StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
hello-world-charthelm-chart-test-hello-world0.1.01 of 1See more

hello-world-chart helm-chart-test-hello-world 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
mywebhelmchartwebapp0.0.51 of 1See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:latesta30cd4cd57f3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,386
my-apphelm-demo85640.2.71 of 2See more

my-app helm-demo8564 0.2.7

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

10,922
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.1001 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.100

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/git:v2.54.0ce84fd6a057b
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,285
apachehelmforgeVerified publisher1.0.81 of 1See more

apache helmforge 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4.69c842ac797bd1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,520
appwritehelmforgeVerified publisher2.0.72 of 5See more

appwrite helmforge 2.0.7

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
appwrite/appwrite:2.5.000bf6b9a0be8
brotli@1.2.0-r1
1.2.1-r0
appwrite/new:1.2.74-self-hostedb16ee4e5c19c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,813
archiveboxhelmforgeVerified publisher1.1.151 of 1See more

archivebox helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.73d4720d86c0e9
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

7,111
atuinhelmforgeVerified publisher1.1.11 of 1See more

atuin helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/atuinsh/atuin:18.23.0f232feeead54
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

1,949
booklorehelmforgeVerified publisher2.0.41 of 3See more

booklore helmforge 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/booklore-app/booklore:v2.3.1d3d3af34bc2c
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,729
castopodhelmforgeVerified publisher1.2.131 of 3See more

castopod helmforge 1.2.13

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

11,481
changedetectionhelmforgeVerified publisher1.1.201 of 1See more

changedetection helmforge 1.1.20

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.904eaae7915ba
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

3,129
chiefonboardinghelmforgeVerified publisher1.1.171 of 3See more

chiefonboarding helmforge 1.1.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,393
ckanhelmforgeVerified publisher1.3.132 of 6See more

ckan helmforge 1.3.13

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ckan/ckan-base:2.12.087ecf3f27ad6
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
brotli@1.0.9-2build6
no fix listed

Open the chart page →

11,839
countlyhelmforgeVerified publisher1.2.102 of 3See more

countly helmforge 1.2.10

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
brotli@1.0.7-6ubuntu0.1
nodejs@18.20.4-1nodesource1
no fix listed
no fix listed
library/mongo:9.0.2f5c6240ae8fc
brotli@1.1.0-2build2
no fix listed

Open the chart page →

74,001
croniclehelmforgeVerified publisher1.1.111 of 1See more

cronicle helmforge 1.1.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
soulteary/cronicle:0.9.80ac2512fa6e39
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,913
dawarichhelmforgeVerified publisher1.0.83 of 4See more

dawarich helmforge 1.0.8

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
freikin/dawarich:1.16.0b533e6eac446
brotli@1.1.0-2+b7
nodejs@20.19.2+dfsg-1+deb13u3
1.1.0-2+deb13u1
no fix listed
nginxinc/nginx-unprivileged:1.30.4-alpineadf5042a17f4
brotli@1.2.0-r1
1.2.1-r0
postgis/postgis:18-3.67e00e8c3539f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

12,886
discount-bandithelmforgeVerified publisher2.0.121 of 3See more

discount-bandit helmforge 2.0.12

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.5bc327406db74
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

41,958
documensohelmforgeVerified publisher1.0.01 of 3See more

documenso helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/documenso/documensodigest-pinnedd9985f66c19c
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,196
docusealhelmforgeVerified publisher1.0.01 of 3See more

docuseal helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
docuseal/docusealdigest-pinned28d0ca583860
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,592
druidhelmforgeVerified publisher1.3.92 of 4See more

druid helmforge 1.3.9

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/druid:38.0.04156a8ca87b8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
library/zookeeper:3.9.5e6b279d01350
brotli@1.0.9-2build6
no fix listed

Open the chart page →

8,810
drupalhelmforgeVerified publisher1.2.181 of 2See more

drupal helmforge 1.2.18

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/drupal:11.4.10-php8.5-apache-bookworm116fbf35120e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

