StackRadar

CVE-2026-111181

High

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
668
of 18,232 indexed, latest versions
Container images
676
deployed by those charts
Fix available
1 of 1
affected package

body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body

Carried by container images the latest versions of 668 of 18,232 indexed charts deploy, on 676 images.

Affected packageAffected versionsFixed inImages
body-parsernpm1.13.3, 1.14.2, 1.16.1, 1.17.2+18 more1.20.9, 2.4.0676
OSV records
GHSA-27r3-jxmh-p828

Charts affected

668 by stars
ChartLatestAffected imagesRadar Score
event-servicekrateo1.1.61 of 1See more

event-service krateo 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/event-service:1.1.671fd074020f4
body-parser@1.20.1
1.20.9

Open the chart page →

5,398
git-servicekrateo1.0.131 of 1See more

git-service krateo 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/git-service:1.0.13c22f183fedf0
body-parser@1.20.0
1.20.9

Open the chart page →

6,365
keptn-servicekrateo1.0.121 of 1See more

keptn-service krateo 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/keptn-service:1.0.12f9fef2435636
body-parser@1.20.0
1.20.9

Open the chart page →

5,505
keptn-service-insielkrateo0.1.31 of 1See more

keptn-service-insiel krateo 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/keptn-service-insiel:0.1.3c1d475bb7f06
body-parser@1.20.0
1.20.9

Open the chart page →

5,304
krateo-remote-clientkrateo0.4.161 of 1See more

krateo-remote-client krateo 0.4.16

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/krateo-remote-client:0.4.167ccd4382f3fa
body-parser@1.20.1
1.20.9

Open the chart page →

5,579
kubernetes-servicekrateo1.1.11 of 1See more

kubernetes-service krateo 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kubernetes-service:1.1.1974fbc0d93ed
body-parser@1.20.0
1.20.9

Open the chart page →

5,337
log-servicekrateo1.0.01 of 1See more

log-service krateo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/log-service:1.0.0b431a8154be0
body-parser@1.19.2
1.20.9

Open the chart page →

5,709
notification-servicekrateo1.1.61 of 1See more

notification-service krateo 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/notification-service:1.1.6f9eeac1d7e47
body-parser@1.20.0
1.20.9

Open the chart page →

5,441
pipeline-servicekrateo1.1.21 of 1See more

pipeline-service krateo 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/pipeline-service:1.1.25e6ad7395921
body-parser@1.20.0
1.20.9

Open the chart page →

4,808
provider-servicekrateo1.0.81 of 1See more

provider-service krateo 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/provider-service:1.0.8014ed41cb6e5
body-parser@1.20.0
1.20.9

Open the chart page →

5,280
secret-servicekrateo1.1.41 of 1See more

secret-service krateo 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/secret-service:1.1.4292bd05fb781
body-parser@1.20.0
1.20.9

Open the chart page →

5,267
service-deploymentkrateo0.1.61 of 1See more

service-deployment krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/service-deployment:0.1.541fb833f36ee
body-parser@1.20.1
1.20.9

Open the chart page →

5,110
template-servicekrateo1.2.131 of 1See more

template-service krateo 1.2.13

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/template-service:1.2.139f82e7cb2348
body-parser@1.20.0
1.20.9

Open the chart page →

6,694
terminal-clientkrateo0.1.31 of 1See more

terminal-client krateo 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
body-parser@1.20.1
1.20.9

Open the chart page →

74,432
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
body-parser@1.20.2
1.20.9

Open the chart page →

232,993
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.11.0d0cd3d868aca
body-parser@1.19.0
1.20.9

Open the chart page →

6,118
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
body-parser@1.19.0
1.20.9

Open the chart page →

3,625
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
body-parser@1.19.1
1.20.9

Open the chart page →

4,505
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
body-parser@2.2.1
2.4.0

Open the chart page →

3,968
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
body-parser@1.20.0
1.20.9

Open the chart page →

6,790
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
body-parser@1.20.1
1.20.9

Open the chart page →

2,291
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
body-parser@1.20.0
1.20.9

Open the chart page →

20,045
gptchat-api-feishubotkubegemsapp0.1.11 of 3See more

gptchat-api-feishubot kubegemsapp 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
kubegems/chatgpt-api:latestf3c492a938ad
body-parser@1.20.1
1.20.9

