StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
978
of 18,232 indexed, latest versions
Container images
846
deployed by those charts
Fix available
3 of 4
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 978 of 18,232 indexed charts deploy, on 846 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+4 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1815
brotliapk1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r030
brotlipypi1.0.9, 1.1.01.2.14
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ALPINE-CVE-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322UBUNTU-CVE-2026-111497
Also known as
BIT-node-2026-111497, BIT-node-min-2026-111497, PYSEC-2026-4323

Charts affected

978 by stars
ChartLatestAffected imagesRadar Score
jenkinsstakaterVerified publisher0.21.01 of 1See more

jenkins stakater 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,187
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

103,652
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

65,754
stalwartstalwart-helmVerified publisher0.9.21See more

stalwart stalwart-helm 0.9.2

1 container image this version deploys carries CVE-2026-111497.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.27c429b311c93d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

—
steadybit-agentsteadybit3.1.1901 of 6See more

steadybit-agent steadybit 3.1.190

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/steadybit/agent:2.4.87af728baabbe
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,679
minkstoneshi-tscharts0.1.01 of 1See more

mink stoneshi-tscharts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

84,936
3d-printing-cost-calculatorssudo-kraken-3d-printing-cost-calculatorsVerified publisher0.1.41 of 1See more

3d-printing-cost-calculators sudo-kraken-3d-printing-cost-calculators 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,929
authentik-webfinger-proxysudo-kraken-authentik-webfinger-proxyVerified publisher0.1.41 of 1See more

authentik-webfinger-proxy sudo-kraken-authentik-webfinger-proxy 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,042
fantasy-dice-chambersudo-kraken-fantasy-dice-chamberVerified publisher0.1.31 of 1See more

fantasy-dice-chamber sudo-kraken-fantasy-dice-chamber 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,081
finances-trackersudo-kraken-finances-trackerVerified publisher0.1.51 of 1See more

finances-tracker sudo-kraken-finances-tracker 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,042
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

41,715
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,885
jf-pushover-webhooksudo-kraken-jf-pushover-webhookVerified publisher0.1.31 of 1See more

jf-pushover-webhook sudo-kraken-jf-pushover-webhook 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,042
nginx-chartsuin-nginx0.1.01 of 1See more

nginx-chart suin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

83,601
app-startersynkubeVerified publisher1.4.11 of 1See more

app-starter synkube 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,810
vaultwardensyself1.0.01 of 1See more

vaultwarden syself 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:latestefb3cde96201
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,576
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

77,091
nginx-charttaeseon-nginx0.1.01 of 1See more

nginx-chart taeseon-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
super-mariotechpreta0.1.11 of 1See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nirmalnaveen/supermario:latest8541a39162f3
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,683
supabaseteochenglim0.1.23 of 13See more

supabase teochenglim 0.1.2

3 of the 13 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
supabase/logflare:latest9d9c8f8c4626
brotli@1.1.0-2+b7
no fix listed
supabase/realtime:latest768b559241dd
brotli@1.1.0-2+b7
no fix listed
supabase/studio:latestd878dcd9dba7
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

32,654
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:latest62a50b1419fe
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,089
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

74,288
functionstest-helm-chart-hoanganht1k27Verified publisher0.1.11 of 1See more

functions test-helm-chart-hoanganht1k27 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest956eac231bb3
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,661
myfirstcharttest-helm-charts0.2.01 of 1See more

myfirstchart test-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
chatqnatest-opea1.0.02 of 11See more

chatqna test-opea 1.0.0

2 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
brotli@1.0.9-2+b6
no fix listed
opea/chatqna:1.038c51b791efa
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

44,520
codegentest-opea1.0.03 of 5See more

codegen test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
brotli@1.0.9-2+b6
no fix listed
opea/codegen:1.058f91683892d
brotli@1.0.9-2+b6
no fix listed
opea/codegen-ui:1.02bee4eb66f3e
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

106,684
codetranstest-opea1.0.03 of 5See more

codetrans test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
brotli@1.0.9-2+b6
no fix listed
opea/codetrans:1.0e2436483b73d
brotli@1.0.9-2+b6
no fix listed
opea/codetrans-ui:1.03ef121f34610
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

106,203
docsumtest-opea1.0.03 of 5See more

docsum test-opea 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
brotli@1.0.9-2+b6
no fix listed
opea/docsum:1.03eaa91849512
brotli@1.0.9-2+b6
no fix listed
opea/docsum-ui:1.07f854e9bffaf
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

106,706
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,769
codeth-chartsVerified publisher0.1.01 of 1See more

code th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
collabora/code:24.04.13.2.101dc4ab83977
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,573
jellyfinth-chartsVerified publisher0.1.01 of 1See more

jellyfin th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.77ae36aab93ef
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,320
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

64,645
voyagertibuntu1.2.01 of 1See more

voyager tibuntu 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/aeharding/voyager:latest8e9d9ed499e3
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,326
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,199
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,221
traefik-external-dns-controllertraefik-external-dns-operator2.3.01 of 1See more

traefik-external-dns-controller traefik-external-dns-operator 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-controller:2.3.0cc22a16fac81
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,517
pr-previewtrainyard-pr-previewVerified publisher1.1.11 of 1See more

pr-preview trainyard-pr-preview 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
trident-protect-consoletrident-protect100.2609.1-console1 of 3See more

trident-protect-console trident-protect 100.2609.1-console

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v3.0.0cad26cd945d1
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

7,808
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

95,315
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,140
applicationuniversal-helm-chartVerified publisher0.4.51 of 1See more

application universal-helm-chart 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
unlaunla0.10.01 of 3See more

unla unla 0.10.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/amoylab/unla/web:latesteac1df1c5e66
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

11,048
powerdnsunxwaresVerified publisher2026.10.11 of 1See more

powerdns unxwares 2026.10.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
powerdns/pdns-auth-51:5.1.4bb5b1c133bcc
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,546
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

96,345
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,742
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

69,516
video-dl-botvideo-dl-botVerified publisher1.4.31 of 1See more

video-dl-bot video-dl-bot 1.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
brotli@1.1.0-2+b7
nodejs@24.20.0-1nodesource1
no fix listed
no fix listed

Open the chart page →

2,477
argus-test-envvk-helm-charts2.0.01 of 1See more

argus-test-env vk-helm-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588

Container images carrying it

846 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.65e735d875fe7
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/dani-garcia/vaultwarden:1.33.2-alpine63cce7624f65
brotli@1.1.0-r2
1.1.1-r0
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/dask/dask:2024.1.0080150de7d86
brotli@1.1.0
brotli@1.0.7-6ubuntu0.1
1.2.1
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
brotli@1.1.0
brotli@1.0.9-2build6
1.2.1
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/deven96/ahnlich-db:latest075301b4cfe1
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/ding113/claude-code-hub:latestfa7c6f5428c2
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/esphome/esphome:latest776a845d5089
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/esphome/esphome:2026.7.4e636269c6390
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/felddy/foundryvtt:14.369.076497e09a7ee
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/feresberbeche/alertigate:2.0.07b9bba80f207
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/fluent/fluentd-aggregator-docker-image:2.2.0f6ae79dfc5f9
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/fluxerapp/fluxer-app-proxy-self-hosted:2026.820.1549337d59465eb5ab
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/fluxerapp/fluxer-gateway:2026.818.14094351d6f973843f
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/goauthentik/server:2026.8.5602227a86455
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
brotli@1.0.9
1.2.1
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
brotli@1.1.0-2build2
no fix listed
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
brotli@1.1.0-2+b7
nodejs@20.20.0-1nodesource1
no fix listed
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.