StackRadar

CVE-2026-111181

High

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
668
of 18,232 indexed, latest versions
Container images
676
deployed by those charts
Fix available
1 of 1
affected package

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

Carried by container images the latest versions of 668 of 18,232 indexed charts deploy, on 676 images.

Affected packageAffected versionsFixed inImages
body-parsernpm1.13.3, 1.14.2, 1.16.1, 1.17.2+18 more1.20.9, 2.4.0676
OSV records
GHSA-27r3-jxmh-p828

Charts affected

668 by stars
ChartLatestAffected imagesRadar Score
openclaweasy-openclaw0.1.01 of 1See more

openclaw easy-openclaw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:main7dbff0fe5f53
body-parser@2.3.0
2.4.0

Open the chart page →

2,448
benchmarking-tooleclipse-aeriosVerified publisher1.0.01 of 1See more

benchmarking-tool eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
eclipseaerios/benchmarking-tool:1.0.0a4b4c2e7fe62
body-parser@1.20.3
1.20.9

Open the chart page →

922
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
body-parser@1.20.3
1.20.9

Open the chart page →

2,806
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
body-parser@1.20.6
1.20.9

Open the chart page →

1,658
uptime-kumaegebackVerified publisher2.0.131 of 1See more

uptime-kuma egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
body-parser@1.20.6
1.20.9

Open the chart page →

42,524
backend-charteks-3-tier-app-chart0.1.01 of 1See more

backend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arfath29/3-tier-app-backend:latestee0750b18406
body-parser@1.19.0
1.20.9

Open the chart page →

2,171
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
body-parser@1.19.0
1.20.9

Open the chart page →

4,279
azuriteemberstackVerified publisher1.0.221 of 1See more

azurite emberstack 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
body-parser@2.3.0
2.4.0

Open the chart page →

742
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
body-parser@1.20.1
1.20.9

Open the chart page →

2,884
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.5.71 of 1See more

connector-helm-chart enmeshed-connector 7.5.7

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
body-parser@2.3.0
2.4.0

Open the chart page →

378
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
body-parser@1.19.0
1.20.9

Open the chart page →

32,196
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
body-parser@1.19.0
1.20.9

Open the chart page →

32,145
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
body-parser@1.19.2
1.20.9

Open the chart page →

33,645
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
body-parser@1.20.4
1.20.9

Open the chart page →

2,289
ethstatsethereum-helm-chartsVerified publisher0.1.41 of 1See more

ethstats ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
skylenet/ethstats-server:pow-latestd757cc016198
body-parser@1.20.0
1.20.9

Open the chart page →

1,214
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
body-parser@1.18.3
1.20.9

Open the chart page →

3,106
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
body-parser@1.19.0
1.20.9

Open the chart page →

3,859
multichain-proxyethersphereVerified publisher0.1.01 of 1See more

multichain-proxy ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/multichain-proxy:0.0.261f5419afbcd
body-parser@1.20.3
1.20.9

Open the chart page →

1,140
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
body-parser@1.20.0
1.20.9

Open the chart page →

4,330
my-chartexpress-server0.1.01 of 1See more

my-chart express-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
tawfiq58/express-server:latestc707555f6853
body-parser@1.20.1
1.20.9

Open the chart page →

1,203
fhirsmithfhirsmithVerified publisher0.4.01 of 1See more

fhirsmith fhirsmith 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/healthintersections/fhirsmith:0.10.16f20b060f1c5
body-parser@2.2.2
2.4.0

Open the chart page →

976
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
body-parser@1.20.1
1.20.9

Open the chart page →

4,554
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-user-service:1.049e164a9a439
body-parser@1.20.3
1.20.9

Open the chart page →

10,331
business-api-ecosystemfiware1.2.01 of 4See more

business-api-ecosystem fiware 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
body-parser@1.20.2
1.20.9

Open the chart page →

173,007
consent-managerfiware0.2.01 of 1See more

consent-manager fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
body-parser@1.20.6
1.20.9

Open the chart page →

2,545
fdsc-dashboardfiware0.7.01 of 1See more

fdsc-dashboard fiware 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/seamware/fdsc-dashboard:0.6.63478af70bdc2
body-parser@1.20.5
1.20.9

Open the chart page →

879
iotagent-jsonfiware0.2.01 of 1See more

iotagent-json fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/iotagent-json:3.1.0879b21a0d36d
body-parser@1.20.0
1.20.9

Open the chart page →

1,061
iotagent-ulfiware0.2.01 of 1See more

iotagent-ul fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
body-parser@1.18.3
1.20.9