18,488
entehelmforgeVerified publisher1.0.41 of 4See more

ente helmforge 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,392
fastmcp-serverhelmforgeVerified publisher1.7.51 of 1See more

fastmcp-server helmforge 1.7.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,077
generichelmforgeVerified publisher3.1.71 of 1See more

generic helmforge 3.1.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.31.7956eac231bb3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
ghostfoliohelmforgeVerified publisher1.1.21 of 4See more

ghostfolio helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.88.0256c524a6116
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,372
giteahelmforgeVerified publisher1.1.261 of 1See more

gitea helmforge 1.1.26

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gitea/gitea:28.2.0-rootless94807314454f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

44
heimdallhelmforgeVerified publisher1.1.151 of 1See more

heimdall helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.8.38e27750132a4
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

372
hermes-agenthelmforgeVerified publisher1.0.21 of 1See more

hermes-agent helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
brotli@1.1.0-2+b7
brotlicffi@1.2.0.2
1.1.0-2+deb13u1
1.2.1.0

Open the chart page →

8,093
hoppscotchhelmforgeVerified publisher1.1.151 of 2See more

hoppscotch helmforge 1.1.15

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2026.9.03160f5b3acf4
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,586
ib-gatewayhelmforgeVerified publisher1.0.11 of 1See more

ib-gateway helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gnzsnz/ib-gatewaydigest-pinned1e2236804ac9
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,784
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

13,985
jenkinshelmforgeVerified publisher1.0.111 of 1See more

jenkins helmforge 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:2.580.1-lts-jdk21a660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
jupyterhubhelmforgeVerified publisher1.0.73 of 3See more

jupyterhub helmforge 1.0.7

3 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
brotli@1.2.0-r1
1.2.1-r0
jupyterhub/configurable-http-proxy:5.3.069a7170eeeda
brotli@1.2.0-r0
1.2.1-r0
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,536
komgahelmforgeVerified publisher1.4.181 of 1See more

komga helmforge 1.4.18

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotson/komga:1.29.19fa656e8259b
brotli@1.2.0-3build1
no fix listed

Open the chart page →

27,913
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,214
medikeephelmforgeVerified publisher2.0.51 of 3See more

medikeep helmforge 2.0.5

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.72.09285e26f6d0d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,094
metabasehelmforgeVerified publisher1.2.351 of 3See more

metabase helmforge 1.2.35

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
metabase/metabase:v0.64.2038b47779d23
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,885
middlewarehelmforgeVerified publisher1.2.111 of 4See more

middleware helmforge 1.2.11

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
brotli@1.0.9-2+b6
nodejs@22.16.0-1nodesource1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

64,802
minecrafthelmforgeVerified publisher1.5.71 of 1See more

minecraft helmforge 1.5.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.10.05a2ab74ae179
brotli@1.1.0-2build2
no fix listed

Open the chart page →

38,866
mongodbhelmforgeVerified publisher1.8.61 of 1See more

mongodb helmforge 1.8.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:9.0.4dc28ed5a9d0f
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,420
moodlehelmforgeVerified publisher1.1.51 of 2See more

moodle helmforge 1.1.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

35,755
netboxhelmforgeVerified publisher2.0.51 of 4See more

netbox helmforge 2.0.5

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
brotli@1.2.0-3build1
no fix listed

Open the chart page →

5,685
nextcloudhelmforgeVerified publisher2.0.41 of 3See more

nextcloud helmforge 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nextcloud:35.0.2-apachea588aa535370
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

7,214
openhumanhelmforgeVerified publisher1.1.01 of 1See more

openhuman helmforge 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/tinyhumansai/openhuman-core:v0.64.15c694baccddb4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,033
openreel-videohelmforgeVerified publisher1.0.41 of 1See more

openreel-video helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
helmforge/openreel-video:v0.5.07ba0d47b943f
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,276
openreplayhelmforgeVerified publisher1.1.112 of 24See more

