StackRadar

CVE-2026-102278

High

Advisory

Published 28 Sept 2026In the index since 30 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,088
of 17,966 indexed, latest versions
Container images
1,124
deployed by those charts
Fix available
1 of 2
affected packages

brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion

Carried by container images the latest versions of 1,088 of 17,966 indexed charts deploy, on 1,124 images.

Affected packageAffected versionsFixed inImages
brace-expansionnpm1.1.1, 1.1.2, 1.1.4, 1.1.6+23 more1.1.20, 2.1.6, 5.0.111,124
node-brace-expansiondeb1.1.8-1, 1.1.11-1, 2.0.1+~1.1.0-1, 2.0.1+~1.1.0-2no fix listed8
OSV records
DEBIAN-CVE-2026-102278GHSA-qhr7-859c-m2p7UBUNTU-CVE-2026-102278
Trending
Rank 8 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

1,088 by stars
ChartLatestAffected imagesRadar Score
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
brace-expansion@1.1.11
1.1.20

Open the chart page →

13,665
slack-emoji-makersuminhong0.1.01 of 1See more

slack-emoji-maker suminhong 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
brace-expansion@2.0.1
2.1.6

Open the chart page →

1,994
uptime-kumasupporttools2.6.01 of 3See more

uptime-kuma supporttools 2.6.0

1 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
supporttools/uptime-kuma:v2.6f8a49ed65809
brace-expansion@2.0.1
2.1.6

Open the chart page →

4,521
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
brace-expansion@1.1.11
node-brace-expansion@1.1.11-1
1.1.20
no fix listed

Open the chart page →

11,454
swr-cache-proxyswr-cache-proxy0.2.01 of 1See more

swr-cache-proxy swr-cache-proxy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
brace-expansion@2.0.1
2.1.6

Open the chart page →

14,454
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
brace-expansion@1.1.11
1.1.20

Open the chart page →

3,891
stateful-data-generatortalhajuikar-helm-charts0.1.21 of 2See more

stateful-data-generator talhajuikar-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/talhajuikar/stateful-data-generator:v1.1.1dfd7ea7303a2
brace-expansion@1.1.12
1.1.20

Open the chart page →

5,158
trudesktechpreta1.0.01 of 3See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
polonel/trudesk:1.2.60cf6513f6fe3
brace-expansion@2.0.1
2.1.6

Open the chart page →

4,280
tensorzerotensorzero2026.6.01 of 2See more

tensorzero tensorzero 2026.6.0

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
tensorzero/ui:2026.6.0f2563d54724e
brace-expansion@2.0.2
2.1.6

Open the chart page →

4,665
supabaseteochenglim0.1.22 of 13See more

supabase teochenglim 0.1.2

2 of the 13 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
supabase/storage-api:latest5fea789899d4
brace-expansion@2.1.2
2.1.6
supabase/studio:latestfdb56cfa1705
brace-expansion@2.0.2
2.1.6

Open the chart page →

10,026
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
brace-expansion@2.0.1
2.1.6

Open the chart page →

12,501
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
brace-expansion@1.1.11
1.1.20

Open the chart page →

42,516
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
brace-expansion@2.0.1
2.1.6

Open the chart page →

30,893
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
brace-expansion@1.1.11
1.1.20

Open the chart page →

30,449
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
brace-expansion@1.1.11
1.1.20

Open the chart page →

30,951
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
brace-expansion@1.1.11
1.1.20

Open the chart page →

6,194
vehicle-dashboardtest-vehi-dash0.1.03 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
library/node:16.20f77a1aef2da8
brace-expansion@2.0.1
2.1.6
samajh/alprbackend:latestea742b4372ad
brace-expansion@1.1.11
1.1.20
samajh/alprfrontend:latest05ef4fddbb75
brace-expansion@1.1.11
1.1.20

Open the chart page →

21,367
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
brace-expansion@2.0.1
2.1.6

Open the chart page →

2,625
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.42 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

2 of the 5 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
brace-expansion@1.1.11
1.1.20
redis/redisinsight:latestb5e19ee240ab
brace-expansion@2.0.2
2.1.6

Open the chart page →

5,022
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
brace-expansion@1.1.11
1.1.20

Open the chart page →

3,698
thingsboardthingsboardVerified publisher0.1.32 of 12See more

thingsboard thingsboard 0.1.3

2 of the 12 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
thingsboard/tb-js-executor:3.4.113e1eadf8ace
brace-expansion@2.0.1
2.1.6
thingsboard/tb-web-ui:3.4.157f98ed53b3d
brace-expansion@1.1.11
1.1.20

Open the chart page →

26,622
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
brace-expansion@1.1.11
1.1.20

