StackRadar

CVE-2026-111181

High

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
668
of 18,232 indexed, latest versions
Container images
676
deployed by those charts
Fix available
1 of 1
affected package

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

Carried by container images the latest versions of 668 of 18,232 indexed charts deploy, on 676 images.

Affected packageAffected versionsFixed inImages
body-parsernpm1.13.3, 1.14.2, 1.16.1, 1.17.2+18 more1.20.9, 2.4.0676
OSV records
GHSA-27r3-jxmh-p828

Charts affected

668 by stars
ChartLatestAffected imagesRadar Score
openclaweasy-openclaw0.1.01 of 1See more

openclaw easy-openclaw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:main7dbff0fe5f53
body-parser@2.3.0
2.4.0

Open the chart page →

2,448
benchmarking-tooleclipse-aeriosVerified publisher1.0.01 of 1See more

benchmarking-tool eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
eclipseaerios/benchmarking-tool:1.0.0a4b4c2e7fe62
body-parser@1.20.3
1.20.9

Open the chart page →

922
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
body-parser@1.20.3
1.20.9

Open the chart page →

2,806
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
body-parser@1.20.6
1.20.9

Open the chart page →

1,658
uptime-kumaegebackVerified publisher2.0.131 of 1See more

uptime-kuma egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
body-parser@1.20.6
1.20.9

Open the chart page →

42,524
backend-charteks-3-tier-app-chart0.1.01 of 1See more

backend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arfath29/3-tier-app-backend:latestee0750b18406
body-parser@1.19.0
1.20.9

Open the chart page →

2,171
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
body-parser@1.19.0
1.20.9

Open the chart page →

4,279
azuriteemberstackVerified publisher1.0.221 of 1See more

azurite emberstack 1.0.22

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
body-parser@2.3.0
2.4.0

Open the chart page →

742
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
body-parser@1.20.1
1.20.9

Open the chart page →

2,884
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.5.71 of 1See more

connector-helm-chart enmeshed-connector 7.5.7

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.5.7c18dcfb81d12
body-parser@2.3.0
2.4.0

Open the chart page →

378
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
body-parser@1.19.0
1.20.9

Open the chart page →

32,196
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
body-parser@1.19.0
1.20.9

Open the chart page →

32,145
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
body-parser@1.19.2
1.20.9

Open the chart page →

33,645
hedgedocernail-hedgedoc5.0.01 of 1See more

hedgedoc ernail-hedgedoc 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.10.8abdb6b08815d
body-parser@1.20.4
1.20.9

Open the chart page →

2,289
ethstatsethereum-helm-chartsVerified publisher0.1.41 of 1See more

ethstats ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
skylenet/ethstats-server:pow-latestd757cc016198
body-parser@1.20.0
1.20.9

Open the chart page →

1,214
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
body-parser@1.18.3
1.20.9

Open the chart page →

3,106
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
body-parser@1.19.0
1.20.9

Open the chart page →

3,859
multichain-proxyethersphereVerified publisher0.1.01 of 1See more

multichain-proxy ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/multichain-proxy:0.0.261f5419afbcd
body-parser@1.20.3
1.20.9

Open the chart page →

1,140
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
body-parser@1.20.0
1.20.9

Open the chart page →

4,330
my-chartexpress-server0.1.01 of 1See more

my-chart express-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
tawfiq58/express-server:latestc707555f6853
body-parser@1.20.1
1.20.9

Open the chart page →

1,203
fhirsmithfhirsmithVerified publisher0.4.01 of 1See more

fhirsmith fhirsmith 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/healthintersections/fhirsmith:0.10.16f20b060f1c5
body-parser@2.2.2
2.4.0

Open the chart page →

976
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
body-parser@1.20.1
1.20.9

Open the chart page →

4,554
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-user-service:1.049e164a9a439
body-parser@1.20.3
1.20.9

Open the chart page →

10,331
business-api-ecosystemfiware1.2.01 of 4See more

business-api-ecosystem fiware 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
body-parser@1.20.2
1.20.9

Open the chart page →

173,007
consent-managerfiware0.2.01 of 1See more

consent-manager fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
body-parser@1.20.6
1.20.9

Open the chart page →

2,545
fdsc-dashboardfiware0.7.01 of 1See more

fdsc-dashboard fiware 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/seamware/fdsc-dashboard:0.6.63478af70bdc2
body-parser@1.20.5
1.20.9

