StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
876
of 18,232 indexed, latest versions
Container images
750
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 876 of 18,232 indexed charts deploy, on 750 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.9-2+b6, 1.1.0-2+b7, 1.1.0-2+dhi2, 1.2.0-3no fix listed750
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ECHO-1099-6733-474bDEBIAN-CVE-2026-111497

Charts affected

876 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

750 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
prowlercloud/prowler-api:5.31.14f252d579be2
brotli@1.0.9-2+b6
no fix listed
1
quickwit/quickwit:v0.8.1d29332bdadcc
brotli@1.0.9-2+b6
no fix listed
1
rajnandan1/kener:3.2.1930407afca731
brotli@1.0.9-2+b6
no fix listed
1
redash/redash:25.8.000d813437db5
brotli@1.0.9-2+b6
no fix listed
1
redash/redash:26.3.0c5c9148f5c38
brotli@1.0.9-2+b6
no fix listed
1
redimp/otterwiki:2b7ece5b8d7cc
brotli@1.0.9-2+b6
no fix listed
1
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
brotli@1.0.9-2+b6
no fix listed
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
brotli@1.0.9-2+b6
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
brotli@1.0.9-2+b6
no fix listed
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
brotli@1.1.0-2+b7
no fix listed
1
ryshe/terraria:latest8a4f775d02ad
brotli@1.0.9-2+b6
no fix listed
1
santisbon/evwatcher:latestc4e994ca4540
brotli@1.0.9-2+b6
no fix listed
1
santisbon/evworker:lateste807283f8d69
brotli@1.0.9-2+b6
no fix listed
1
santisbon/speedtest:latest8ee3a1697227
brotli@1.0.9-2+b6
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
brotli@1.0.9-2+b6
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
brotli@1.0.9-2+b6
nodejs@18.13.0+dfsg1-1
no fix listed
no fix listed
1
serversideup/php:8.5-fpm-nginxcc307f78ea04
brotli@1.1.0-2+b7
no fix listed
1
shamimkuet/nginx:1.0.2b82902a76a04
brotli@1.0.9-2+b6
no fix listed
1
signalen/backend:2.50.1826bb090bc4e4
brotli@1.0.9-2+b6
no fix listed
1
sigp/siren:v3.0.42c219b04758e
brotli@1.0.9-2+b6
no fix listed
1
sigscale/cgf:lateste076e06d7647
brotli@1.0.9-2+b6
no fix listed
1
sigscale/cse:latestdfa75c395b95
brotli@1.0.9-2+b6
no fix listed
1
sigscale/im:2.1.1-160ee9b3d5721
brotli@1.0.9-2+b6
no fix listed
1
sigscale/ocs:latest3b8ec91d359d
brotli@1.0.9-2+b6
no fix listed
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
brotli@1.0.9-2+b6
no fix listed
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
brotli@1.0.9-2+b6
no fix listed
1
sissbruecker/linkding:1.35.00c5dddf0b37c
brotli@1.0.9-2+b6
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
brotli@1.0.9-2+b6
nodejs@20.19.2-1nodesource1
no fix listed
no fix listed
1
sissbruecker/linkding:1.47.0e35cb50e0581
brotli@1.1.0-2+b7
no fix listed
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
brotli@1.0.9-2+b6
no fix listed
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
brotli@1.0.9-2+b6
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
brotli@1.0.9-2+b6
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
brotli@1.0.9-2+b6
no fix listed
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
brotli@1.0.9-2+b6
no fix listed
1
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
brotli@1.0.9-2+b6
no fix listed
1
somnathmore/custom-nginx:v2bdfc06cad4ec
brotli@1.0.9-2+b6
no fix listed
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
brotli@1.1.0-2+b7
no fix listed
1
speckle/speckle-preview-service:2.26.3092384dba45d
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
brotli@1.0.9-2+b6
no fix listed
1
sslhep/servicex_app:v1.8.6c935e123030d
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.696805be717ff
brotli@1.1.0-2+b7
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.