StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
brotli@1.0.9-2build6
nodejs@16.14.2-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

10,910
zileank8s-home-lab-repo1.0.11 of 1See more

zilean k8s-home-lab-repo 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
brotli@1.0.9-r14
1.2.1-r0

Open the chart page →

2,507
k8s-mutating-admission-webhookk8s-mutating-admission-webhook1.15.11 of 1See more

k8s-mutating-admission-webhook k8s-mutating-admission-webhook 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
udhos/k8s-mutating-admission-webhook:1.15.1e588db500edf
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,299
librephotosk8sonlabVerified publisher1.2.01 of 7See more

librephotos k8sonlab 1.2.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
reallibrephotos/librephotos-proxy:1.4.0ffd5bfbf0ad8
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

18,628
node-redk8sonlabVerified publisher1.2.11 of 1See more

node-red k8sonlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nodered/node-red:5.0.9e085d4a06591
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

200
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,014
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,174
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,951
kagentkagent0.10.41 of 6See more

kagent kagent 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/postgres:18.6-alpine3.23478cd7c2fb8c
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,232
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,925
vaultwardenkagiso-me0.1.11 of 1See more

vaultwarden kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.36.0-alpined3531610b486
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

916
jenkinskallakruparaju-jenkins1.0.01 of 1See more

jenkins kallakruparaju-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
kanboardkanboard1.2.71 of 1See more

kanboard kanboard 1.2.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kanboard/kanboard:v1.2.56871435323da4
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

105
kannikakannika0.19.11 of 3See more

kannika kannika 0.19.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/kannika/kannika-api:0.19.18c66427d6d57
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,043
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

9,546
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
brotli@1.0.7-6ubuntu0.1
nodejs@14.21.2-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

82,822
kbot-self-hostedkbot-self-hostedVerified publisher0.1.82 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
clamav/clamav:1.4.3_base629a3050df6a
brotli@1.2.0-r0
1.2.1-r0
gotenberg/gotenberg:8.30206a6c708fc6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

44,528
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

10,552
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kenerkener-chart0.0.71 of 1See more

kener kener-chart 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,511
kestra-starterkestraOfficialVerified publisher2.0.71 of 5See more

kestra-starter kestra 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/docker:dind-rootless825e451c9bd8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

7,524
keycloak-multi-client-notifierkeycloak-multi-client-notifier2.1.21 of 2See more

keycloak-multi-client-notifier keycloak-multi-client-notifier 2.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/blessingnator/keycloak-mcn-frontend:2.0.1ddd462dbde39
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,288
xwikikeyporttech0.2.01 of 2See more

xwiki keyporttech 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/xwiki:lts-postgres-tomcat0e18b1ad69c0
brotli@1.2.0-3build1
no fix listed

Open the chart page →

26,154
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
brotli@1.1.0
1.2.1

Open the chart page →

8,498
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

11,240
quickwitkfirfer0.7.21 of 1See more

quickwit kfirfer 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,844
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
brotli@1.0.9-2build6
no fix listed

Open the chart page →

26,000
graphiti-mcpkiberonlabs0.1.21 of 1See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,920
cdashkitwareVerified publisher0.21.12 of 3See more

cdash kitware 0.21.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
kitware/cdash:v5.5.16fab5f5ec6f2
brotli@1.1.0-2+b7
nodejs@24.22.1-1nodesource1
1.1.0-2+deb13u1
no fix listed

Open the chart page →

12,842
kollectkollectVerified publisher0.21.01 of 1See more

kollect kollect 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/platformrelay/kollect:v0.21.0a86edc5ec3a8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,413
whoamikomailo-helm-charts0.3.01 of 1See more

whoami komailo-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kpingkpingOfficialVerified publisher0.3.51 of 1See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kayrosuno/kping:latestf3bd44b29b0d
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,980
apikrateo1.0.31 of 1See more

api krateo 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/api:1.0.3edbaa031754d
node@18.7.0-1
22.23.4

Open the chart page →

5,392
argocd-servicekrateo1.0.71 of 1See more

argocd-service krateo 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/argocd-service:1.0.749b727854938
node@18.12.1-0
22.23.4

Open the chart page →

5,331
auth-servicekrateo1.2.361 of 1See more

auth-service krateo 1.2.36

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/auth-service:1.2.36794bc5877f76
node@20.9.0-0
Node.js@20.9.0
22.23.4
22.23.4

Open the chart page →

5,806
capi-servicekrateo1.1.91 of 1See more

capi-service krateo 1.1.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/capi-service:1.1.92eee721260eb
node@18.13.0-0
22.23.4

Open the chart page →

5,069
codequality-servicekrateo1.1.11 of 1See more

codequality-service krateo 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/codequality-service:1.1.19a9a77b01eb1
node@18.12.1-0
22.23.4

Open the chart page →

4,944
component-servicekrateo0.2.11 of 1See more

component-service krateo 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/component-service:0.2.14a5f506c0560
node@18.12.1-0
22.23.4

Open the chart page →

5,280
deployment-servicekrateo1.2.591 of 1See more

deployment-service krateo 1.2.59

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
brotli@1.0.9-2+b6
node@20.12.0-0
Node.js@20.12.0-0
1.0.9-2+deb12u1
22.23.4
22.23.4

Open the chart page →

85,072
endpoint-servicekrateo1.0.11 of 1See more

endpoint-service krateo 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/endpoint-service:1.0.16c3777c042f7
node@18.4.0-0
22.23.4

Open the chart page →

6,011
event-servicekrateo1.1.61 of 1See more

event-service krateo 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/event-service:1.1.671fd074020f4
node@18.12.1-0
22.23.4

