StackRadar

CVE-2026-111181

High

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
668
of 18,232 indexed, latest versions
Container images
676
deployed by those charts
Fix available
1 of 1
affected package

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

Carried by container images the latest versions of 668 of 18,232 indexed charts deploy, on 676 images.

Affected packageAffected versionsFixed inImages
body-parsernpm1.13.3, 1.14.2, 1.16.1, 1.17.2+18 more1.20.9, 2.4.0676
OSV records
GHSA-27r3-jxmh-p828

Charts affected

668 by stars
ChartLatestAffected imagesRadar Score
openclaweasy-openclaw0.1.01 of 1See more

openclaw easy-openclaw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:main7dbff0fe5f53
body-parser@2.3.0
2.4.0

Open the chart page →

2,448
benchmarking-tooleclipse-aeriosVerified publisher1.0.01 of 1See more

benchmarking-tool eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
eclipseaerios/benchmarking-tool:1.0.0a4b4c2e7fe62
body-parser@1.20.3
1.20.9

Open the chart page →

922
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
body-parser@1.20.3
1.20.9

Open the chart page →

2,806
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
body-parser@1.20.6
1.20.9

Open the chart page →

1,658
uptime-kumaegebackVerified publisher2.0.131 of 1See more

uptime-kuma egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
body-parser@1.20.6
1.20.9

Open the chart page →

42,524
backend-charteks-3-tier-app-chart0.1.01 of 1See more

backend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arfath29/3-tier-app-backend:latestee0750b18406
body-parser@1.19.0
1.20.9

Open the chart page →

2,171
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
body-parser@1.19.0
1.20.9

Open the chart page →

4,279
azuriteemberstackVerified publisher1.0.221 of 1See more

azurite emberstack 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
body-parser@2.3.0
2.4.0

Open the chart page →

742
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
body-parser@1.20.1
1.20.9

Open the chart page →

2,884
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.5.71 of 1See more

connector-helm-chart enmeshed-connector 7.5.7

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
body-parser@2.3.0
2.4.0

Open the chart page →

378
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
body-parser@1.19.0
1.20.9

Open the chart page →

32,196
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
body-parser@1.19.0
1.20.9

Open the chart page →

32,145
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
body-parser@1.19.2
1.20.9

Open the chart page →

33,645
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
body-parser@1.20.4
1.20.9

Open the chart page →

2,289
ethstatsethereum-helm-chartsVerified publisher0.1.41 of 1See more

ethstats ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
skylenet/ethstats-server:pow-latestd757cc016198
body-parser@1.20.0
1.20.9

Open the chart page →

1,214
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
body-parser@1.18.3
1.20.9

Open the chart page →

3,106
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
body-parser@1.19.0
1.20.9

Open the chart page →

3,859
multichain-proxyethersphereVerified publisher0.1.01 of 1See more

multichain-proxy ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/multichain-proxy:0.0.261f5419afbcd
body-parser@1.20.3
1.20.9

Open the chart page →

1,140
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
body-parser@1.20.0
1.20.9

Open the chart page →

4,330
my-chartexpress-server0.1.01 of 1See more

my-chart express-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
tawfiq58/express-server:latestc707555f6853
body-parser@1.20.1
1.20.9

Open the chart page →

1,203
fhirsmithfhirsmithVerified publisher0.4.01 of 1See more

fhirsmith fhirsmith 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/healthintersections/fhirsmith:0.10.16f20b060f1c5
body-parser@2.2.2
2.4.0

Open the chart page →

976
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
body-parser@1.20.1
1.20.9

Open the chart page →

4,554
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-user-service:1.049e164a9a439
body-parser@1.20.3
1.20.9

Open the chart page →

10,331
business-api-ecosystemfiware1.2.01 of 4See more

business-api-ecosystem fiware 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
body-parser@1.20.2
1.20.9

Open the chart page →

173,007
consent-managerfiware0.2.01 of 1See more

consent-manager fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
body-parser@1.20.6
1.20.9

Open the chart page →

2,545
fdsc-dashboardfiware0.7.01 of 1See more

fdsc-dashboard fiware 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/seamware/fdsc-dashboard:0.6.63478af70bdc2
body-parser@1.20.5
1.20.9

Open the chart page →

879
iotagent-jsonfiware0.2.01 of 1See more

iotagent-json fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/iotagent-json:3.1.0879b21a0d36d
body-parser@1.20.0
1.20.9

