StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
885
of 18,232 indexed, latest versions
Container images
760
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 885 of 18,232 indexed charts deploy, on 760 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.9-2+b6, 1.1.0-2+b7, 1.1.0-2+dhi2, 1.2.0-3no fix listed760
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ECHO-1099-6733-474bDEBIAN-CVE-2026-111497

Charts affected

885 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

760 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
brotli@1.0.9-2+b6
no fix listed
1
sslhep/servicex_app:v1.8.6c935e123030d
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.696805be717ff
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
brotli@1.1.0-2+b7
no fix listed
1
strangebee/thehive:6.0.0-14f6db02bb2b8
brotli@1.0.9-2+b6
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
brotli@1.0.9-2+b6
no fix listed
1
supabase/logflare:latest9d9c8f8c4626
brotli@1.1.0-2+b7
no fix listed
1
supabase/realtime:latest768b559241dd
brotli@1.1.0-2+b7
no fix listed
1
supabase/realtime:v2.102.3aa1c92c0cf32
brotli@1.0.9-2+b6
no fix listed
1
supabase/realtime:v2.33.8d207e6e23ad3
brotli@1.0.9-2+b6
no fix listed
1
supabase/studio:20241021-9f9b08326d8070c55e9
brotli@1.0.9-2+b6
no fix listed
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
brotli@1.0.9-2+b6
no fix listed
1
supabase/studio:latestd878dcd9dba7
brotli@1.0.9-2+b6
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
brotli@1.0.9-2+b6
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.15.11a2604718368
brotli@1.0.9-2+b6
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
brotli@1.0.9-2+b6
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
brotli@1.0.9-2+b6
no fix listed
1
tautulli/tautulli:latesta4323bc09b27
brotli@1.1.0-2+b7
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
brotli@1.0.9-2+b6
no fix listed
1
tenureai/tenure:v1.0.285f5b222df9a5
brotli@1.1.0-2+dhi2
no fix listed
1
theradius/loggia:0.463ba348546ec
brotli@1.0.9-2+b6
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
brotli@1.1.0-2+b7
no fix listed
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
brotli@1.1.0-2+b7
no fix listed
1
thingsboard/tbmq-integration-executor:2.4.16a0e157c73be
brotli@1.1.0-2+b7
no fix listed
1
thingsboard/tbmq-node:2.4.155aa86b6144f
brotli@1.1.0-2+b7
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
brotli@1.0.9-2+b6
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
brotli@1.0.9-2+b6
no fix listed
1
tinymediamanager/tinymediamanager:5.3.448c15784a127
brotli@1.1.0-2+b7
no fix listed
1
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
brotli@1.1.0-2+b7
no fix listed
1
toniblyx/prowler:stable9dbcc3c9abd7
brotli@1.1.0-2+b7
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
brotli@1.0.9-2+b6
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
brotli@1.0.9-2+b6
no fix listed
1
vaultwarden/server:1.37.3:latest1587c45feaa4
brotli@1.1.0-2+b7
no fix listed
1
vaultwarden/server:1.35.443498a94b22f
brotli@1.1.0-2+b7
no fix listed
1
vaultwarden/server:1.34.384fd8a47f58d
brotli@1.0.9-2+b6
no fix listed
1
vaultwarden/server:1.35.79a8eec71f4a5
brotli@1.1.0-2+b7
no fix listed
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
brotli@1.0.9-2+b6
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
brotli@1.0.9-2+b6
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
brotli@1.0.9-2+b6
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
brotli@1.0.9-2+b6
no fix listed
1
voska/hass-mcp:latest7142a431e2c5
brotli@1.0.9-2+b6
no fix listed
1
wallarm/aih-scanner:2.16.02ee920bbf459
brotli@1.1.0-2+b7
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.