StackRadar

CVE-2026-102278

High

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,091
of 17,957 indexed, latest versions
Container images
1,126
deployed by those charts
Fix available
1 of 2
affected packages

brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

Carried by container images the latest versions of 1,091 of 17,957 indexed charts deploy, on 1,126 images.

Affected packageAffected versionsFixed inImages
brace-expansionnpm1.1.1, 1.1.2, 1.1.4, 1.1.6+23 more1.1.20, 2.1.6, 5.0.111,126
node-brace-expansiondeb1.1.8-1, 1.1.11-1, 2.0.1+~1.1.0-1no fix listed6
OSV records
GHSA-qhr7-859c-m2p7UBUNTU-CVE-2026-102278
Trending
Rank 14 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

1,091 by stars
ChartLatestAffected imagesRadar Score
langflow-runtimelangflow0.1.11 of 1See more

langflow-runtime langflow 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
langflowai/langflow:latest79c02794adeb
brace-expansion@5.0.9
5.0.11

Open the chart page →

325
bitwarden-crd-operatorlerentisVerified publisher0.19.01 of 1See more

bitwarden-crd-operator lerentis 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.18.0912b19a7f09a
brace-expansion@5.0.4
5.0.11

Open the chart page →

621
lifecycle-jira-integrationlifecycle-jira-integration1.0.01 of 1See more

lifecycle-jira-integration lifecycle-jira-integration 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
anoopnair/lifecycle-jira-integration:latestd80c73a6089d
brace-expansion@1.1.11
1.1.20

Open the chart page →

979
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
brace-expansion@2.0.2
2.1.6

Open the chart page →

4,820
litlyxlitlyx0.2.03 of 5See more

litlyx litlyx 0.2.0

3 of the 5 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
litlyx/litlyx-consumer:latest02225e77d316
brace-expansion@2.0.2
2.1.6
litlyx/litlyx-dashboard:lateste64ff2d52385
brace-expansion@2.0.2
2.1.6
litlyx/litlyx-producer:latest10407f36613f
brace-expansion@2.0.2
2.1.6

Open the chart page →

8,453
jspolicyloftVerified publisher0.2.21 of 1See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
loftsh/jspolicy:0.2.225deb9bd2683
brace-expansion@1.1.11
1.1.20

Open the chart page →

2,350
actualbudgetm0nsterrr-actualbudgetVerified publisher2.10.01 of 1See more

actualbudget m0nsterrr-actualbudget 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
actualbudget/actual-server:26.9.0552beab3dec8
brace-expansion@2.0.3
2.1.6

Open the chart page →

1,303
plane-enterprisemakeplaneOfficialVerified publisher3.10.13 of 13See more

plane-enterprise makeplane 3.10.1

3 of the 13 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
makeplane/live-commercial:v3.3.0488a6684637c
brace-expansion@5.0.9
5.0.11
makeplane/silo-commercial:v3.3.027bf6bbf59bd
brace-expansion@5.0.9
5.0.11
makeplane/space-commercial:v3.3.03dba6a659fb9
brace-expansion@5.0.9
5.0.11

Open the chart page →

4,114
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
brace-expansion@1.1.11
1.1.20

Open the chart page →

6,050
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.12 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

2 of the 6 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
brace-expansion@1.1.11
1.1.20
fjvela/urjc-fjvela-server:1.0.53c840aebce22
brace-expansion@1.1.11
1.1.20

Open the chart page →

19,975
mend-renovate-enterprise-editionmend-renovateVerified publisher10.6.01 of 2See more

mend-renovate-enterprise-edition mend-renovate 10.6.0

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/mend/renovate-ee-server:15.6.087b77989f48d
brace-expansion@5.0.9
5.0.11

Open the chart page →

38,423
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
brace-expansion@1.1.11
1.1.20

Open the chart page →

14,572
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
brace-expansion@2.1.0
2.1.6

Open the chart page →

3,070
cloud9nicholaswildeVerified publisher1.0.01 of 1See more

cloud9 nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
linuxserver/cloud9:version-1.29.245c5fe102ff3
brace-expansion@1.1.4
1.1.20