Open the chart page →

879
iotagent-jsonfiware0.2.01 of 1See more

iotagent-json fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/iotagent-json:3.1.0879b21a0d36d
body-parser@1.20.0
1.20.9

Open the chart page →

1,061
iotagent-ulfiware0.2.01 of 1See more

iotagent-ul fiware 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/iotagent-ul:1.14.0fe11f55a926d
body-parser@1.18.3
1.20.9

Open the chart page →

3,860
keyrockfiware0.9.01 of 1See more

keyrock fiware 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
body-parser@1.19.2
1.20.9

Open the chart page →

3,542
onboarding-portalfiware1.5.01 of 1See more

onboarding-portal fiware 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/seamware/onboarding:0.2.2b406475f9f00
body-parser@2.2.2
2.4.0

Open the chart page →

1,909
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:170233f4acb51
body-parser@1.20.3
1.20.9

Open the chart page →

4,656
uptime-kumafmjstudios0.2.21 of 1See more

uptime-kuma fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
body-parser@1.20.2
1.20.9

Open the chart page →

5,551
mod-graphqlfolio-org0.1.301 of 1See more

mod-graphql folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
folioci/mod-graphql:latestf0655a6a08fd
body-parser@1.20.3
1.20.9

Open the chart page →

1,088
uptime-kumafossa1.0.11 of 1See more

uptime-kuma fossa 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/k3rnel-pan1c/uptime-kuma:1.19.3f975fde9329b
body-parser@1.19.2
1.20.9

Open the chart page →

6,824
frinx-frontendfrinx-helm-charts4.1.01 of 2See more

frinx-frontend frinx-helm-charts 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-frontend:6.1.0ac593f5b2e2f
body-parser@1.20.1
1.20.9

Open the chart page →

5,314
frinx-machinefrinx-helm-charts11.0.02 of 26See more

frinx-machine frinx-helm-charts 11.0.0

2 of the 26 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-frontend:7.0.1ab716463b8df
body-parser@1.20.1
1.20.9
frinx/frinx-inventory-server:7.0.16b1992c79e78
body-parser@1.20.2
1.20.9

Open the chart page →

127,767
inventoryfrinx-helm-charts6.0.21 of 4See more

inventory frinx-helm-charts 6.0.2

1 of the 4 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frinx/frinx-inventory-server:6.1.086c9ce1f5e31
body-parser@1.20.2
1.20.9

Open the chart page →

5,015
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
body-parser@1.20.1
1.20.9

Open the chart page →

2,265
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
body-parser@1.20.1
1.20.9

Open the chart page →

15,654
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
body-parser@1.19.0
1.20.9

Open the chart page →

6,292
galoy-paygaloymoney0.11.481 of 2See more

galoy-pay galoymoney 0.11.48

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
body-parser@1.20.1
1.20.9

Open the chart page →

2,665
rtlgaloymoney0.4.31 of 2See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
body-parser@1.20.1
1.20.9

Open the chart page →

2,212
galoy-paygaloymoney20.11.481 of 2See more

galoy-pay galoymoney2 0.11.48

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
body-parser@1.20.1
1.20.9

Open the chart page →

2,665
rtlgaloymoney20.4.31 of 2See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
body-parser@1.20.1
1.20.9

Open the chart page →

2,212
game2048game20481.0.01 of 1See more

game2048 game2048 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
letsbootch/argocd-game2048-app:1.0.0288abd32b2b7
body-parser@2.2.0
2.4.0

Open the chart page →

1,088
cryptpadgeek-cookbookVerified publisher0.4.21 of 1See more

cryptpad geek-cookbook 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
promasu/cryptpad:v4.14.1-nginx51d1142b9f95
body-parser@1.18.3
1.20.9

Open the chart page →

1,141
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
body-parser@1.19.0
1.20.9

Open the chart page →

86,239
littlelink-servergeek-cookbookVerified publisher1.4.21 of 1See more

littlelink-server geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
body-parser@1.20.3
1.20.9

Open the chart page →

929
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
body-parser@1.19.0
1.20.9

Open the chart page →

4,237
node-redgeek-cookbookVerified publisher10.3.21 of 1See more

node-red geek-cookbook 10.3.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nodered/node-red:2.2.2e131dcadfe92
body-parser@1.19.1
1.20.9