openreplay helmforge 1.1.1

12 of the 24 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/git:2.52.04a0e72d49596
brotli@1.2.0-r0
1.2.1-r0
rustfs/rustfs:1.0.08cc980175544
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/p1t3u8a3/api:v1.28.512aeda8dbac7
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/p1t3u8a3/assets:v1.28.0fee63ead0e74
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/p1t3u8a3/canvases:v1.28.08d2b3a947a14
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/p1t3u8a3/db:v1.28.02c99078d7957
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/p1t3u8a3/ender:v1.28.00f5806583626
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/p1t3u8a3/http:v1.28.0cd0e4469cd02
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/p1t3u8a3/images:v1.28.004fadd25a569
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/p1t3u8a3/sink:v1.28.06b80fb10b443
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/p1t3u8a3/spot:v1.28.00ba5cb666370
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/p1t3u8a3/storage:v1.28.02f9784a385ce
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16,183
opensignhelmforgeVerified publisher1.0.02 of 3See more

opensign helmforge 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:9.0.4dc28ed5a9d0f
brotli@1.2.0-3build1
no fix listed
opensign/opensigndigest-pinned0ebc230eed21
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

70,650
paperless-ngxhelmforgeVerified publisher1.1.11 of 4See more

paperless-ngx helmforge 1.1.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

8,878
phpmyadminhelmforgeVerified publisher2.1.21 of 1See more

phpmyadmin helmforge 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,716

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:latestb0652af9c8d0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/zookeeper:3.9.3-debian-12-r212982759ec212
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnami/mongodb:8.0.8b3bd5b6be9a0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
blackducksoftware/bdba-frontend:2026.9.29d7730e506c0
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
1
blackducksoftware/blackduck-alert:8.4.1b66c8385ba53
brotli@1.2.0-r1
1.2.1-r0
1
blackducksoftware/blackduck-alert-rabbitmq:8.4.18d345a5f85d6
brotli@1.2.0-r0
1.2.1-r0
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bluenviron/mediamtx:latest-ffmpegc0feb4acc548
brotli@1.2.0-r1
1.2.1-r0
1
bmeares/meerschaum:2.8.48e9c5bacaa82
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1
1
bnjbvr/kresus:0.22.137e216b182c8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
boky/postfix:5.1.0:v5.1.0aafc77238423
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
boky/postfix:4.4.0f3f247fd4252
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
brotli@1.0.7-6ubuntu0.1
nodejs@16.7.0-deb-1nodesource1
no fix listed
no fix listed
1
buall/postgres-stack:18.6881a785642cb
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
budibase/apps:3.41.344fe6feab985
brotli@1.2.0-r1
1.2.1-r0
1
budibase/database:2.1.0d90f656261c9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
budibase/proxy:3.41.38d780b6ee602
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
budibase/worker:3.41.3de5e2e560ce8
brotli@1.2.0-r1
1.2.1-r0
1
bugsink/bugsink:2ae7633acd52b
brotli@1.2.0
1.2.1
1
caligari/proxy-ipsec:latest9d537a9c883d
brotli@1.2.0-r1
1.2.1-r0
1
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed
1
camptocamp/mapserver:master18959d939a66
brotli@1.2.0-3build1
no fix listed
1
camptocamp/mapserver:latest9964d73d5223
brotli@1.2.0-3build1
no fix listed
1
carbone/carbone-ee:full-5.15.447dee6e75c95
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
caronc/apprise:latest0b2913b15c8e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
cars10/elasticvue:1.15.0efddf4fa0fd8
brotli@1.2.0-r0
1.2.1-r0
1
casbin/casdoor:4.23.0e13c9aada231
brotli@1.2.0-r1
1.2.1-r0
1
castopod/castopod:1.12.101fd37280cbb2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
castopod/castopod:1.15.54e4f0440520f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
brotli@1.1.0-2build2
no fix listed
1
cccs/assemblyline-core:4.7.4.stable24ba0f28d759cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cccs/assemblyline-socketio:4.7.4.stable249a6fe665bd13
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cccs/assemblyline-ui:4.7.4.stable24cad7e7a4c95d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
brotli@1.0.7-6ubuntu0.1
no fix listed
1
cfssl/cfssl:latesta32a90480788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
brotli@1.1.0-r2
1.1.1-r0
1
chatwoot/chatwoot:v4.18.0b419dded7e9d
brotli@1.1.0-r2
1.1.1-r0
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
brotli@1.0.9-2build6
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.