Open the chart page →

11,926
odoonicholaswildeVerified publisher1.0.01 of 1See more

odoo nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/odoo:version-14.07cff9672ce07
brace-expansion@1.1.11
1.1.20

Open the chart page →

6,526
pixapopnicholaswildeVerified publisher1.0.01 of 1See more

pixapop nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pixapop:v1.2-ls15605ebc091fa1
brace-expansion@1.1.11
1.1.20

Open the chart page →

3,529
tristian-idnonkronk0.1.31 of 1See more

tristian-id nonkronk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
nonkronk/tristian-id:latest0a3694d70647
brace-expansion@1.1.11
1.1.20

Open the chart page →

1,146
oadaoadaVerified publisher5.0.610 of 11See more

oada oada 5.0.6

10 of the 11 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
oada/auth:4.0.0c0d077e79ef4
brace-expansion@2.0.2
2.1.6
oada/http-handler:4.0.0d87efe8ba4b0
brace-expansion@2.0.2
2.1.6
oada/rev-graph-update:4.0.0ebc8343f05ff
brace-expansion@2.0.2
2.1.6
oada/shares:4.0.0c6ffb4e8ed63
brace-expansion@2.0.2
2.1.6
oada/startup:4.0.0fc09495e2f3c
brace-expansion@2.0.2
2.1.6
oada/sync-handler:4.0.0b7a2cfc137cf
brace-expansion@2.0.2
2.1.6
oada/users:4.0.0b6c562fa5b1b
brace-expansion@2.0.2
2.1.6
oada/webhooks:4.0.06590c60de347
brace-expansion@2.0.2
2.1.6
oada/well-known:4.0.07943fde43b19
brace-expansion@2.0.2
2.1.6
oada/write-handler:4.0.08464c7f48aae
brace-expansion@2.0.2
2.1.6

Open the chart page →

14,390
dashdotoben01Verified publisher1.5.01 of 1See more

dashdot oben01 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
mauricenino/dashdot:5.9.2236997816917
brace-expansion@2.0.1
2.1.6

Open the chart page →

1,497
observability-mcpobservability-mcpOfficialVerified publisher2.9.121 of 2See more

observability-mcp observability-mcp 2.9.12

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/thotischner/observability-mcp:3.9.11775e1e84d5d1
brace-expansion@5.0.9
5.0.11

Open the chart page →

98
growthbookone-acre-fundVerified publisher0.3.01 of 3See more

growthbook one-acre-fund 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
growthbook/growthbook:latestcbf1bc59e9a9
brace-expansion@5.0.9
5.0.11

Open the chart page →

1,364
kuttone-acre-fundVerified publisher0.2.51 of 1See more

kutt one-acre-fund 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
kutt/kutt:latestfa3d24a89b04
brace-expansion@2.0.2
2.1.6

Open the chart page →

601
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
brace-expansion@1.1.11
1.1.20

Open the chart page →

5,410
open-api-discoveryopen-api-discoveryVerified publisher0.1.11 of 1See more

open-api-discovery open-api-discovery 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
lukasreining/open-api-schema-collector:0.1.050e021c42e33
brace-expansion@2.0.1
2.1.6

Open the chart page →

2,552
openccuopenccuVerified publisher3.89.111 of 1See more

openccu openccu 3.89.11

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.11.202609193cfcb30e1921
brace-expansion@2.0.2
2.1.6

Open the chart page →

1,583
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.12 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.1

2 of the 34 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.1.0-payment10d6bd20d8a0
brace-expansion@2.1.4
2.1.6
ghcr.io/open-telemetry/demo:3.1.0-frontend28358db46206
brace-expansion@2.1.4
2.1.6

Open the chart page →

22,392
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
brace-expansion@2.0.2
2.1.6

Open the chart page →

7,385
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
brace-expansion@2.0.2
2.1.6

Open the chart page →

7,533
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
brace-expansion@2.0.1
2.1.6

Open the chart page →

2,235
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
brace-expansion@1.1.11
1.1.20