Open the chart page →

1,061
iotagent-ulfiware0.2.01 of 1See more

iotagent-ul fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
body-parser@1.18.3
1.20.9

Open the chart page →

3,860
keyrockfiware0.9.01 of 1See more

keyrock fiware 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
body-parser@1.19.2
1.20.9

Open the chart page →

3,542
onboarding-portalfiware1.5.01 of 1See more

onboarding-portal fiware 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/seamware/onboarding:0.2.2b406475f9f00
body-parser@2.2.2
2.4.0

Open the chart page →

1,909
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:170233f4acb51
body-parser@1.20.3
1.20.9

Open the chart page →

4,656
uptime-kumafmjstudios0.2.21 of 1See more

uptime-kuma fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
body-parser@1.20.2
1.20.9

Open the chart page →

5,551
mod-graphqlfolio-org0.1.301 of 1See more

mod-graphql folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
folioci/mod-graphql:latestf0655a6a08fd
body-parser@1.20.3
1.20.9

Open the chart page →

1,088
uptime-kumafossa1.0.11 of 1See more

uptime-kuma fossa 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/k3rnel-pan1c/uptime-kuma:1.19.3f975fde9329b
body-parser@1.19.2
1.20.9

Open the chart page →

6,824
frinx-frontendfrinx-helm-charts4.1.01 of 2See more

frinx-frontend frinx-helm-charts 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-frontend:6.1.0ac593f5b2e2f
body-parser@1.20.1
1.20.9

Open the chart page →

5,314
frinx-machinefrinx-helm-charts11.0.02 of 26See more

frinx-machine frinx-helm-charts 11.0.0

2 of the 26 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-frontend:7.0.1ab716463b8df
body-parser@1.20.1
1.20.9
frinx/frinx-inventory-server:7.0.16b1992c79e78
body-parser@1.20.2
1.20.9

Open the chart page →

127,767
inventoryfrinx-helm-charts6.0.21 of 4See more

inventory frinx-helm-charts 6.0.2

1 of the 4 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-inventory-server:6.1.086c9ce1f5e31
body-parser@1.20.2
1.20.9

Open the chart page →

5,015
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
body-parser@1.20.1
1.20.9

Open the chart page →

2,265
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
body-parser@1.20.1
1.20.9

Open the chart page →

15,654
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
body-parser@1.19.0
1.20.9

Open the chart page →

6,292
galoy-paygaloymoney0.11.481 of 2See more

galoy-pay galoymoney 0.11.48

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
body-parser@1.20.1
1.20.9

Open the chart page →

2,665
rtlgaloymoney0.4.31 of 2See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
body-parser@1.20.1
1.20.9

Open the chart page →

2,212
galoy-paygaloymoney20.11.481 of 2See more

galoy-pay galoymoney2 0.11.48

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
body-parser@1.20.1
1.20.9

Open the chart page →

2,665
rtlgaloymoney20.4.31 of 2See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
body-parser@1.20.1
1.20.9

Open the chart page →

2,212
game2048game20481.0.01 of 1See more

game2048 game2048 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
letsbootch/argocd-game2048-app:1.0.0288abd32b2b7
body-parser@2.2.0
2.4.0

Open the chart page →

1,088
cryptpadgeek-cookbookVerified publisher0.4.21 of 1See more

cryptpad geek-cookbook 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
promasu/cryptpad:v4.14.1-nginx51d1142b9f95
body-parser@1.18.3
1.20.9

Open the chart page →

1,141
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
body-parser@1.19.0
1.20.9

Open the chart page →

86,239
littlelink-servergeek-cookbookVerified publisher1.4.21 of 1See more

littlelink-server geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
body-parser@1.20.3
1.20.9

Open the chart page →

929
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
body-parser@1.19.0
1.20.9

Open the chart page →

4,237
node-redgeek-cookbookVerified publisher10.3.21 of 1See more

node-red geek-cookbook 10.3.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nodered/node-red:2.2.2e131dcadfe92
body-parser@1.19.1
1.20.9

