StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
905
of 18,232 indexed, latest versions
Container images
780
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 905 of 18,232 indexed charts deploy, on 780 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.9-2+b6, 1.1.0-2+b7, 1.1.0-2+dhi2, 1.2.0-3no fix listed780
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ECHO-1099-6733-474bDEBIAN-CVE-2026-111497

Charts affected

905 by stars
ChartLatestAffected imagesRadar Score
gitlabgitlabVerified publisher10.5.18 of 21See more

gitlab gitlab 10.5.1

8 of the 21 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.5.1277c0c7dd09d
brotli@1.1.0-2+b7
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.5.13e17b952d90f
brotli@1.1.0-2+b7
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.5.1e56f0bd5b96c
brotli@1.1.0-2+b7
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlabb194be2ff740
brotli@1.1.0-2+b7
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.22542811ac831
brotli@1.1.0-2+b7
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.08f1028df33aa
brotli@1.1.0-2+b7
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.14863be916c31
brotli@1.1.0-2+b7
no fix listed
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.5.15cf0f354870d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

20,218
jenkinsjenkinsciOfficialVerified publisher5.9.731 of 2See more

jenkins jenkinsci 5.9.73

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:2.580.1-jdk2542fc298cdafa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,218
nextcloudnextcloud9.4.11 of 1See more

nextcloud nextcloud 9.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nextcloud:35.0.2-apachea588aa535370
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,346
giteagiteaOfficialVerified publisher12.7.01 of 4See more

gitea gitea 12.7.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,328
authentikgoauthentikOfficialVerified publisher2026.8.51 of 1See more

authentik goauthentik 2026.8.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.5602227a86455
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,362
nginx-ingressnginxVerified publisher2.8.01 of 1See more

nginx-ingress nginx 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginx/nginx-ingress:5.7.0c603a5cbac85
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,126
jupyterhubjupyterhubOfficialVerified publisher4.4.42 of 7See more

jupyterhub jupyterhub 4.4.4

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.4.4bbce7a924eac
brotli@1.0.9-2+b6
no fix listed
quay.io/jupyterhub/k8s-singleuser-sample:4.4.41ce06452047d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

8,776
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

39,510
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

13,055
falcofalcosecurity9.2.11 of 3See more

falco falcosecurity 9.2.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
falcosecurity/falco-driver-loader:0.45.16cfd7418907e
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

17,192
netdatanetdataVerified publisher3.7.1761 of 1See more

netdata netdata 3.7.176

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
netdata/netdata:v2.12.15cfa05a5fa56
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,051
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
boky/postfix:v5.1.0aafc77238423
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,639
vaultwardengissilabs1.4.21 of 1See more

vaultwarden gissilabs 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,277
zammadzammadOfficialVerified publisher20.0.01 of 5See more

zammad zammad 20.0.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.2.2-00120a71ee267028
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,919
chaos-meshchaos-meshVerified publisher2.8.61 of 4See more

chaos-mesh chaos-mesh 2.8.6

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.65e735d875fe7
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

8,251
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

72,628
penpotpenpotOfficialVerified publisher1.11.31 of 5See more

penpot penpot 1.11.3

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
penpotapp/exporter:2.18.3418232d6ca31
brotli@1.1.0-2+dhi2
no fix listed

Open the chart page →

6,143
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,687
dragonflydragonflyVerified publisher1.8.61 of 3See more

dragonfly dragonfly 1.8.6

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.59fe2a1d6206f
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,537
emqxemqx-operator5.8.91 of 1See more

emqx emqx-operator 5.8.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
emqx/emqx:5.8.935b46f7aa7a0
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,099
vertical-pod-autoscalercowboysysopVerified publisher11.1.11 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

9,451
difydify-helmVerified publisher0.39.04 of 11See more

dify dify-helm 0.39.0

4 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
langgenius/dify-agent-local-sandbox:1.17.0316279a82ead
brotli@1.0.9-2+b6
no fix listed
langgenius/dify-api:1.17.052be6088dd84
brotli@1.0.9-2+b6
nodejs@22.21.0-1nodesource1
no fix listed
no fix listed
langgenius/dify-sandbox:0.2.15750e1111426e
brotli@1.2.0-3
no fix listed
library/nginx:latest332d0beea97c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

64,010
oktetooktetoOfficialVerified publisher0.0.0-2026-09-281 of 10See more

okteto okteto 0.0.0-2026-09-28

1 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/okteto/pipeline-runner:0.0.0-2026-09-283e56bdd1b90d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,443
yourlsyourlsOfficialVerified publisher8.10.51 of 2See more

yourls yourls 8.10.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/yourls/yourls:1.10.619ffb4298581
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,337
openprojectopenproject-helm-chartsOfficialVerified publisher13.15.12 of 5See more

openproject openproject-helm-charts 13.15.1

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
brotli@1.0.9-2+b6
no fix listed
openproject/openproject:17.9.2-slim7b50be7ff67d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