Open the chart page →

4,278
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
brace-expansion@5.0.4
5.0.11

Open the chart page →

7,918
camophntom0.1.11 of 1See more

camo phntom 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
phntom/camo:2.3.1a9b1304d6c71
brace-expansion@1.1.11
1.1.20

Open the chart page →

1,257
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
brace-expansion@1.1.11
1.1.20
treskon/portrait-ui:DEV-lateste7970783bc8d
brace-expansion@5.0.8
5.0.11

Open the chart page →

33,687
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
prowlercloud/prowler-ui:5.31.179ee83c8e702
brace-expansion@2.0.2
2.1.6

Open the chart page →

9,277
psa-restricted-patcherpsa-restricted-patcherVerified publisher0.10.11 of 1See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
brace-expansion@2.0.1
2.1.6

Open the chart page →

1,536
pumejwebapppumejnodejswebapp0.1.01 of 1See more

pumejwebapp pumejnodejswebapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
pumejlab/nodejs-webapp:latestf563eabcb819
brace-expansion@1.1.11
1.1.20

Open the chart page →

1,215
laravel-octanerenoki-co1.0.01 of 1See more

laravel-octane renoki-co 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
brace-expansion@1.1.11
1.1.20

Open the chart page →

3,697
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
brace-expansion@1.1.11
1.1.20

Open the chart page →

2,531
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
brace-expansion@2.0.2
2.1.6

Open the chart page →

6,073
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
brace-expansion@1.1.11
1.1.20

Open the chart page →

7,226
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
brace-expansion@1.1.11
1.1.20

Open the chart page →

3,207
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
brace-expansion@2.0.1
2.1.6

Open the chart page →

32,379
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
brace-expansion@2.0.1
2.1.6

Open the chart page →

41,195
immichsecustorVerified publisher2.0.71 of 1See more

immich secustor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.2.4d317916b2809
brace-expansion@5.0.9
5.0.11

Open the chart page →

3,160
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
brace-expansion@2.0.2
2.1.6

Open the chart page →

5,505
helm64-toolboxserdigital64Verified publisher0.4.01 of 1See more

helm64-toolbox serdigital64 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/automation64/toolbox/oraclelinux-9-toolbox:latest7af2216c7b9e
brace-expansion@5.0.6
5.0.11

Open the chart page →

1,626
vuiseriohub1.0.61 of 3See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
dserio83/velero-ui:0.3.1b4e1ec6664d3
brace-expansion@2.0.1
2.1.6

Open the chart page →

12,131
wg-easyslybase-wg-easyVerified publisher1.2.01 of 1See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:15.4.00e7bc9d34e86
brace-expansion@5.0.6
5.0.11

Open the chart page →

848
speckle-serverspeckleVerified publisher2.26.34 of 4See more

speckle-server speckle 2.26.3

4 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
brace-expansion@2.0.1
2.1.6
speckle/speckle-preview-service:2.26.3092384dba45d
brace-expansion@1.1.11
1.1.20
speckle/speckle-server:2.26.379f14a2bf931
brace-expansion@1.1.11
1.1.20
speckle/speckle-webhook-service:2.26.3c58eb372c488
brace-expansion@2.0.1
2.1.6

Open the chart page →

11,459
splice-helmsplice-helm0.1.71 of 13See more

splice-helm splice-helm 0.1.7

1 of the 13 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:3.0.0c36cf3cc1c99
brace-expansion@1.1.6
1.1.20