Open the chart page →

2,229

Container images carrying it

676 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
nodered/node-red:5.0.9e085d4a06591
body-parser@1.20.8
1.20.9
2
patrikx3/p3x-redis-ui:latestf19eb45b0694
body-parser@2.3.0
2.4.0
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
body-parser@1.20.1
1.20.9
2
requarks/wiki:2:latestfffff288a52f
body-parser@1.20.8
1.20.9
2
shahanafarooqui/rtl:0.13.3e2195188a451
body-parser@1.20.1
1.20.9
2
siscc/dotstatsuite-sdmx-faceted-search:master15ab85c96cdc
body-parser@2.2.2
2.4.0
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
body-parser@1.19.2
1.20.9
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
body-parser@1.19.0
1.20.9
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
body-parser@1.20.1
1.20.9
2
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
body-parser@1.20.1
1.20.9
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
body-parser@2.3.0
2.4.0
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
body-parser@1.19.2
1.20.9
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
body-parser@2.3.0
2.4.0
2
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
body-parser@1.20.3
1.20.9
2
quay.io/hedgedoc/hedgedoc:1.12.0cd66986a2a49
body-parser@2.3.0
2.4.0
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
body-parser@1.20.0
1.20.9
2
0hlov3/semaphore:v1.0.050f874ec096b
body-parser@1.20.1
1.20.9
1
aaronshaf/dynamodb-admin:latestac41724cd997
body-parser@1.20.5
1.20.9
1
abrar74774/fossflow:master-2b3cee33488a4fcf964
body-parser@2.3.0
2.4.0
1
activepieces/activepieces:0.92.326daa5e1807f
body-parser@1.20.8
1.20.9
1
actualbudget/actual-server:25.3.158fecd9088b7
body-parser@1.20.3
1.20.9
1
adeptiainc/adeptia-automate-mcp-server:1.0.0283001e83739
body-parser@1.20.4
1.20.9
1
adeptiainc/adeptia-automate-observe:1.0.031f295e948e6
body-parser@1.20.4
1.20.9
1
advplyr/audiobookshelf:2.37.2b897c33f0597
body-parser@1.20.1
1.20.9
1
agentarea/agentarea-mcp-base:0.1.1:latest8b80f30570ff
body-parser@2.3.0
2.4.0
1
akeyless/gateway:5.5.30f582fc294a0
body-parser@2.3.0
2.4.0
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
body-parser@1.20.2
1.20.9
1
alazidis/stornx:1.1.1602d4f7f090c
body-parser@2.2.0
2.4.0
1
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
body-parser@1.20.3
1.20.9
1
anoopnair/lifecycle-jira-integration:latestd80c73a6089d
body-parser@1.19.2
1.20.9
1
apimap/developer:v1.3.1406d3858e20c
body-parser@1.20.0
1.20.9
1
apimap/portal:v2.4.0041a4790c65c
body-parser@1.20.0
1.20.9
1
arbuzov/claude-code-api:0.1.02d7dd8070610
body-parser@1.20.4
1.20.9
1
arfath29/3-tier-app-backend:latestee0750b18406
body-parser@1.19.0
1.20.9
1
arfath29/3-tier-app-frontend:latest384b3e377f47
body-parser@1.19.0
1.20.9
1
arturisimo/server-urjc:v1.0d8dc4430531e
body-parser@1.19.2
1.20.9
1
assistiot/dlt_api:2.1.0c8a170683be7
body-parser@1.20.1
1.20.9
1
assistiot/fl_orchestrator:api-latest7473d77448e1
body-parser@1.20.2
1.20.9
1
assistiot/monitoring_notifying:2.0.068324d0fa5bb
body-parser@1.20.1
1.20.9
1
assistiot/multi-link_client:latestcf048365d042
body-parser@1.20.1
1.20.9
1
assistiot/multi-link_server:latestf38c76a4c960
body-parser@1.20.1
1.20.9
1
assistiot/open_api_frontend:1.0.1f11d82defc70
body-parser@1.20.1
1.20.9
1
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
body-parser@1.20.0
1.20.9
1
assistiot/smart-orchestrator_enabler:latest89f37e88c871
body-parser@1.20.0
1.20.9
1
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
body-parser@1.20.0
1.20.9
1
automatischio/automatisch:0.15.03bace7a12d5f
body-parser@1.20.2
1.20.9
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
body-parser@1.19.0
1.20.9
1
belirta/beli-docker:v1.0.0f65ad0e23b4d
body-parser@1.20.1
1.20.9
1
betterdb/monitor:0.51.1-no-aic4910692b3fc
body-parser@2.3.0
2.4.0
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
body-parser@1.20.3
1.20.9
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.