StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,152
of 18,232 indexed, latest versions
Container images
1,034
deployed by those charts
Fix available
4 of 5
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 1,152 of 18,232 indexed charts deploy, on 1,034 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+3 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1936
brotliapk1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r088
nodejsdeb14.15.3-deb-1nodesource1, 14.17.0-1nodesource1, 16.7.0-deb-1nodesource1, 16.14.2-deb-1nodesource1+21 moreno fix listed32
brotlipypi1.0.9, 1.1.0, 1.2.01.2.120
brotlicffipypi1.2.0.11.2.1.01
OSV records
ALPINE-CVE-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-2026-111497, BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

1,152 by stars
ChartLatestAffected imagesRadar Score
pezesha-applicationspezesha-applications0.3.01 of 1See more

pezesha-applications pezesha-applications 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

62,080
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

64,777
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

87,521
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

78,658
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

79,294
pinpointpinpointVerified publisher3.1.72 of 13See more

pinpoint pinpoint 3.1.7

2 of the 13 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:4.0.0-debian-12-r10aa0b2aee8c56
brotli@1.0.9-2+b6
no fix listed
bitnamilegacy/zookeeper:3.9.3-debian-12-r212982759ec212
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

34,351
spring-boot-openshiftpiominVerified publisher0.3.111 of 1See more

spring-boot-openshift piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
brotli@1.0.9-2build6
no fix listed

Open the chart page →

8,114
pipekitpipekit-helmOfficialVerified publisher8.5.81 of 6See more

pipekit pipekit-helm 8.5.8

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:5.1.3c5542543523c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

970
web-chartpjw-ktcloudlab0.1.01 of 1See more

web-chart pjw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/node:208f693eaa7e0a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

76,475
k8s-oidc-discovery-providerpnnl-miscscripts0.1.21 of 2See more

k8s-oidc-discovery-provider pnnl-miscscripts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,951
nginx-apppnnl-miscscripts0.1.21 of 1See more

nginx-app pnnl-miscscripts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
pixiecore-simpleconfigpnnl-miscscripts0.1.51 of 1See more

pixiecore-simpleconfig pnnl-miscscripts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

87,997
libretimepodzone-chartsVerified publisher0.4.12 of 9See more

libretime podzone-charts 0.4.1

2 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
no fix listed
ghcr.io/libretime/icecast:latestc371c6b71c15
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

12,898
static-sitepodzone-chartsVerified publisher0.1.11 of 2See more

static-site podzone-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,656
agentpolyaxon2.18.03 of 4See more

agent polyaxon 2.18.0

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-cli:2.18.09cf0955704ee
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

10,372
polyaxonpolyaxon2.18.03 of 5See more

polyaxon polyaxon 2.18.0

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-api:2.18.0b795f2b224d2
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-cli:2.18.09cf0955704ee
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

14,347
quickwitportefaix-hub0.1.11 of 1See more

quickwit portefaix-hub 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.1d29332bdadcc
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,900
port-agentport-labsVerified publisher0.8.171 of 1See more

port-agent port-labs 0.8.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/port-labs/port-agent:v0.8.13b49d723a99fc
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

370
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

71,982
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

9,089
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:latestd42f63cb89ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,746
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,403
web-chartpsb-ktcloudlab0.1.01 of 1See more

web-chart psb-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
web-chartpsg-ktcloudlab0.1.01 of 1See more

web-chart psg-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
nginx-chartpshs-nginx0.1.01 of 1See more

nginx-chart pshs-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
apppvillaverdeVerified publisher0.2.61 of 1See more

app pvillaverde 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.31332d0beea97c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,661
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

98,916
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

83,071
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

83,071
open-terminalqaoruVerified publisher0.2.81 of 1See more

open-terminal qaoru 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/open-webui/open-terminal:0.14.2-slimfb53967318c5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,563
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,479
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

9,816
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,836
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

24,458
my-nginx-apprepo-for-helm-nginx-app0.1.01 of 1See more

my-nginx-app repo-for-helm-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,063
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

8,326
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,002
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

65,605
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

72,445
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
brotli@1.0.9-2+b6
no fix listed
istio/examples-helloworld-v2:latest0a7f02b2c7c9
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,124
kresusrm3lVerified publisher0.3.01 of 3See more

kresus rm3l 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

77,847
web-checkrm3lVerified publisher0.2.01 of 1See more

web-check rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lissy93/web-check:latest5e4feb4acbd5
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,867
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

12,612
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
monitoringrocketchat-server0.0.171 of 9See more

monitoring rocketchat-server 0.0.17

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

11,110
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,884

Container images carrying it

1,034 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
sigscale/im:2.1.1-160ee9b3d5721
brotli@1.0.9-2+b6
no fix listed
1
sigscale/ocs:latest3b8ec91d359d
brotli@1.0.9-2+b6
no fix listed
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sissbruecker/linkding:1.35.00c5dddf0b37c
brotli@1.0.9-2+b6
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
brotli@1.0.9-2+b6
nodejs@20.19.2-1nodesource1
no fix listed
no fix listed
1
sissbruecker/linkding:1.47.0e35cb50e0581
brotli@1.1.0-2+b7
no fix listed
1
snipe/snipe-it:v6.0.1455fb7636a98c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
brotli@1.0.9-2+b6
no fix listed
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
brotli@1.0.9-2+b6
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
brotli@1.0.9-2+b6
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
brotli@1.0.9-2+b6
no fix listed
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
brotli@1.0.9-2+b6
no fix listed
1
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
brotli@1.0.9-2+b6
no fix listed
1
somnathmore/custom-nginx:v2bdfc06cad4ec
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
speckle/speckle-preview-service:2.26.3092384dba45d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
brotli@1.0.9-2+b6
no fix listed
1
sslhep/servicex_app:v1.8.6c935e123030d
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.696805be717ff
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
brotli@1.1.0-2+b7
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2api:3.86f56d239d280
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2auth:3.833ecfda16608
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2notifier:3.8f190a6212195
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2rulesengine:3.8259503496ff9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2scheduler:3.8b1de2055c362
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2web:3.809989a26c8b7
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
statcan/ckan:2.93921305425b8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
strangebee/thehive:6.0.0-14f6db02bb2b8
brotli@1.0.9-2+b6
no fix listed
1
structurizr/onpremises:2025.11.094b5ffb5119c8
brotli@1.1.0-2build2
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
brotli@1.0.9-2+b6
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.