Open the chart page →

2,911
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
denisshav/backend:latest4cc8dc5a4499
brace-expansion@1.1.11
1.1.20

Open the chart page →

6,981
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
joplin/server:latest3f7b852959aa
brace-expansion@2.0.1
2.1.6

Open the chart page →

6,219
saleor-appstrieb-work0.6.03 of 5See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
brace-expansion@2.0.1
2.1.6
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
brace-expansion@2.0.1
2.1.6
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
brace-expansion@2.0.1
2.1.6

Open the chart page →

8,089
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
brace-expansion@1.1.11
1.1.20

Open the chart page →

2,911
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
brace-expansion@1.1.11
1.1.20

Open the chart page →

18,177
altinnendata-apptumogroup0.1.231 of 1See more

altinnendata-app tumogroup 0.1.23

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
sondresjo/altinnendata-app:v1.9.73150a3038fbf
brace-expansion@5.0.9
5.0.11

Open the chart page →

853
nstuning-apptumogroup0.1.221 of 1See more

nstuning-app tumogroup 0.1.22

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
sondresjo/nstuning-app:v1.6.15b7cc8f543551
brace-expansion@5.0.9
5.0.11

Open the chart page →

853
pyttogpanne-apptumogroup0.1.41 of 1See more

pyttogpanne-app tumogroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
sondresjo/pyttogpanne-app:v1.0.3706b0218f7b4
brace-expansion@5.0.9
5.0.11

Open the chart page →

853
sjolystinnovation-apptumogroup0.1.51 of 1See more

sjolystinnovation-app tumogroup 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
sondresjo/sjolystinnovation-app:v1.3.04ce832347953
brace-expansion@5.0.9
5.0.11

Open the chart page →

843
learning-fluentdtungntt0.1.01 of 4See more

learning-fluentd tungntt 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
library/kibana:7.9.1b1bbcaa57738
brace-expansion@1.1.8
1.1.20

Open the chart page →

8,032
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
brace-expansion@5.0.6
5.0.11

Open the chart page →

6,179
evershopunifieVerified publisher1.0.01 of 1See more

evershop unifie 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
evershop/evershop:latestd0823576f91b
brace-expansion@2.0.1
2.1.6

Open the chart page →

1,215
homepageunknowniq1.8.81 of 2See more

homepage unknowniq 1.8.8

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v2.2.0753eeb0cc22a
brace-expansion@2.0.2
2.1.6

Open the chart page →

570
unleash-enterpriseunleash1.0.31 of 1See more

unleash-enterprise unleash 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
brace-expansion@2.0.2
2.1.6

Open the chart page →

2,408
unleash-proxyunleash0.8.121 of 1See more

unleash-proxy unleash 0.8.12

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
unleashorg/unleash-proxy:v1.4.82538f89e2685
brace-expansion@2.0.1
2.1.6

Open the chart page →

1,038
excalidashunxwaresVerified publisher2026.2.51 of 2See more

excalidash unxwares 2026.2.5

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
brace-expansion@2.0.2
2.1.6

Open the chart page →

2,805
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
brace-expansion@1.1.11
1.1.20

Open the chart page →

5,677
uoappuoapp1.1.01 of 1See more

uoapp uoapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
okaforuchena/uo-docker:V1.0.0004e81250f48
brace-expansion@1.1.11
1.1.20

Open the chart page →

1,238
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
brace-expansion@5.0.4
5.0.11

Open the chart page →

4,166
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
vcnngr/pnbackend:latesteaf44ad0ad1f
brace-expansion@2.0.1
2.1.6

Open the chart page →

5,467
devportalveecode-platform-nextVerified publisher0.1.261 of 1See more

devportal veecode-platform-next 0.1.26

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinned28d1bafed0cf
brace-expansion@5.0.5
5.0.11

Open the chart page →

2,041
genievhdirkVerified publisher0.1.31 of 1See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
stanfordoval/almond-server:latest1a63cdccedaf
brace-expansion@1.1.11
1.1.20

Open the chart page →

3,255
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
brace-expansion@1.1.11
1.1.20

Open the chart page →

2,953
skoonervhdirkVerified publisher0.1.41 of 1See more

skooner vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
brace-expansion@1.1.11
1.1.20

Open the chart page →

1,391
tdarrvhdirkVerified publisher5.0.51 of 2See more

tdarr vhdirk 5.0.5

1 of the 2 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
brace-expansion@2.0.1
2.1.6

Open the chart page →

162,705
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
brace-expansion@2.0.1
2.1.6

Open the chart page →

80,662
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
brace-expansion@5.0.4
5.0.11

