StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.83 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
brotli@1.0.7-6ubuntu0.1
no fix listed
library/elasticsearch:7.17.1588c2ec10c7f2
brotli@1.0.7-6ubuntu0.1
no fix listed
library/kibana:7.17.150172f1c538e7
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

38,652
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
brotli@1.0.7-6ubuntu0.1
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

20,062
glassflow-etlglassflowVerified publisher0.5.212 of 16See more

glassflow-etl glassflow 0.5.21

2 of the 16 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/curl:latestba0b29b383a3
brotli@1.2.0-r1
1.2.1-r0
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

17,910
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:latest62a50b1419fe
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
vdiogov/glpi-conteiner:latest6945f84f0058
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

80,098
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:latestdc28ed5a9d0f
brotli@1.2.0-3build1
no fix listed

Open the chart page →

24,294
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:latestdc28ed5a9d0f
brotli@1.2.0-3build1
no fix listed

Open the chart page →

26,505
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
brotli@1.0.9-2build6
no fix listed

Open the chart page →

23,515
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

6,778
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
brotli@1.0.9-2build6
no fix listed

Open the chart page →

9,074
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,015
opentelemetry-demogpg-dev0.33.84 of 27See more

opentelemetry-demo gpg-dev 0.33.8

4 of the 27 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
brotli@1.1.0-2build2
no fix listed

Open the chart page →

199,455
video-analytics-demogpu-operator0.1.92 of 3See more

video-analytics-demo gpu-operator 0.1.9

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
brotli@1.0.7-6ubuntu0.1
no fix listed
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

16,849
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
hive-storagegraphql-hive1.0.01 of 3See more

hive-storage graphql-hive 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

783
hive-storagegraphql-hive-subcharts1.0.01 of 3See more

hive-storage graphql-hive-subcharts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

783
grapple-installergrapple-installer0.3.231 of 1See more

grapple-installer grapple-installer 0.3.23

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
brotli@1.1.0-2build2
no fix listed

Open the chart page →

90,530
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,341
grayloggraylogVerified publisher1.0.22 of 4See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
brotli@1.0.9-2build6
no fix listed
library/mongo:80e900a3364da
brotli@1.1.0-2build2
no fix listed

Open the chart page →

6,154
routergroundcover1.13.1512 of 7See more

router groundcover 1.13.151

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.55-grafana11.3.77d261462727d
brotli@1.0.9-2build6
no fix listed
quay.io/groundcover/tools:20260929e8a79ea4cf39
brotli@1.1.0-2+b7
1.2.0-4+e1

Open the chart page →

9,106
temporalgroundcover1.13.1512 of 2See more

temporal groundcover 1.13.151

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260929-1f21c0eb520a9
brotli@1.1.0-2+b7
1.2.0-4+e1
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
brotli@1.1.0-2+b7
1.2.0-4+e1

Open the chart page →

2,914
guacamoleguacamole1.0.01 of 4See more

guacamole guacamole 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
brotli@1.1.0-2build2
no fix listed

Open the chart page →

4,754
gwangju_2-3gwangju2-30.1.01 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fluent/fluent-bit:latest2740f387f6e6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

7,400
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,462
octoboxhalkeye0.1.11 of 1See more

octobox halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
octoboxio/octobox:latestd909041c46eb
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,471
hatchet-hahatchetOfficialVerified publisher0.20.01 of 8See more

hatchet-ha hatchet 0.20.0

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,829
hatchet-stackhatchetOfficialVerified publisher0.20.01 of 8See more

hatchet-stack hatchet 0.20.0

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,829
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
brotli@1.0.9-2build6
no fix listed

Open the chart page →

70,426
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,856
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,098
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
brotli@1.0.7-6ubuntu0.1
no fix listed
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

157,451
helixhelix1.4.32 of 2See more

helix helix 1.4.3

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
brotli@1.2.0-r0
1.2.1-r0
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,602
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,451
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
no fix listed

Open the chart page →

64,154
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

17,864
airports-postgreshelm-airports-dan0.1.01 of 1See more

airports-postgres helm-airports-dan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,223
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

