StackRadar

CVE-2026-111181

High

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
668
of 18,232 indexed, latest versions
Container images
676
deployed by those charts
Fix available
1 of 1
affected package

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

Carried by container images the latest versions of 668 of 18,232 indexed charts deploy, on 676 images.

Affected packageAffected versionsFixed inImages
body-parsernpm1.13.3, 1.14.2, 1.16.1, 1.17.2+18 more1.20.9, 2.4.0676
OSV records
GHSA-27r3-jxmh-p828

Charts affected

668 by stars
ChartLatestAffected imagesRadar Score
openclaweasy-openclaw0.1.01 of 1See more

openclaw easy-openclaw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:main7dbff0fe5f53
body-parser@2.3.0
2.4.0

Open the chart page →

2,448
benchmarking-tooleclipse-aeriosVerified publisher1.0.01 of 1See more

benchmarking-tool eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
eclipseaerios/benchmarking-tool:1.0.0a4b4c2e7fe62
body-parser@1.20.3
1.20.9

Open the chart page →

922
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
body-parser@1.20.3
1.20.9

Open the chart page →

2,806
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
body-parser@1.20.6
1.20.9

Open the chart page →

1,658
uptime-kumaegebackVerified publisher2.0.131 of 1See more

uptime-kuma egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
body-parser@1.20.6
1.20.9

Open the chart page →

42,524
backend-charteks-3-tier-app-chart0.1.01 of 1See more

backend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arfath29/3-tier-app-backend:latestee0750b18406
body-parser@1.19.0
1.20.9

Open the chart page →

2,171
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
body-parser@1.19.0
1.20.9

Open the chart page →

4,279
azuriteemberstackVerified publisher1.0.221 of 1See more

azurite emberstack 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
body-parser@2.3.0
2.4.0

Open the chart page →

742
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
body-parser@1.20.1
1.20.9

Open the chart page →

2,884
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.5.71 of 1See more

connector-helm-chart enmeshed-connector 7.5.7

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
body-parser@2.3.0
2.4.0

Open the chart page →

378
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
body-parser@1.19.0
1.20.9

Open the chart page →

32,196
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
body-parser@1.19.0
1.20.9

Open the chart page →

32,145
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
body-parser@1.19.2
1.20.9

Open the chart page →

33,645
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
body-parser@1.20.4
1.20.9

Open the chart page →

2,289
ethstatsethereum-helm-chartsVerified publisher0.1.41 of 1See more

ethstats ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
skylenet/ethstats-server:pow-latestd757cc016198
body-parser@1.20.0
1.20.9

Open the chart page →

1,214
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
body-parser@1.18.3
1.20.9

Open the chart page →

3,106
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
body-parser@1.19.0
1.20.9

Open the chart page →

3,859
multichain-proxyethersphereVerified publisher0.1.01 of 1See more

multichain-proxy ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/multichain-proxy:0.0.261f5419afbcd
body-parser@1.20.3
1.20.9

Open the chart page →

1,140
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
body-parser@1.20.0
1.20.9

Open the chart page →

4,330
my-chartexpress-server0.1.01 of 1See more

my-chart express-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
tawfiq58/express-server:latestc707555f6853
body-parser@1.20.1
1.20.9

Open the chart page →

1,203
fhirsmithfhirsmithVerified publisher0.4.01 of 1See more

fhirsmith fhirsmith 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/healthintersections/fhirsmith:0.10.16f20b060f1c5
body-parser@2.2.2
2.4.0

Open the chart page →

976
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
body-parser@1.20.1
1.20.9

Open the chart page →

4,554
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-user-service:1.049e164a9a439
body-parser@1.20.3
1.20.9

Open the chart page →

10,331
business-api-ecosystemfiware1.2.01 of 4See more

business-api-ecosystem fiware 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
body-parser@1.20.2
1.20.9

Open the chart page →

173,007
consent-managerfiware0.2.01 of 1See more

consent-manager fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
body-parser@1.20.6
1.20.9

Open the chart page →

2,545
fdsc-dashboardfiware0.7.01 of 1See more

fdsc-dashboard fiware 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/seamware/fdsc-dashboard:0.6.63478af70bdc2
body-parser@1.20.5
1.20.9

Open the chart page →

879
iotagent-jsonfiware0.2.01 of 1See more

iotagent-json fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/iotagent-json:3.1.0879b21a0d36d
body-parser@1.20.0
1.20.9

