StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
905
of 18,232 indexed, latest versions
Container images
780
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 905 of 18,232 indexed charts deploy, on 780 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.9-2+b6, 1.1.0-2+b7, 1.1.0-2+dhi2, 1.2.0-3no fix listed780
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ECHO-1099-6733-474bDEBIAN-CVE-2026-111497

Charts affected

905 by stars
ChartLatestAffected imagesRadar Score
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

18,048
observalobservalVerified publisher1.15.11 of 8See more

observal observal 1.15.1

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.15.1e40d18a3a739
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,684
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

113,443
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jbtronics/part-db1:latestf6523ff48db1
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,499
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache7ebeef41095c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,588
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,396
skypilotskypilotOfficialVerified publisher0.14.11 of 3See more

skypilot skypilot 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.14.125577df35586
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,818
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,737
spartanspartan0.10.01 of 1See more

spartan spartan 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest332d0beea97c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,661
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

7,557
pretixtechwolf12Verified publisher2026.8.01 of 3See more

pretix techwolf12 2026.8.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
pretix/standalone:2026.8.0ec17c2f761f7
brotli@1.1.0-2+b7
nodejs@22.23.3-1nodesource1
no fix listed
no fix listed

Open the chart page →

10,704
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,818
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablecd2c2cbaf830
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

9,402
paperlesszekker6Verified publisher11.14.01 of 1See more

paperless zekker6 11.14.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,853
paperless-ngxadnoctemVerified publisher0.5.12 of 5See more

paperless-ngx adnoctem 0.5.1

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
brotli@1.1.0-2+b7
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

29,781
agentareaagentareaVerified publisher0.0.293 of 17See more

agentarea agentarea 0.0.29

3 of the 17 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
agentarea/agentarea-api:0.1.1de166c910ef9
brotli@1.1.0-2+b7
no fix listed
agentarea/agentarea-mcp-base:0.1.18b80f30570ff
brotli@1.0.9-2+b6
no fix listed
agentarea/agentarea-mcp-runner:0.1.1066fa4a71695
brotli@1.0.9-2+b6
nodejs@22.23.3-1nodesource1
no fix listed
no fix listed

Open the chart page →

12,660
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,079
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

15,112
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,258
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,647
music-assistantbdclark-helm-chartsVerified publisher0.4.151 of 1See more

music-assistant bdclark-helm-charts 0.4.15

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,373
pgcagriekinVerified publisher2.5.01 of 2See more

pg cagriekin 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,260
pgvectorcagriekinVerified publisher2.5.01 of 3See more

pgvector cagriekin 2.5.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,692
carbone-eecarboneOfficialVerified publisher1.0.91 of 1See more

carbone-ee carbone 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
carbone/carbone-ee:full-5.15.447dee6e75c95
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,105
home-assistant-matter-servercharts-derwitt-devVerified publisher4.4.11 of 2See more

home-assistant-matter-server charts-derwitt-dev 4.4.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/matter-js/matterjs-server:1.5.247bc4d8354ba
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,750
typo3christianhuthVerified publisher8.0.11 of 1See more

typo3 christianhuth 8.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
crinis/typo3:legacy-13.4.365636db17b924
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,718
claude-code-hubclaude-code-hub0.1.01 of 4See more

claude-code-hub claude-code-hub 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ding113/claude-code-hub:latestfa7c6f5428c2
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,370
dawarichcogitriVerified publisher2.10.01 of 3See more

dawarich cogitri 2.10.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
freikin/dawarich:1.16.0b533e6eac446
brotli@1.1.0-2+b7
nodejs@20.19.2+dfsg-1+deb13u3
no fix listed
no fix listed

Open the chart page →

6,727
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,178
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

13,591
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

16,543
dbrepodbrepo1.13.34 of 25See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
brotli@1.0.9-2+b6
no fix listed
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
brotli@1.0.9-2+b6
no fix listed
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
brotli@1.0.9-2+b6
no fix listed
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

63,615
mealiedeimosfr-charts1.0.171 of 1See more

mealie deimosfr-charts 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,045
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

91,975
nginx-phpfpmdrpsychickVerified publisher0.1.11 of 2See more

nginx-phpfpm drpsychick 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,682
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,199
elastalert2elastalert22.31.01 of 1See more

elastalert2 elastalert2 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jertel/elastalert2:2.31.03cbf63f9b7dc
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,414
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
brotli@1.1.0-2+b7
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

76,510
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,904
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
brotli@1.0.9-2+b6
nodejs@18.20.4-1nodesource1
no fix listed
no fix listed

Open the chart page →

79,213
rss-bridgegabe565Verified publisher0.5.21 of 1See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/rss-bridge/rss-bridge:latestfcd6ac6335ef
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,229
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latestfde7829b12d3
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,847
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,689
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

75,861
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

62,106
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,868
matomohelmforgeVerified publisher2.3.51 of 3See more

matomo helmforge 2.3.5

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/matomo:5.14.0-apache1e0019262702
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,172
uptime-kumahelmforgeVerified publisher1.5.171 of 1See more

uptime-kuma helmforge 1.5.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

39,295
vaultwardenhelmforgeVerified publisher1.14.51 of 1See more

vaultwarden helmforge 1.14.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.37.4efb3cde96201
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,576
mywebapphelm-nginxVerified publisher0.1.01 of 1See more

mywebapp helm-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,661

Container images carrying it

780 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/kubectl:1.33.1393d2a3f53a5
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/oasgen-provider:0.10.0656ec60c6407
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
brotli@1.1.0-2+b7
nodejs@18.20.8-1nodesource1
no fix listed
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/libretime/icecast:latestc371c6b71c15
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/lloesche/valheim-server:latestfde7829b12d3
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/maltzsama/lakedeepdiver:0.3.5a6e0b03141ff
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/matter-js/matterjs-server:1.5.247bc4d8354ba
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/moghtech/komodo-core:2.3.4bc2f9ae27030
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/monicahq/monica-next:main8a02508cbdcf
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/music-assistant/server:2.10.645fdb050e069
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.627597e9f4664
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/nefelim4ag/k8s-dummy-lb:0.0.6f12291f7cce5
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/observal/observal-api:1.15.1e40d18a3a739
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-17:0.0.0-2026-08-24:0.0.0-2026-08-31:0.0.0-2026-09-21:0.0.0-2026-09-283e56bdd1b90d
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/openclaw/openclaw:2026.10.5:latestf40d1e66fd14
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
brotli@1.0.9-2+b6
nodejs@22.17.1-1nodesource1
no fix listed
no fix listed
1
ghcr.io/open-webui/open-terminal:0.14.2-slimfb53967318c5
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
brotli@1.0.9-2+b6
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.