10,410
airports-postgreshelm-airports-postgres0.1.01 of 1See more

airports-postgres helm-airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,223
my_web1helm-chart-by-piyush0.1.01 of 1See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:latesta30cd4cd57f3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,386
jenkinshelm-chart-for-jenkinsVerified publisher1.0.01 of 1See more

jenkins helm-chart-for-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,126
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
brotli@1.1.0-r2
brotli@1.1.0
1.1.1-r0
1.2.1

Open the chart page →

6,874
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,339
streamsheetshelm-chartsVerified publisher0.2.31 of 8See more

streamsheets helm-charts 0.2.3

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:238c0da4f2ef8
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

92,071
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:latestdbbc38ea2110
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16,394
nginx-charthelm-chart-sample-app0.1.01 of 1See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rraahul/test:latestbfe2c1183bc0
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,979
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
brotli@1.1.0
1.2.1

Open the chart page →

3,166
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

31,616

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:latestb0652af9c8d0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/zookeeper:3.9.3-debian-12-r212982759ec212
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnami/mongodb:8.0.8b3bd5b6be9a0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
blackducksoftware/bdba-frontend:2026.9.29d7730e506c0
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
1
blackducksoftware/blackduck-alert:8.4.1b66c8385ba53
brotli@1.2.0-r1
1.2.1-r0
1
blackducksoftware/blackduck-alert-rabbitmq:8.4.18d345a5f85d6
brotli@1.2.0-r0
1.2.1-r0
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bluenviron/mediamtx:latest-ffmpegc0feb4acc548
brotli@1.2.0-r1
1.2.1-r0
1
bmeares/meerschaum:2.8.48e9c5bacaa82
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1
1
bnjbvr/kresus:0.22.137e216b182c8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
boky/postfix:5.1.0:v5.1.0aafc77238423
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
boky/postfix:4.4.0f3f247fd4252
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
brotli@1.0.7-6ubuntu0.1
nodejs@16.7.0-deb-1nodesource1
no fix listed
no fix listed
1
buall/postgres-stack:18.6881a785642cb
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
budibase/apps:3.41.344fe6feab985
brotli@1.2.0-r1
1.2.1-r0
1
budibase/database:2.1.0d90f656261c9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
budibase/proxy:3.41.38d780b6ee602
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
budibase/worker:3.41.3de5e2e560ce8
brotli@1.2.0-r1
1.2.1-r0
1
bugsink/bugsink:2ae7633acd52b
brotli@1.2.0
1.2.1
1
caligari/proxy-ipsec:latest9d537a9c883d
brotli@1.2.0-r1
1.2.1-r0
1
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed
1
camptocamp/mapserver:master18959d939a66
brotli@1.2.0-3build1
no fix listed
1
camptocamp/mapserver:latest9964d73d5223
brotli@1.2.0-3build1
no fix listed
1
carbone/carbone-ee:full-5.15.447dee6e75c95
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
caronc/apprise:latest0b2913b15c8e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
cars10/elasticvue:1.15.0efddf4fa0fd8
brotli@1.2.0-r0
1.2.1-r0
1
casbin/casdoor:4.23.0e13c9aada231
brotli@1.2.0-r1
1.2.1-r0
1
castopod/castopod:1.12.101fd37280cbb2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
castopod/castopod:1.15.54e4f0440520f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
brotli@1.1.0-2build2
no fix listed
1
cccs/assemblyline-core:4.7.4.stable24ba0f28d759cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cccs/assemblyline-socketio:4.7.4.stable249a6fe665bd13
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cccs/assemblyline-ui:4.7.4.stable24cad7e7a4c95d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
brotli@1.0.7-6ubuntu0.1
no fix listed
1
cfssl/cfssl:latesta32a90480788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
brotli@1.1.0-r2
1.1.1-r0
1
chatwoot/chatwoot:v4.18.0b419dded7e9d
brotli@1.1.0-r2
1.1.1-r0
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
brotli@1.0.9-2build6
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.