Open the chart page →

1,061
iotagent-ulfiware0.2.01 of 1See more

iotagent-ul fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
body-parser@1.18.3
1.20.9

Open the chart page →

3,860
keyrockfiware0.9.01 of 1See more

keyrock fiware 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
body-parser@1.19.2
1.20.9

Open the chart page →

3,542
onboarding-portalfiware1.5.01 of 1See more

onboarding-portal fiware 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/seamware/onboarding:0.2.2b406475f9f00
body-parser@2.2.2
2.4.0

Open the chart page →

1,909
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:170233f4acb51
body-parser@1.20.3
1.20.9

Open the chart page →

4,656
uptime-kumafmjstudios0.2.21 of 1See more

uptime-kuma fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
body-parser@1.20.2
1.20.9

Open the chart page →

5,551
mod-graphqlfolio-org0.1.301 of 1See more

mod-graphql folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
folioci/mod-graphql:latestf0655a6a08fd
body-parser@1.20.3
1.20.9

Open the chart page →

1,088
uptime-kumafossa1.0.11 of 1See more

uptime-kuma fossa 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/k3rnel-pan1c/uptime-kuma:1.19.3f975fde9329b
body-parser@1.19.2
1.20.9

Open the chart page →

6,824
frinx-frontendfrinx-helm-charts4.1.01 of 2See more

frinx-frontend frinx-helm-charts 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-frontend:6.1.0ac593f5b2e2f
body-parser@1.20.1
1.20.9

Open the chart page →

5,314
frinx-machinefrinx-helm-charts11.0.02 of 26See more

frinx-machine frinx-helm-charts 11.0.0

2 of the 26 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-frontend:7.0.1ab716463b8df
body-parser@1.20.1
1.20.9
frinx/frinx-inventory-server:7.0.16b1992c79e78
body-parser@1.20.2
1.20.9

Open the chart page →

127,767
inventoryfrinx-helm-charts6.0.21 of 4See more

inventory frinx-helm-charts 6.0.2

1 of the 4 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-inventory-server:6.1.086c9ce1f5e31
body-parser@1.20.2
1.20.9

Open the chart page →

5,015
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
body-parser@1.20.1
1.20.9

Open the chart page →

2,265
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
body-parser@1.20.1
1.20.9

Open the chart page →

15,654
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
body-parser@1.19.0
1.20.9

Open the chart page →

6,292
galoy-paygaloymoney0.11.481 of 2See more

galoy-pay galoymoney 0.11.48

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
body-parser@1.20.1
1.20.9

Open the chart page →

2,665
rtlgaloymoney0.4.31 of 2See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
body-parser@1.20.1
1.20.9

Open the chart page →

2,212
galoy-paygaloymoney20.11.481 of 2See more

galoy-pay galoymoney2 0.11.48

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
body-parser@1.20.1
1.20.9

Open the chart page →

2,665
rtlgaloymoney20.4.31 of 2See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
body-parser@1.20.1
1.20.9

Open the chart page →

2,212
game2048game20481.0.01 of 1See more

game2048 game2048 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
letsbootch/argocd-game2048-app:1.0.0288abd32b2b7
body-parser@2.2.0
2.4.0

Open the chart page →

1,088
cryptpadgeek-cookbookVerified publisher0.4.21 of 1See more

cryptpad geek-cookbook 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
promasu/cryptpad:v4.14.1-nginx51d1142b9f95
body-parser@1.18.3
1.20.9

Open the chart page →

1,141
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
body-parser@1.19.0
1.20.9

Open the chart page →

86,239
littlelink-servergeek-cookbookVerified publisher1.4.21 of 1See more

littlelink-server geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
body-parser@1.20.3
1.20.9

Open the chart page →

929
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
body-parser@1.19.0
1.20.9

Open the chart page →

4,237
node-redgeek-cookbookVerified publisher10.3.21 of 1See more

node-red geek-cookbook 10.3.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nodered/node-red:2.2.2e131dcadfe92
body-parser@1.19.1
1.20.9