Open the chart page →

1,518

Container images carrying it

1,126 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
governify/reporter:v2.2.038595913458f
brace-expansion@1.1.11
1.1.20
2
gradiant/open5gs-webui:2.7.5fbd10c017541
brace-expansion@1.1.11
1.1.20
2
homebridge/homebridge:latest77c685a40911
brace-expansion@5.0.9
5.0.11
2
hookiesolutions/webhookie:latest0629694246ba
brace-expansion@1.1.11
1.1.20
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
brace-expansion@2.0.1
2.1.6
2
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
brace-expansion@1.1.11
1.1.20
2
ilum/ui:6.7.3998937726679
brace-expansion@2.0.2
2.1.6
2
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
brace-expansion@1.1.11
1.1.20
2
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
brace-expansion@1.1.11
1.1.20
2
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
brace-expansion@1.1.11
1.1.20
2
krtk6160/galoy-nostrcc82a694f818
brace-expansion@2.0.1
2.1.6
2
kubesphere/examples-bookinfo-ratings-v1:1.13.0f1b5bf878196
brace-expansion@1.1.11
1.1.20
2
kutt/kutt:latest:v3.2.6fa3d24a89b04
brace-expansion@2.0.2
2.1.6
2
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
brace-expansion@1.1.11
1.1.20
2
langflowai/langflow:latest79c02794adeb
brace-expansion@5.0.9
5.0.11
2
langgenius/dify-sandbox:0.2.009b7e8705673
brace-expansion@2.0.1
2.1.6
2
library/arangodb:3.11.81e75d74954a4
brace-expansion@2.0.1
2.1.6
2
library/ghost:6.65.090592b712b6b
brace-expansion@5.0.9
5.0.11
2
library/mongo-express:1.0.2:latest1b23d7976f02
brace-expansion@2.0.1
2.1.6
2
library/node:24.21.0-alpine3.239ec4a2e28987
brace-expansion@5.0.7
5.0.11
2
linuxserver/cloud9:latest:version-1.29.245c5fe102ff3
brace-expansion@1.1.4
1.1.20
2
louislam/uptime-kuma:2.5.4917318f9d7be
brace-expansion@1.1.18
1.1.20
2
louislam/uptime-kuma:1.23.1396510915e6be
brace-expansion@1.1.11
1.1.20
2
louislam/uptime-kuma:2.3.29aeb4e51d038
brace-expansion@2.0.2
2.1.6
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
brace-expansion@2.1.2
2.1.6
2
louislam/uptime-kuma:2.5.5c74379ac4509
brace-expansion@1.1.18
1.1.20
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
brace-expansion@1.1.11
1.1.20
2
mesosphere/kommander:6.100.13917e82333a9
brace-expansion@1.1.11
1.1.20
2
migmartri/prerender:latest486aacfd5aa9
brace-expansion@1.1.7
1.1.20
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
brace-expansion@1.1.11
1.1.20
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
brace-expansion@1.1.11
1.1.20
2
mojaloop/reporting:v12.1.0d480a62103d6
brace-expansion@1.1.11
1.1.20
2
mojaloop/reporting-aggregator-svc:v0.0.92635baf23298
brace-expansion@2.0.1
2.1.6
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
brace-expansion@2.0.2
2.1.6
2
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
brace-expansion@1.1.12
1.1.20
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
brace-expansion@2.0.1
2.1.6
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
brace-expansion@1.1.11
1.1.20
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
brace-expansion@1.1.12
1.1.20
2
moreillon/api-proxy:a3e8b41e9e578c9653b6
brace-expansion@2.0.1
2.1.6
2
moreillon/group-manager:v4.9.0d5a0ec8394c0
brace-expansion@1.1.11
1.1.20
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
brace-expansion@1.1.11
1.1.20
2
n8nio/n8n:2.36.714c4285bc303
brace-expansion@2.1.4
2.1.6
2
nodered/node-red:5.0.7:latesta649dd711d55
brace-expansion@5.0.7
5.0.11
2
nousresearch/hermes-agent:v2026.9.24fca358f12efd
brace-expansion@5.0.6
5.0.11
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
brace-expansion@1.1.11
1.1.20
2
outlinewiki/outline:0.69.1d060dcd8f9aa
brace-expansion@1.1.11
1.1.20
2
patrikx3/p3x-redis-ui:latestf19eb45b0694
brace-expansion@5.0.7
5.0.11
2
rajnandan1/kener:3.2.1930407afca731
brace-expansion@1.1.11
1.1.20
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
brace-expansion@1.1.11
1.1.20
2
requarks/wiki:2:latest68f0d1848261
brace-expansion@5.0.4
5.0.11
2

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.