Open the chart page →

12,075
ghostkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 2See more

ghost kubernetes-homelab-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
library/ghost:6.71.0-alpine8e07c5ec63d9
body-parser@1.20.8
1.20.9

Open the chart page →

2,157
seerrkubernetes-homelab-helm-chartsVerified publisher0.3.01 of 1See more

seerr kubernetes-homelab-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.5.027602401178d
body-parser@2.2.2
2.4.0

Open the chart page →

2,472
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.3.01 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
body-parser@1.20.8
1.20.9

Open the chart page →

6,833
kube-mailkubernetes-replicator0.11.11 of 3See more

kube-mail kubernetes-replicator 0.11.1

1 of the 3 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-mail:latest04f1099241fc
body-parser@1.20.3
1.20.9

Open the chart page →

2,945
kubevious-agentkubevious1.0.41 of 1See more

kubevious-agent kubevious 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
kubevious/parser:1.0.151acf1a1f0b47
body-parser@1.19.0
1.20.9

Open the chart page →

2,068
workload-operatorkubevious0.0.31 of 1See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
kubevious/workload-operator:1.0.20b0f4c507eb6
body-parser@1.20.1
1.20.9

Open the chart page →

2,150
landing-pagelanding-pageVerified publisher0.1.01 of 1See more

landing-page landing-page 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
felipecs8/landing-page:v1db6d44e325a1
body-parser@1.20.3
1.20.9

Open the chart page →

1,276
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest91edd5620e51
body-parser@1.20.3
1.20.9

Open the chart page →

3,247
stremiolbenicio-communityVerified publisher0.1.21 of 2See more

stremio lbenicio-community 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
lbenicio/stremio-web:latest732f9003de33
body-parser@1.20.5
1.20.9

Open the chart page →

3,320
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
body-parser@1.20.5
1.20.9

Open the chart page →

45,925
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
body-parser@1.20.4
1.20.9

Open the chart page →

2,316
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-ui-react:latestba6853e35c60
body-parser@1.19.0
1.20.9

Open the chart page →

8,418
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
body-parser@1.20.5
1.20.9

Open the chart page →

45,925
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
devspacecloud/ui:0.3.3deef55ff29a7
body-parser@1.19.0
1.20.9

Open the chart page →

12,450
redisinsightlogic3579Verified publisher3.4.01 of 1See more

redisinsight logic3579 3.4.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
redis/redisinsight:3.485562d67a912
body-parser@2.2.1
2.4.0

Open the chart page →

1,849
allure_docker_service_uilovemew67Verified publisher0.0.11 of 1See more

allure_docker_service_ui lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service-ui:7.0.34ebd8b4ef340
body-parser@1.19.0
1.20.9

Open the chart page →

2,903
mongo_guilovemew67Verified publisher0.0.21 of 1See more

mongo_gui lovemew67 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.1.1e3952b14ae8e
body-parser@1.20.3
1.20.9

Open the chart page →

2,291
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service-ui:7.0.34ebd8b4ef340
body-parser@1.19.0
1.20.9

Open the chart page →

6,456
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
body-parser@1.19.0
1.20.9

Open the chart page →

3,806
wudm0sh1-helm-charts0.2.01 of 1See more

wud m0sh1-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
getwud/wud:8.1.1b1cd01c43839
body-parser@1.20.3
1.20.9

Open the chart page →

8,251
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
body-parser@1.20.1
1.20.9

Open the chart page →

12,168
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
body-parser@1.20.2
1.20.9

Open the chart page →

92,378
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
body-parser@1.19.0
1.20.9

Open the chart page →

6,479
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
body-parser@1.19.0
1.20.9

Open the chart page →

6,139
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
hugohg34/server:0.0.2503e5d8960ff
body-parser@1.19.2
1.20.9

Open the chart page →

35,115
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
body-parser@1.20.4
1.20.9

Open the chart page →

5,018
mcp-gitlabmcp-helmVerified publisher0.3.41 of 1See more

mcp-gitlab mcp-helm 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111181.