Open the chart page →

2,229

Container images carrying it

676 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bicarus/http-https-echo:2785dd6a7e805e
body-parser@1.20.0
1.20.9
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
body-parser@1.20.1
1.20.9
1
bkimminich/juice-shop:v20.2.08739101ade29
body-parser@1.20.6
1.20.9
1
bluerange/bluerange-mosquitto:2690a4e5b92cc6
body-parser@1.20.6
1.20.9
1
bnjbvr/kresus:0.22.137e216b182c8
body-parser@1.20.3
1.20.9
1
bnwokoye/nodejswebapp:latest74de7dc7ebfb
body-parser@1.20.1
1.20.9
1
bpatrik/pigallery2:1.9.0-debian-buster21fbaa5fae61
body-parser@1.19.0
1.20.9
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
body-parser@1.19.0
1.20.9
1
budibase/apps:3.41.344fe6feab985
body-parser@2.2.2
2.4.0
1
carbonetes/carbonetes-analyzer:1.0.31b9b93c9a37f
body-parser@1.19.0
1.20.9
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
body-parser@1.20.3
1.20.9
1
catalysm/csmm:lateste8e3d06f1d70
body-parser@1.18.2
1.20.9
1
ccjacobs14/amazon:59a9b14a6f09e
body-parser@1.20.1
1.20.9
1
chandanteekinavar/findery-market-user-service:1.049e164a9a439
body-parser@1.20.3
1.20.9
1
chocobozzz/peertube:v8.1.5052712130691
body-parser@1.20.4
1.20.9
1
christianhuth/node-hostname:1.0.1c07f414a3e4b
body-parser@1.18.3
1.20.9
1
cnieg/maildev:v1.1.998ee05668915
body-parser@1.19.0
1.20.9
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
body-parser@1.20.1
1.20.9
1
codercom/code-server:4.11.0-debian1e2cc688008e
body-parser@1.19.0
1.20.9
1
codercom/code-server:3.10.247605610ad8d
body-parser@1.19.0
1.20.9
1
codetogether/codetogether:latest4348c8a38752
body-parser@1.20.2
1.20.9
1
codiacimages/codiac-cluster-agent:1.0.380cd44ca7a7ee
body-parser@2.2.2
2.4.0
1
coldatom/containers-security-api:latesteae9e82da080
body-parser@1.20.1
1.20.9
1
coldatom/containers-security-front:latest7c2fbbb41bcf
body-parser@1.20.1
1.20.9
1
conduction/conduction-ui-app:devd591f5e6f2a9
body-parser@1.19.0
1.20.9
1
countly/api:25.05.4f4cc7447c4f5
body-parser@1.20.2
1.20.9
1
countly/countly-server:25.05.4e3c238248f99
body-parser@1.20.2
1.20.9
1
countly/frontend:25.05.42acbc11499b6
body-parser@1.20.2
1.20.9
1
cryptexlabs/authf:0.12.11189c07411d7c
body-parser@1.20.0
1.20.9
1
cyfershepard/jellystat:1.1.12e61c759ec706
body-parser@1.20.5
1.20.9
1
dacinfomotion/h2p:latest68fa393b472c
body-parser@1.20.2
1.20.9
1
danny1dockerhub/nodejswebapp:lateste434683fcc89
body-parser@1.20.1
1.20.9
1
datarhei/restreamer:0.6.4655e12f9eeed
body-parser@1.19.0
1.20.9
1
davdiv/musicociel:deva85f99be882c
body-parser@1.20.1
1.20.9
1
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
body-parser@1.19.0
1.20.9
1
decayofmind/hubot:3.3.21e18e92fe694
body-parser@1.19.0
1.20.9
1
decisionrules/business-intelligence:latest7c410e0c1d7b
body-parser@1.20.8
1.20.9
1
decisionrules/server:latestbb3a93224b5a
body-parser@2.3.0
2.4.0
1
defactops/defactops-backend:1.0.2307b663c0092a
body-parser@1.20.1
1.20.9
1
denisshav/backend:latest4cc8dc5a4499
body-parser@1.19.0
1.20.9
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
body-parser@1.20.2
1.20.9
1
devkrishan001/backend:latestf1c3acadeabe
body-parser@2.2.2
2.4.0
1
devravinder/node-express-app:1.0.05325a96967b5
body-parser@1.20.3
1.20.9
1
devspacecloud/ui:0.3.3deef55ff29a7
body-parser@1.19.0
1.20.9
1
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
body-parser@1.20.1
1.20.9
1
directus/directus:12.0.29c8470ea465c
body-parser@1.20.3
1.20.9
1
directus/directus:11.1.0e3c8bb975350
body-parser@1.20.2
1.20.9
1
docmost/docmost:0.96.0b56947fcfd08
body-parser@2.3.0
2.4.0
1
eameti/node-app:latestf36642affa86
body-parser@1.20.2
1.20.9
1
eclipseaerios/benchmarking-tool:1.0.0a4b4c2e7fe62
body-parser@1.20.3
1.20.9
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.