Open the chart page →

3,860
keyrockfiware0.9.01 of 1See more

keyrock fiware 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
body-parser@1.19.2
1.20.9

Open the chart page →

3,542
onboarding-portalfiware1.5.01 of 1See more

onboarding-portal fiware 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/seamware/onboarding:0.2.2b406475f9f00
body-parser@2.2.2
2.4.0

Open the chart page →

1,909
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:170233f4acb51
body-parser@1.20.3
1.20.9

Open the chart page →

4,656
uptime-kumafmjstudios0.2.21 of 1See more

uptime-kuma fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
body-parser@1.20.2
1.20.9

Open the chart page →

5,551
mod-graphqlfolio-org0.1.301 of 1See more

mod-graphql folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
folioci/mod-graphql:latestf0655a6a08fd
body-parser@1.20.3
1.20.9

Open the chart page →

1,088
uptime-kumafossa1.0.11 of 1See more

uptime-kuma fossa 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/k3rnel-pan1c/uptime-kuma:1.19.3f975fde9329b
body-parser@1.19.2
1.20.9

Open the chart page →

6,824
frinx-frontendfrinx-helm-charts4.1.01 of 2See more

frinx-frontend frinx-helm-charts 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-frontend:6.1.0ac593f5b2e2f
body-parser@1.20.1
1.20.9

Open the chart page →

5,314
frinx-machinefrinx-helm-charts11.0.02 of 26See more

frinx-machine frinx-helm-charts 11.0.0

2 of the 26 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-frontend:7.0.1ab716463b8df
body-parser@1.20.1
1.20.9
frinx/frinx-inventory-server:7.0.16b1992c79e78
body-parser@1.20.2
1.20.9

Open the chart page →

127,767
inventoryfrinx-helm-charts6.0.21 of 4See more

inventory frinx-helm-charts 6.0.2

1 of the 4 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-inventory-server:6.1.086c9ce1f5e31
body-parser@1.20.2
1.20.9

Open the chart page →

5,015
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
body-parser@1.20.1
1.20.9

Open the chart page →

2,265
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
body-parser@1.20.1
1.20.9

Open the chart page →

15,654
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
body-parser@1.19.0
1.20.9

Open the chart page →

6,292
galoy-paygaloymoney0.11.481 of 2See more

galoy-pay galoymoney 0.11.48

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
body-parser@1.20.1
1.20.9

Open the chart page →

2,665
rtlgaloymoney0.4.31 of 2See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
body-parser@1.20.1
1.20.9

Open the chart page →

2,212
galoy-paygaloymoney20.11.481 of 2See more

galoy-pay galoymoney2 0.11.48

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
body-parser@1.20.1
1.20.9

Open the chart page →

2,665
rtlgaloymoney20.4.31 of 2See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
body-parser@1.20.1
1.20.9

Open the chart page →

2,212
game2048game20481.0.01 of 1See more

game2048 game2048 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
letsbootch/argocd-game2048-app:1.0.0288abd32b2b7
body-parser@2.2.0
2.4.0

Open the chart page →

1,088
cryptpadgeek-cookbookVerified publisher0.4.21 of 1See more

cryptpad geek-cookbook 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
promasu/cryptpad:v4.14.1-nginx51d1142b9f95
body-parser@1.18.3
1.20.9

Open the chart page →

1,141
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
body-parser@1.19.0
1.20.9

Open the chart page →

86,239
littlelink-servergeek-cookbookVerified publisher1.4.21 of 1See more

littlelink-server geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
body-parser@1.20.3
1.20.9

Open the chart page →

929
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
body-parser@1.19.0
1.20.9

Open the chart page →

4,237
node-redgeek-cookbookVerified publisher10.3.21 of 1See more

node-red geek-cookbook 10.3.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nodered/node-red:2.2.2e131dcadfe92
body-parser@1.19.1
1.20.9