72,792
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

13,755
lemmyananace-chartsVerified publisher0.6.152 of 5See more

lemmy ananace-charts 0.6.15

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dessalines/lemmy:0.19.2079e9f02c286c
brotli@1.0.9-2+b6
no fix listed
dessalines/lemmy-ui:0.19.20ee4c620d8e93
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,220
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

8,014
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

8,881
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

60,066
factorio-server-chartsfactorio-server-chartsVerified publisher2.5.21 of 1See more

factorio-server-charts factorio-server-charts 2.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
factoriotools/factorio:latested5a8cefb6c2
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,211
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/golang:latest957861185dbf
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

10,390
gotenbergmaikumoriVerified publisher1.29.01 of 1See more

gotenberg maikumori 1.29.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.38.1aa552cc115db
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,245
oneuptimeoneuptimeOfficialVerified publisher14.0.852 of 7See more

oneuptime oneuptime 14.0.85

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
oneuptime/probe:release9502ee0cf3f5
brotli@1.0.9-2+b6
no fix listed
oneuptime/runner:release73130c0cb328
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

9,101
openclawopenclaw-helmVerified publisher1.5.402 of 2See more

openclaw openclaw-helm 1.5.40

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
brotli@1.1.0-2+b7
no fix listed
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,758
stalwart-mailstalwart-mailVerified publisher2.1.71 of 1See more

stalwart-mail stalwart-mail 2.1.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.27c429b311c93d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,176
prefect-serverprefectVerified publisher2026.10.210327301 of 2See more

prefect-server prefect 2026.10.21032730

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
prefecthq/prefect:3.9.0-python3.11e5f851d68db9
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,803
codefreshcodefresh-onpremOfficialVerified publisher2.12.232 of 42See more

codefresh codefresh-onprem 2.12.23

2 of the 42 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
brotli@1.0.9-2+b6
no fix listed
bitnamilegacy/rabbitmq:4.1.39e635efba431
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

70,067
apim3graviteeioVerified publisher4.13.02 of 4See more

apim3 graviteeio 4.13.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.13.0-debian1f563b333b38
brotli@1.1.0-2+b7
no fix listed
graviteeio/apim-management-api:4.13.0-debianca7f0aa8414d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,610
wordpressgroundhog2k0.16.71 of 1See more

wordpress groundhog2k 0.16.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:7.1.3-apache8ecd8d8e3741
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,732
supabasetokens-studioVerified publisher1.0.02 of 14See more

supabase tokens-studio 1.0.0

2 of the 14 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
supabase/realtime:v2.33.8d207e6e23ad3
brotli@1.0.9-2+b6
no fix listed
supabase/studio:20241021-9f9b08326d8070c55e9
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

89,811
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

79,137
budibasebudibase0.0.0-master2 of 7See more

budibase budibase 0.0.0-master

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
budibase/database:2.1.0d90f656261c9
brotli@1.0.9-2+b6
no fix listed
budibase/proxy:3.41.38d780b6ee602
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

11,908
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,594
paperless-ngxfmjstudios0.2.82 of 5See more

paperless-ngx fmjstudios 0.2.8

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
brotli@1.0.9-2+b6
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

35,881
quickwitquickwit0.8.171 of 1See more

quickwit quickwit 0.8.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,751
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

119,877
nextcloudgroundhog2k0.22.91 of 3See more

nextcloud groundhog2k 0.22.9

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nextcloud:35.0.2:35.0.2-apachea588aa535370
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,346
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

28,445
litmuslitmuschaos3.30.02 of 6See more

litmus litmuschaos 3.30.0

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
brotli@1.0.9-2+b6
no fix listed
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

9,105

Container images carrying it

780 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/kubectl:1.33.1393d2a3f53a5
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/oasgen-provider:0.10.0656ec60c6407
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
brotli@1.1.0-2+b7
nodejs@18.20.8-1nodesource1
no fix listed
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/libretime/icecast:latestc371c6b71c15
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/lloesche/valheim-server:latestfde7829b12d3
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/maltzsama/lakedeepdiver:0.3.5a6e0b03141ff
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/matter-js/matterjs-server:1.5.247bc4d8354ba
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/moghtech/komodo-core:2.3.4bc2f9ae27030
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/monicahq/monica-next:main8a02508cbdcf
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/music-assistant/server:2.10.645fdb050e069
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.627597e9f4664
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/nefelim4ag/k8s-dummy-lb:0.0.6f12291f7cce5
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/observal/observal-api:1.15.1e40d18a3a739
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-17:0.0.0-2026-08-24:0.0.0-2026-08-31:0.0.0-2026-09-21:0.0.0-2026-09-283e56bdd1b90d
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/openclaw/openclaw:2026.10.5:latestf40d1e66fd14
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
brotli@1.0.9-2+b6
nodejs@22.17.1-1nodesource1
no fix listed
no fix listed
1
ghcr.io/open-webui/open-terminal:0.14.2-slimfb53967318c5
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
brotli@1.0.9-2+b6
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.