Open the chart page →

2,229

Container images carrying it

676 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
frankescobar/allure-docker-service-ui:7.0.3:latest4ebd8b4ef340
body-parser@1.19.0
1.20.9
5
kodekloud/examplevotingapp_result:v1e510023fdf38
body-parser@1.20.1
1.20.9
4
oscarsotosanchez/server:v1.06e2e1279126b
body-parser@1.19.0
1.20.9
4
redis/redisinsight:3.8:latestb5e19ee240ab
body-parser@2.2.1
2.4.0
4
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
body-parser@1.20.1
1.20.9
4
assistiot/dlt_api:2.0.0e36a8922fa0c
body-parser@1.20.1
1.20.9
3
decisionrules/server:latest6f6d024a87b8
body-parser@1.20.8
1.20.9
3
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
body-parser@1.19.0
1.20.9
3
pantsel/konga:latestc8172b75607d
body-parser@1.14.2
1.20.9
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
body-parser@1.20.1
1.20.9
3
verdaccio/verdaccio:6.10.7d394c36d62a6
body-parser@1.20.8
1.20.9
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
body-parser@1.19.0
1.20.9
3
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
body-parser@2.2.2
2.4.0
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
body-parser@1.20.4
1.20.9
3
actualbudget/actual-server:26.10.024645e971da6
body-parser@2.2.1
2.4.0
2
agoldis/sorry-cypress-api:2.5.11afaa5a84051d
body-parser@1.20.0
1.20.9
2
agoldis/sorry-cypress-director:2.5.1110228ecd353b
body-parser@1.20.0
1.20.9
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
body-parser@1.19.0
1.20.9
2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
body-parser@1.19.0
1.20.9
2
governify/assets-manager:v1.4.12987672448c7
body-parser@1.19.0
1.20.9
2
governify/director:v1.4.0608c6940bb98
body-parser@1.19.0
1.20.9
2
governify/registry:v3.4.0d3f37f4f8168
body-parser@1.19.0
1.20.9
2
governify/render:v2.2.0daeca1ce28e6
body-parser@1.19.0
1.20.9
2
governify/reporter:v2.2.038595913458f
body-parser@1.18.2
1.20.9
2
gradiant/open5gs-webui:2.7.5fbd10c017541
body-parser@1.20.1
1.20.9
2
hookiesolutions/webhookie:latest0629694246ba
body-parser@1.19.0
1.20.9
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
body-parser@1.20.3
1.20.9
2
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
body-parser@1.19.1
1.20.9
2
infisical/infisical:latest:v0.167.0dbc5be2079b6
body-parser@1.20.6
1.20.9
2
krtk6160/galoy-nostrcc82a694f818
body-parser@1.20.1
1.20.9
2
kutt/kutt:latest:v3.2.6fa3d24a89b04
body-parser@1.20.5
1.20.9
2
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
body-parser@1.20.1
1.20.9
2
library/ghost:6.71.000032f157262
body-parser@1.20.8
1.20.9
2
library/mongo-express:1.0.2:latest1b23d7976f02
body-parser@1.20.1
1.20.9
2
louislam/uptime-kuma:1.23.1396510915e6be
body-parser@1.20.2
1.20.9
2
louislam/uptime-kuma:2.5.69912da7d7d9b
body-parser@1.20.8
1.20.9
2
louislam/uptime-kuma:2.3.29aeb4e51d038
body-parser@1.20.5
1.20.9
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
body-parser@1.19.0
1.20.9
2
mesosphere/kommander:6.100.13917e82333a9
body-parser@1.19.0
1.20.9
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
body-parser@1.19.0
1.20.9
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
body-parser@1.19.0
1.20.9
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
body-parser@1.20.3
1.20.9
2
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
body-parser@1.20.1
1.20.9
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
body-parser@1.20.3
1.20.9
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
body-parser@1.20.1
1.20.9
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
body-parser@1.20.3
1.20.9
2
moreillon/api-proxy:a3e8b41e9e578c9653b6
body-parser@1.19.0
1.20.9
2
moreillon/group-manager:v4.9.0d5a0ec8394c0
body-parser@1.20.1
1.20.9
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
body-parser@1.20.1
1.20.9
2
n8nio/n8n:2.36.714c4285bc303
body-parser@2.3.0
2.4.0
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.