Open the chart page →

2,229

Container images carrying it

676 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
eclipseaerios/self-orchestrator:1.2.08b123bec5679
body-parser@1.20.3
1.20.9
1
enketo/enketo-express:3.0.4dcad9c2273f6
body-parser@1.19.0
1.20.9
1
epam/ai-dial-admin-frontend:0.22.07bceacad3de2
body-parser@1.20.8
1.20.9
1
epam/ai-dial-chat:1.2.4df205138325d
body-parser@2.3.0
2.4.0
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
body-parser@1.18.2
1.20.9
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
body-parser@1.19.0
1.20.9
1
etherpad/etherpad:latest3d59d633d285
body-parser@2.3.0
2.4.0
1
etherpad/etherpad:3.3.6:latest98d395769b3b
body-parser@2.3.0
2.4.0
1
ethersphere/bzz-token-service:latest7624f11a72ad
body-parser@1.19.0
1.20.9
1
ethersphere/multichain-proxy:0.0.261f5419afbcd
body-parser@1.20.3
1.20.9
1
ethersphere/onboarding-faucet:0.3.0513154aab230
body-parser@1.20.0
1.20.9
1
ethpandaops/ethereumjs:masterfb84b718500f
body-parser@1.20.4
1.20.9
1
evershop/evershop:latest2acdcd7ed59f
body-parser@1.20.8
1.20.9
1
evoapicloud/evolution-api:latest966625532d90
body-parser@1.20.3
1.20.9
1
f3ktech/recaptcha-v3-verifier:1.1.048e78987cf91
body-parser@1.20.4
1.20.9
1
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
body-parser@1.20.1
1.20.9
1
fallenbagel/jellyseerr:latest91edd5620e51
body-parser@1.20.3
1.20.9
1
fallenbagel/jellyseerr:2.2.3a324fa4d81cc
body-parser@1.20.1
1.20.9
1
felipecs8/app-movies-series:v14e51693fcdf5
body-parser@1.20.3
1.20.9
1
felipecs8/landing-page:v1db6d44e325a1
body-parser@1.20.3
1.20.9
1
fiware/api-umbrella:0.18.06e5159d29c3c
body-parser@1.18.3
1.20.9
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
body-parser@1.20.2
1.20.9
1
fiware/idm:8.3.3a1b6ed4ae84f
body-parser@1.19.2
1.20.9
1
fiware/iotagent-json:3.1.0879b21a0d36d
body-parser@1.20.0
1.20.9
1
fiware/iotagent-ul:1.14.0fe11f55a926d
body-parser@1.18.3
1.20.9
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
body-parser@1.18.2
1.20.9
1
foggbh/stocky:latest8b7a2e5ecf4e
body-parser@1.20.4
1.20.9
1
folioci/mod-graphql:latestf0655a6a08fd
body-parser@1.20.3
1.20.9
1
fosrl/pangolin:latest5039d0e64a2e
body-parser@2.3.0
2.4.0
1
fosrl/pangolin:1.13.0c32ad797ab96
body-parser@2.2.1
2.4.0
1
frappe/frappe-socketio:v13.4.12095767a9e82
body-parser@1.19.0
1.20.9
1
frinx/frinx-frontend:7.0.1ab716463b8df
body-parser@1.20.1
1.20.9
1
frinx/frinx-frontend:6.1.0ac593f5b2e2f
body-parser@1.20.1
1.20.9
1
frinx/frinx-inventory-server:7.0.16b1992c79e78
body-parser@1.20.2
1.20.9
1
frinx/frinx-inventory-server:6.1.086c9ce1f5e31
body-parser@1.20.2
1.20.9
1
getwud/wud:8.1.1b1cd01c43839
body-parser@1.20.3
1.20.9
1
ghostfolio/ghostfolio:3.88.0256c524a6116
body-parser@2.2.2
2.4.0
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
body-parser@2.2.2
2.4.0
1
glenndehaan/api-mapper:latest6ff6310683bf
body-parser@1.20.1
1.20.9
1
glenndehaan/contentbridge:latest99b9e4f73848
body-parser@1.20.1
1.20.9
1
glenndehaan/kube-hook:latest0a7116f48bfe
body-parser@1.20.3
1.20.9
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
body-parser@1.19.0
1.20.9
1
gristlabs/grist:0.7.96e71b1914a7e
body-parser@1.18.3
1.20.9
1
growthbook/growthbook:5.1.0c8a124f55dca
body-parser@1.20.6
1.20.9
1
growthbook/growthbook:latestdca716a7bf47
body-parser@1.20.6
1.20.9
1
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
body-parser@1.19.0
1.20.9
1
halkeye/hubot:latest9764d2202130
body-parser@1.19.0
1.20.9
1
hamid2021/nodejs-dockercli:latest429d99890c3c
body-parser@1.20.1
1.20.9
1
hansehe/graphql-gateway:1.0.458e09540afbc
body-parser@1.19.0
1.20.9
1
haohanyang/compass-web:0.1.1e3952b14ae8e
body-parser@1.20.3
1.20.9
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.