StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,232
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

51,184
manyfoldjeffrescVerified publisher1.0.31 of 1See more

manyfold jeffresc 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,219
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,006
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,616
jenkinsjenkins-automation-tool0.1.01 of 1See more

jenkins jenkins-automation-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
jenkinsjenkins-automation-tool-by-helm0.1.01 of 1See more

jenkins jenkins-automation-tool-by-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
jenkinsjenkins-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,965
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
homebridge/homebridge:latestd2370beb6a02
brotli@1.1.0-2build2
no fix listed

Open the chart page →

25,956
petrijfwenisch0.21.01 of 1See more

petri jfwenisch 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wenisch-tech/petri:0.21.005b363251c18
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

120
nginx-chartjinbok-nginx0.1.01 of 1See more

nginx-chart jinbok-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
nginx-chartjiungVerified publisher0.1.01 of 1See more

nginx-chart jiung 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
james-mailserverjondos2.1.21 of 1See more

james-mailserver jondos 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/james:distributed-3.7.2660c0fa12ec2
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,554
jondos-genericjondos2.0.11 of 1See more

jondos-generic jondos 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,846
nginx-chartjongh09160.1.01 of 1See more

nginx-chart jongh0916 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,722
api-key-managerjtektVerified publisher0.3.02 of 4See more

api-key-manager jtekt 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.28-alpinea8b39bd9cf0f
brotli@1.2.0-r0
1.2.1-r0
public.ecr.aws/jtekt-corporation/api-key-manager-gui:v0.1.10424fa47fbeb
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

8,104
image-storage-servicejtektVerified publisher0.5.13 of 4See more

image-storage-service jtekt 0.5.1

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
brotli@1.0.9-2build6
no fix listed
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

90,442
shinsei-managerjtektVerified publisher0.2.07 of 8See more

shinsei-manager jtekt 0.2.0

7 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
moreillon/group-manager:latest3caa8f710ee0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
moreillon/group-manager-front:latest5f0a38498271
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
moreillon/user-manager:v5.0.2e1c9bfab5c16
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
moreillon/user-manager-front:v5.0.3b067dbbbb6af
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

320,051
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

97,176
docker-hub-rssjuniorjpdj0.1.341 of 1See more

docker-hub-rss juniorjpdj 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,220
mirrorjuniorjpdj0.1.1411 of 2See more

mirror juniorjpdj 0.1.141

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/nginx-rootless:1.31.7-r10e0911dc7c86
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

99
mumbledjjuniorjpdj0.1.2081 of 2See more

mumbledj juniorjpdj 0.1.208

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/mumbledj:latest4229c7f97bc7
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

1,336
jupyter-hub-customizationsjupyter-jscVerified publisher0.27.211 of 4See more

jupyter-hub-customizations jupyter-jsc 0.27.21

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.314c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
jupyter-nginxjupyter-jscVerified publisher0.1.31 of 1See more

jupyter-nginx jupyter-jsc 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,200
jwks-mergejwks-merge0.1.01 of 2See more

jwks-merge jwks-merge 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,958
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

12,215
clonarrk8s-chartsVerified publisher0.10.11 of 1See more

clonarr k8s-charts 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/prophetse7en/clonarr:latest9400d298b37a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

822
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

7,552
jellyfink8s-chartsVerified publisher0.2.41 of 1See more

jellyfin k8s-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.696b09723b22f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,619
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

4,378
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
brotli@1.0.9-2build6
no fix listed

Open the chart page →

64,440
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
brotli@1.1.0-2build2
nodejs@22.16.0-1nodesource1
no fix listed
no fix listed

Open the chart page →

74,842
k8s-dummy-lbk8s-dummy-lb0.0.61 of 1See more

k8s-dummy-lb k8s-dummy-lb 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-dummy-lb:0.0.6f12291f7cce5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,512
k8s-file-explorerk8s-file-explorer1.8.11 of 2See more

k8s-file-explorer k8s-file-explorer 1.8.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
don616/k8s-file-explorer-frontend:v1.8.1df47b0d3ff75
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,642
audiobookshelfk8s-home-lab-repo2.0.11 of 1See more

audiobookshelf k8s-home-lab-repo 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,754
bazarrk8s-home-lab-repo11.3.21 of 1See more

bazarr k8s-home-lab-repo 11.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,570
bitmagnetk8s-home-lab-repo1.0.21 of 1See more

bitmagnet k8s-home-lab-repo 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/bitmagnet-io/bitmagnet:v0.10b6373349a301
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,789
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