Container imageDigestPackageFixed in
iwakitakuma/gitlab-mcp:2.0.7fb3e81aa6528
body-parser@2.2.0
2.4.0

Open the chart page →

1,308

Container images carrying it

676 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
frankescobar/allure-docker-service-ui:7.0.3:latest4ebd8b4ef340
body-parser@1.19.0
1.20.9
5
kodekloud/examplevotingapp_result:v1e510023fdf38
body-parser@1.20.1
1.20.9
4
oscarsotosanchez/server:v1.06e2e1279126b
body-parser@1.19.0
1.20.9
4
redis/redisinsight:3.8:latestb5e19ee240ab
body-parser@2.2.1
2.4.0
4
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
body-parser@1.20.1
1.20.9
4
assistiot/dlt_api:2.0.0e36a8922fa0c
body-parser@1.20.1
1.20.9
3
decisionrules/server:latest6f6d024a87b8
body-parser@1.20.8
1.20.9
3
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
body-parser@1.19.0
1.20.9
3
pantsel/konga:latestc8172b75607d
body-parser@1.14.2
1.20.9
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
body-parser@1.20.1
1.20.9
3
verdaccio/verdaccio:6.10.7d394c36d62a6
body-parser@1.20.8
1.20.9
3
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
body-parser@1.19.0
1.20.9
3
ghcr.io/seerr-team/seerr:latest:v3.5.027602401178d
body-parser@2.2.2
2.4.0
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
body-parser@1.20.4
1.20.9
3
actualbudget/actual-server:26.10.024645e971da6
body-parser@2.2.1
2.4.0
2
agoldis/sorry-cypress-api:2.5.11afaa5a84051d
body-parser@1.20.0
1.20.9
2
agoldis/sorry-cypress-director:2.5.1110228ecd353b
body-parser@1.20.0
1.20.9
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
body-parser@1.19.0
1.20.9
2
fjvela/urjc-fjvela-server:1.0.53c840aebce22
body-parser@1.19.0
1.20.9
2
governify/assets-manager:v1.4.12987672448c7
body-parser@1.19.0
1.20.9
2
governify/director:v1.4.0608c6940bb98
body-parser@1.19.0
1.20.9
2
governify/registry:v3.4.0d3f37f4f8168
body-parser@1.19.0
1.20.9
2
governify/render:v2.2.0daeca1ce28e6
body-parser@1.19.0
1.20.9
2
governify/reporter:v2.2.038595913458f
body-parser@1.18.2
1.20.9
2
gradiant/open5gs-webui:2.7.5fbd10c017541
body-parser@1.20.1
1.20.9
2
hookiesolutions/webhookie:latest0629694246ba
body-parser@1.19.0
1.20.9
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
body-parser@1.20.3
1.20.9
2
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
body-parser@1.19.1
1.20.9
2
infisical/infisical:latest:v0.167.0dbc5be2079b6
body-parser@1.20.6
1.20.9
2
krtk6160/galoy-nostrcc82a694f818
body-parser@1.20.1
1.20.9
2
kutt/kutt:latest:v3.2.6fa3d24a89b04
body-parser@1.20.5
1.20.9
2
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
body-parser@1.20.1
1.20.9
2
library/ghost:6.71.000032f157262
body-parser@1.20.8
1.20.9
2
library/mongo-express:1.0.2:latest1b23d7976f02
body-parser@1.20.1
1.20.9
2
louislam/uptime-kuma:1.23.1396510915e6be
body-parser@1.20.2
1.20.9
2
louislam/uptime-kuma:2.5.69912da7d7d9b
body-parser@1.20.8
1.20.9
2
louislam/uptime-kuma:2.3.29aeb4e51d038
body-parser@1.20.5
1.20.9
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
body-parser@1.19.0
1.20.9
2
mesosphere/kommander:6.100.13917e82333a9
body-parser@1.19.0
1.20.9
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
body-parser@1.19.0
1.20.9
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
body-parser@1.19.0
1.20.9
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
body-parser@1.20.3
1.20.9
2
mojaloop/reporting-hub-bop-api-svc:v4.1.2b45a2d6f0f2a
body-parser@1.20.1
1.20.9
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
body-parser@1.20.3
1.20.9
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
body-parser@1.20.1
1.20.9
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
body-parser@1.20.3
1.20.9
2
moreillon/api-proxy:a3e8b41e9e578c9653b6
body-parser@1.19.0
1.20.9
2
moreillon/group-manager:v4.9.0d5a0ec8394c0
body-parser@1.20.1
1.20.9
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
body-parser@1.20.1
1.20.9
2
n8nio/n8n:2.36.714c4285bc303
body-parser@2.3.0
2.4.0
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.