Open the chart page →

5,052
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-102278.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
brace-expansion@1.1.13
1.1.20

Open the chart page →

2,670

Container images carrying it

1,124 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
brace-expansion@2.0.2
2.1.6
1
ghcr.io/openccu/openccu:3.89.11.202609193cfcb30e1921
brace-expansion@2.0.2
2.1.6
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
brace-expansion@5.0.6
5.0.11
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
brace-expansion@2.0.1
2.1.6
1
ghcr.io/open-telemetry/demo:3.1.0-payment10d6bd20d8a0
brace-expansion@2.1.4
2.1.6
1
ghcr.io/open-telemetry/demo:3.1.0-frontend28358db46206
brace-expansion@2.1.4
2.1.6
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
brace-expansion@2.0.1
2.1.6
1
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
brace-expansion@2.0.1
2.1.6
1
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
brace-expansion@2.0.1
2.1.6
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
brace-expansion@2.0.1
2.1.6
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
brace-expansion@2.0.1
2.1.6
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
brace-expansion@2.0.2
2.1.6
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
brace-expansion@5.0.7
5.0.11
1
ghcr.io/platform-mesh/portal:v0.27.16a7ecd5a0dc2
brace-expansion@5.0.7
5.0.11
1
ghcr.io/radar-base/radar-self-enrolment-ui:0.1.0b9a7cd3cc099
brace-expansion@2.0.2
2.1.6
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
brace-expansion@2.0.1
2.1.6
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
brace-expansion@2.0.1
2.1.6
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
brace-expansion@1.1.11
1.1.20
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.32c1ec86675d4
brace-expansion@5.0.9
5.0.11
1
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
brace-expansion@5.0.7
5.0.11
1
ghcr.io/rybbit-io/rybbit-client:latest9a3bbb2e837a
brace-expansion@5.0.7
5.0.11
1
ghcr.io/sct/overseerr:1.26.1254d16af8f71
brace-expansion@1.1.11
1.1.20
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
brace-expansion@2.0.1
2.1.6
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
brace-expansion@1.1.11
1.1.20
1
ghcr.io/seanmorley15/adventurelog-frontend:v0.13.051ee22428b41
brace-expansion@5.0.6
5.0.11
1
ghcr.io/seerr-team/seerr:v3.5.027602401178d
brace-expansion@1.1.12
1.1.20
1
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
brace-expansion@2.0.2
2.1.6
1
ghcr.io/shuguet/pacman:latesta0ec71732c3c
brace-expansion@5.0.4
5.0.11
1
ghcr.io/solucteam/outscale-s3-explorer:v1.0.09665c3e71889
brace-expansion@2.0.1
2.1.6
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:main06adb21bfdfc
brace-expansion@5.0.9
5.0.11
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
brace-expansion@2.0.1
2.1.6
1
ghcr.io/talhajuikar/stateful-data-generator:v1.1.1dfd7ea7303a2
brace-expansion@1.1.12
1.1.20
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
brace-expansion@5.0.7
5.0.11
1
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
brace-expansion@2.0.1
2.1.6
1
ghcr.io/techno-tim/littlelink-server:latest735a1fcd078b
brace-expansion@2.0.1
2.1.6
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
brace-expansion@2.0.2
2.1.6
1
ghcr.io/theduffman85/crowdsec-web-ui:2026.9.2714d62ccd80c
brace-expansion@5.0.7
5.0.11
1
ghcr.io/thm-mni-ii/fbs-collab:v2.0.1366bc4ec1079
brace-expansion@2.0.2
2.1.6
1
ghcr.io/thm-mni-ii/fbs-qcm-backend:v2.0.12633b7c61fb1
brace-expansion@2.0.1
2.1.6
1
ghcr.io/thm-mni-ii/fbs-qcm-frontend:v2.0.128c98d86ed77
brace-expansion@1.1.11
1.1.20
1
ghcr.io/thotischner/observability-mcp:3.9.11775e1e84d5d1
brace-expansion@5.0.9
5.0.11
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
brace-expansion@2.0.2
2.1.6
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
brace-expansion@2.0.1
2.1.6
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
brace-expansion@2.0.1
2.1.6
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
brace-expansion@2.0.1
2.1.6
1
ghcr.io/umami-software/umami:3.0.328f263fe06f7
brace-expansion@1.1.12
1.1.20
1
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
brace-expansion@2.0.1
2.1.6
1
ghcr.io/umami-software/umami:postgresql-v2.20.173ca19b41745
brace-expansion@2.0.2
2.1.6
1
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
brace-expansion@2.0.2
2.1.6
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
brace-expansion@1.1.11
1.1.20
1

syft 1.42.1 · advisories as of 1 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.