38,152
floodk8s-home-lab-repo7.3.01 of 1See more

flood k8s-home-lab-repo 7.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jesec/flood:4.14.3c887dad96b40
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

882
freshrssk8s-home-lab-repo7.3.01 of 1See more

freshrss k8s-home-lab-repo 7.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/freshrss:1.29.17f7f276244da
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

722
giteak8s-home-lab-repo2.6.01 of 1See more

gitea k8s-home-lab-repo 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gitea/gitea:1.26.27d13848af126
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,838
lidarrk8s-home-lab-repo15.3.11 of 1See more

lidarr k8s-home-lab-repo 15.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,836
organizrk8s-home-lab-repo8.1.11 of 1See more

organizr k8s-home-lab-repo 8.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
organizr/organizr:latesta3451b1ef949
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

105
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
brotli@1.1.0-2+b7
brotli@1.1.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

12,297
prowlarrk8s-home-lab-repo5.4.01 of 1See more

prowlarr k8s-home-lab-repo 5.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.4.0b7da6e9defbe
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

754
qbittorrentk8s-home-lab-repo14.5.01 of 1See more

qbittorrent k8s-home-lab-repo 14.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/qbittorrent:5.2.224f2d793cb7f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

787
syslog-ngk8s-home-lab-repo3.1.11 of 1See more

syslog-ng k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/syslog-ng:4.10.247fae7f540f9
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,591
vaultwardenk8s-home-lab-repo6.2.31 of 1See more

vaultwarden k8s-home-lab-repo 6.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.79a8eec71f4a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,486

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/mongodb:latestb0652af9c8d0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnamilegacy/zookeeper:3.9.3-debian-12-r212982759ec212
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bitnami/mongodb:8.0.8b3bd5b6be9a0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
blackducksoftware/bdba-frontend:2026.9.29d7730e506c0
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
1
blackducksoftware/blackduck-alert:8.4.1b66c8385ba53
brotli@1.2.0-r1
1.2.1-r0
1
blackducksoftware/blackduck-alert-rabbitmq:8.4.18d345a5f85d6
brotli@1.2.0-r0
1.2.1-r0
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
bluenviron/mediamtx:latest-ffmpegc0feb4acc548
brotli@1.2.0-r1
1.2.1-r0
1
bmeares/meerschaum:2.8.48e9c5bacaa82
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1
1
bnjbvr/kresus:0.22.137e216b182c8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
boky/postfix:5.1.0:v5.1.0aafc77238423
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
boky/postfix:4.4.0f3f247fd4252
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
brotli@1.0.7-6ubuntu0.1
nodejs@16.7.0-deb-1nodesource1
no fix listed
no fix listed
1
buall/postgres-stack:18.6881a785642cb
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
budibase/apps:3.41.344fe6feab985
brotli@1.2.0-r1
1.2.1-r0
1
budibase/database:2.1.0d90f656261c9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
budibase/proxy:3.41.38d780b6ee602
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
budibase/worker:3.41.3de5e2e560ce8
brotli@1.2.0-r1
1.2.1-r0
1
bugsink/bugsink:2ae7633acd52b
brotli@1.2.0
1.2.1
1
caligari/proxy-ipsec:latest9d537a9c883d
brotli@1.2.0-r1
1.2.1-r0
1
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed
1
camptocamp/mapserver:master18959d939a66
brotli@1.2.0-3build1
no fix listed
1
camptocamp/mapserver:latest9964d73d5223
brotli@1.2.0-3build1
no fix listed
1
carbone/carbone-ee:full-5.15.447dee6e75c95
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
caronc/apprise:latest0b2913b15c8e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
cars10/elasticvue:1.15.0efddf4fa0fd8
brotli@1.2.0-r0
1.2.1-r0
1
casbin/casdoor:4.23.0e13c9aada231
brotli@1.2.0-r1
1.2.1-r0
1
castopod/castopod:1.12.101fd37280cbb2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
castopod/castopod:1.15.54e4f0440520f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
brotli@1.1.0-2build2
no fix listed
1
cccs/assemblyline-core:4.7.4.stable24ba0f28d759cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cccs/assemblyline-socketio:4.7.4.stable249a6fe665bd13
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cccs/assemblyline-ui:4.7.4.stable24cad7e7a4c95d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
brotli@1.0.7-6ubuntu0.1
no fix listed
1
cfssl/cfssl:latesta32a90480788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
brotli@1.1.0-r2
1.1.1-r0
1
chatwoot/chatwoot:v4.18.0b419dded7e9d
brotli@1.1.0-r2
1.1.1-r0
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
brotli@1.0.9-2build6
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.