StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
883
of 18,232 indexed, latest versions
Container images
758
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 883 of 18,232 indexed charts deploy, on 758 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.9-2+b6, 1.1.0-2+b7, 1.1.0-2+dhi2, 1.2.0-3no fix listed758
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ECHO-1099-6733-474bDEBIAN-CVE-2026-111497

Charts affected

883 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

758 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
wiktorn/overpass-api:latest9bb5f4a9b54c
brotli@1.0.9-2+b6
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
brotli@1.0.9-2+b6
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
brotli@1.0.9-2+b6
no fix listed
1
ybucci/traefik-external-dns-controller:2.3.0cc22a16fac81
brotli@1.1.0-2+b7
no fix listed
1
yetiplatform/yeti:latest8673609841e3
brotli@1.1.0-2+b7
no fix listed
1
yetiplatform/yeti:2.9.09bcbe2650a14
brotli@1.1.0-2+b7
no fix listed
1
yetiplatform/yeti-frontend:2.9.0873ef15d267b
brotli@1.1.0-2+b7
no fix listed
1
yetiplatform/yeti-frontend:latestd602b1969a64
brotli@1.1.0-2+b7
no fix listed
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
brotli@1.0.9-2+b6
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/aeharding/voyager:latest8e9d9ed499e3
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.72.09285e26f6d0d
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/amoylab/unla/web:latesteac1df1c5e66
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/atuinsh/atuin:18.23.0f232feeead54
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
brotli@1.0.9-2+b6
nodejs@18.20.4-1nodesource1
no fix listed
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/caninehq/canine:latest70d5fa5a3fd8
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.65e735d875fe7
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/deven96/ahnlich-db:latest075301b4cfe1
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/ding113/claude-code-hub:latestfa7c6f5428c2
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/esphome/esphome:latest776a845d5089
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/esphome/esphome:2026.7.4e636269c6390
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/felddy/foundryvtt:14.369.076497e09a7ee
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
brotli@1.0.9-2+b6
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.