Open the chart page →

5,398
finops-database-handlerkrateo0.5.41 of 1See more

finops-database-handler krateo 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

84,249
finops-notebookskrateo0.1.11 of 1See more

finops-notebooks krateo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/kubectl:1.33.1393d2a3f53a5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,116
finops-webservice-api-mockkrateo0.1.01 of 1See more

finops-webservice-api-mock krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

88,974
git-servicekrateo1.0.131 of 1See more

git-service krateo 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/git-service:1.0.13c22f183fedf0
node@20.4.0-0
Node.js@20.4.0
22.23.4
22.23.4

Open the chart page →

6,365
keptn-servicekrateo1.0.121 of 1See more

keptn-service krateo 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/keptn-service:1.0.12f9fef2435636
node@20.9.0-0
Node.js@20.9.0
22.23.4
22.23.4

Open the chart page →

5,505
keptn-service-insielkrateo0.1.31 of 1See more

keptn-service-insiel krateo 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/keptn-service-insiel:0.1.3c1d475bb7f06
node@18.7.0-1
22.23.4

Open the chart page →

5,304
krateo-remote-clientkrateo0.4.161 of 1See more

krateo-remote-client krateo 0.4.16

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/krateo-remote-client:0.4.167ccd4382f3fa
node@20.8.0-0
Node.js@20.8.0
22.23.4
22.23.4

Open the chart page →

5,579

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
chetangautamm/repo:sipp.v3e7f7049e1544
brotli@1.0.7-6ubuntu0.1
no fix listed
1
cheveo/azp-agent:1.0.282240f890884
brotli@1.0.9-2build6
no fix listed
1
chibisafe/chibisafe-server:latesta3a8606cd9b5
brotli@1.2.0-r0
1.2.1-r0
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
chocobozzz/peertube:v8.1.5052712130691
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
chriseaton/adventureworks:latest54c3384ce701
brotli@1.0.9-2build6
no fix listed
1
chrislusf/seaweedfs:4.346620371e8af8
brotli@1.2.0-r1
1.2.1-r0
1
circleci/runner:launch-agent9bdc62f02162
brotli@1.0.7-6ubuntu0.1
no fix listed
1
ckan/ckan-base:2.12.087ecf3f27ad6
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
brotli@1.0.9-2build6
no fix listed
1
ckulka/baikal:0.10.1-nginx434bdd162247
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
clamav/clamavd06c1d6a451d
brotli@1.2.0-r1
1.2.1-r0
1
clamav/clamav:1.0dd0d9cc746af
brotli@1.2.0-r1
1.2.1-r0
1
cloudposse/bastion:latest0d9507e8a760
brotli@1.1.0-r2
1.1.1-r0
1
cloudreve/cloudreve:4.19.15c6c5baf7fa5
brotli@1.2.0-r0
1.2.1-r0
1
cloudreve/cloudreve:4.18.0f7a464100bf6
brotli@1.2.0-r0
1.2.1-r0
1
cloudtooling/moodle:5.3.0.370961e4169fb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cloudtooling/wordpress:7.1.3.150513f7a183c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cm2network/squad:latest8cba47f53df5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
codedesignplus/ms-emails-grpc:latestd391acd6d490
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
codedesignplus/ms-emails-rest:latest347a7e96228c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
collabora/code:24.04.13.2.101dc4ab83977
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
collabora/code:23.05.10.1.105299b452f7f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
collabora/code:23.05.6.3.198c77406cbe0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cometbft/cometbft:v0.38.1722c2ac018f40
brotli@1.1.0-r2
1.1.1-r0
1
consensys/teku:latest19049d6a1e09
brotli@1.1.0-2build2
no fix listed
1
consensys/teku:25.4.1bf6ecd2ea716
brotli@1.1.0-2build2
no fix listed
1
consensys/web3signer:latest6d5e92aa95c7
brotli@1.2.0-3build1
no fix listed
1
contentsquareplatform/chproxy:v1.26.524555f22d4be
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
brotli@1.0.9-2build6
no fix listed
1
cortezaproject/corteza:2024.9.08eb7a26605c9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
brotli@1.0.9-2build6
no fix listed
1
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
countly/countly-server:25.05.4e3c238248f99
brotli@1.0.7-6ubuntu0.1
nodejs@18.20.4-1nodesource1
no fix listed
no fix listed
1
crinis/typo3:legacy-13.4.365636db17b924
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
brotli@1.2.0
brotli@1.1.0-2build2
1.2.1
no fix listed
1
cspconsole/config-provider:1.0.365524a26a6c23
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cspconsole/csp-control-center:1.0.1046dda4a31bd6
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
cspconsole/report-collector:1.0.15839750248193b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
curlimages/curl:8.12.194e9e444bcba
brotli@1.1.0-r2
1.1.1-r0
1
cybrarist/discount-bandit:v4.0.5bc327406db74
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
dannielkil/book-frontend:latest937993927694
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
darkobas/tokenexporter:latestf26e016a9d7e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
datagrok/grok_spawner:latestd8b14c641dfb
brotli@1.2.0
1.2.1
1
datamate/seafile-professional:11.0.202dd66b722464
brotli@1.0.9-2build6
no fix listed
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
brotli@1.1.0-2build2
no fix listed
1
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
brotli@1.0.9-2build6
no fix listed
1
decisionrules/business-intelligence:latest7c410e0c1d7b
brotli@1.2.0-r1
1.2.1-r0
1
decisionrules/client:latest-rootless8d89f64b501a
brotli@1.2.0-r1
1.2.1-r0
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.