:1.0.0a4b4c2e7fe62
brace-expansion@5.0.6
5.0.11

Open the chart page →

817
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
brace-expansion@2.0.1
2.1.6

Open the chart page →

2,601
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
brace-expansion@2.0.1
2.1.6

Open the chart page →

1,546
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
brace-expansion@1.1.11
1.1.20

Open the chart page →

5,402
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
brace-expansion@5.0.6
5.0.11

Open the chart page →

1,185
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
brace-expansion@2.1.2
2.1.6

Open the chart page →

32,872
backend-charteks-3-tier-app-chart0.1.01 of 1See more

backend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
arfath29/3-tier-app-backend:latestee0750b18406
brace-expansion@1.1.11
1.1.20

Open the chart page →

1,861
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
brace-expansion@1.1.11
1.1.20

Open the chart page →

3,974
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
library/node:18-alpine8d6421d663b4
brace-expansion@2.0.1
2.1.6

Open the chart page →

3,471
azuriteemberstackVerified publisher1.0.211 of 1See more

azurite emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
brace-expansion@2.0.2
2.1.6

Open the chart page →

473
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
brace-expansion@1.1.11
1.1.20

Open the chart page →

2,381
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
brace-expansion@1.1.11
1.1.20
oscarsotosanchez/weatherservice:v1.0911ec961d10b
brace-expansion@1.1.11
1.1.20

Open the chart page →

28,383
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
brace-expansion@1.1.11
1.1.20
oscarsotosanchez/weatherservice:v1.0911ec961d10b
brace-expansion@1.1.11
1.1.20

Open the chart page →

28,349
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
brace-expansion@1.1.11
1.1.20

Open the chart page →

28,353
edp-installepmdedpOfficialVerified publisher3.15.01 of 7See more

edp-install epmdedp 3.15.0

1 of the 7 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.8.0687acf641097
brace-expansion@5.0.6
5.0.11

Open the chart page →

2,240
krci-portalepmdedpVerified publisher0.8.01 of 1See more

krci-portal epmdedp 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
epamedp/krci-portal:0.8.0687acf641097
brace-expansion@5.0.6
5.0.11

Open the chart page →

944
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
brace-expansion@5.0.5
5.0.11

Open the chart page →

1,992

Container images carrying it

1,126 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-server:2.26.379f14a2bf931
brace-expansion@1.1.11
1.1.20
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-webhook-service:2.26.3c58eb372c488
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
brace-expansion@2.0.1
2.1.6
1
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
brace-expansion@2.0.1
2.1.6
1
sqlpad/sqlpad:6.7d3d2f430dffd
brace-expansion@1.1.11
1.1.20
1
srini78/nodejswebappeks:latest5d1cbdc6833a
brace-expansion@1.1.11
1.1.20
1
stakater/workshop-exercise:0.0.26076926b7159d3
brace-expansion@1.1.11
1.1.20
1
stanfordoval/almond-server:latest1a63cdccedaf
brace-expansion@1.1.11
1.1.20
1
stremio/server:latesta50ec2fae52c
brace-expansion@1.1.11
1.1.20
1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
brace-expansion@1.1.11
1.1.20
1
subsquid/hydra-indexer-status-service:5.0.0-alpha.37a4136013909c
brace-expansion@1.1.11
1.1.20
1
subsquid/substrate-explorer:firesquid0889a857f192
brace-expansion@2.0.1
2.1.6
1
subsquid/substrate-ingest:firesquidfa549779e9b1
brace-expansion@2.0.1
2.1.6
1
supabase/postgres-meta:v0.96.6a84cc713585e
brace-expansion@2.0.1
2.1.6
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
brace-expansion@1.1.11
1.1.20
1
supabase/storage-api:latest5fea789899d4
brace-expansion@2.1.2
2.1.6
1
supabase/storage-api:v1.60.4c8eb9858eafe
brace-expansion@5.0.5
5.0.11
1
supabase/storage-api:v1.12.0f983fb50bd95
brace-expansion@2.0.1
2.1.6
1
supabase/studio:20241021-9f9b08326d8070c55e9
brace-expansion@2.0.1
2.1.6
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
brace-expansion@2.0.2
2.1.6
1
supabase/studio:latestfdb56cfa1705
brace-expansion@2.0.2
2.1.6
1
supporttools/uptime-kuma:v2.6f8a49ed65809
brace-expansion@2.0.1
2.1.6
1
svenwal/jsonplaceholder:latestba2f285af432
brace-expansion@1.1.11
1.1.20
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
brace-expansion@1.1.11
node-brace-expansion@1.1.11-1
1.1.20
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
brace-expansion@1.1.11
1.1.20
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
brace-expansion@2.0.1
2.1.6
1
taigaio/taiga-events:6.4.00bf2d24a57d9
brace-expansion@1.1.11
1.1.20
1
tawfiq58/express-server:latestc707555f6853
brace-expansion@1.1.11
1.1.20
1
tensorzero/ui:2026.6.0f2563d54724e
brace-expansion@2.0.2
2.1.6
1
tenureai/tenure:v1.0.285f5b222df9a5
brace-expansion@2.1.1
2.1.6
1
testhubio/testhub-frontend:on-preme86c2db53be8
brace-expansion@1.1.11
1.1.20
1
th0th/node-red:4.0.3-debiand06fa39f7406
brace-expansion@2.0.1
2.1.6
1
thecloudspark/app-result:1.09a5302cb8312
brace-expansion@1.1.11
1.1.20
1
thecodingmachine/workadventure-back:helm-chart53a30c962ce9
brace-expansion@2.0.1
2.1.6
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
brace-expansion@1.1.11
1.1.20
1
thecodingmachine/workadventure-map-storage:helm-chart519c31c6e7ec
brace-expansion@1.1.11
1.1.20
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
brace-expansion@2.0.1
2.1.6
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.