StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

59,435
testkube-runnerkubeshop2.14.21 of 1See more

testkube-runner kubeshop 2.14.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.14.2a87d63dd1632
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

288
hertzbeatkubesphere-carryon-test1.4.11 of 4See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,782
mysqlkubesphere-carryon-test1.0.21 of 3See more

mysql kubesphere-carryon-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,814
radondb-mysqlkubesphere-carryon-test1.0.11 of 3See more

radondb-mysql kubesphere-carryon-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,814
xenondbkubesphere-carryon-test1.0.01 of 3See more

xenondb kubesphere-carryon-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,814
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

92,573
mysqlkubesphere-testVerified publisher1.0.21 of 3See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,814
xenondbkubesphere-testVerified publisher1.0.01 of 3See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,814
kubestellar-consolekubestellar-consoleVerified publisher0.3.421 of 2See more

kubestellar-console kubestellar-console 0.3.42

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

6,120
kubestellar-uikubestellaruiVerified publisher0.1.12 of 4See more

kubestellar-ui kubestellarui 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mavrick1/kubestellar-b:latest45ca0429a1d4
brotli@1.1.0-r2
1.1.1-r0
mavrick1/kubestellar-f:latest56bd8eaa53a4
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

7,649
forkliftkubevirt-forkliftVerified publisher0.4.01 of 2See more

forklift kubevirt-forklift 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openresty/openresty:1.31.1.1-1-alpine-fatacd832254d9c
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,302
network-enforcerkubewardenVerified publisher0.1.31 of 3See more

network-enforcer kubewarden 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:5.1.3c5542543523c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,525
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

11,414
excalidrawkubitodevVerified publisher1.0.31 of 1See more

excalidraw kubitodev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
excalidraw/excalidraw:latestf7ee194addd6
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,385
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
brotli@1.0.9-2build6
no fix listed
penpotapp/exporter:2.2.15c835ffd87ab
brotli@1.0.9-2build6
no fix listed

Open the chart page →

20,089
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.42 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
brotli@1.1.0-2+b7
nodejs@18.20.8-1nodesource1
1.1.0-2+deb13u1
no fix listed
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

27,161
kusionkusionstackVerified publisher0.14.12 of 3See more

kusion kusionstack 0.14.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0
kusionstack/kusion:v0.14.0126c8f0b0976
brotli@1.0.9-2build6
no fix listed

Open the chart page →

66,444
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,660
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,870
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
brotli@1.0.9-2build6
no fix listed

Open the chart page →

9,264
nginx-chartkyb-nginx0.1.01 of 1See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,458
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
homebridge/homebridge:latestd2370beb6a02
brotli@1.1.0-2build2
no fix listed

Open the chart page →

25,956
kubernetes-dashboardlbenicio-communityVerified publisher7.14.101 of 5See more

kubernetes-dashboard lbenicio-community 7.14.10

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/kong:3.992035d16d7ff
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,277
stremiolbenicio-communityVerified publisher0.1.21 of 2See more

stremio lbenicio-community 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lbenicio/stremio-web:latest732f9003de33
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,320
timemachinelbenicio-communityVerified publisher0.1.31 of 1See more

timemachine lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mbentley/timemachine:latestc48db865ef5e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

35
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

45,925
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,319
kafkaleprechaun-charts0.1.31 of 1See more

kafka leprechaun-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

798
kinesaliteleprechaun-charts0.1.21 of 1See more

kinesalite leprechaun-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
instructure/kinesalite:latest34400d82f28f
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.2-1nodesource1
no fix listed
no fix listed

Open the chart page →

4,702
signal-cli-rest-apileprechaun-charts0.1.41 of 1See more

signal-cli-rest-api leprechaun-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:latest2cf09d66a86f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,206
vaultwardenleprechaun-charts0.2.291 of 1See more

vaultwarden leprechaun-charts 0.2.29

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,643
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,052
librenmslibrenms10.4.01 of 5See more

librenms librenms 10.4.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
librenms/librenms:26.10.2c2208d11f4a9
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,140
delugelinkding0.2.31 of 1See more

deluge linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,497
excalidrawlinkding0.2.31 of 1See more

excalidraw linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
excalidraw/excalidraw:latestf7ee194addd6
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,385
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
brotli@1.0.9-2+b6
nodejs@20.19.2-1nodesource1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

103,357
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
brotli@1.0.9-2build6
no fix listed

Open the chart page →

12,590
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

4,718
homerlmatfyVerified publisher0.1.11 of 1See more

homer lmatfy 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
b4bz/homer:v25.02.2c367265313f9
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

644
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,204
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,316
zigbee2mqttlmatfyVerified publisher0.1.141 of 2See more

zigbee2mqtt lmatfy 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.7.260a295b40f4e
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,557
volume-testlocal-pv0.1.01 of 1See more

volume-test local-pv 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stable-alpine47928bf67eb6
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
fireflyiii/data-importer:version-2.2.3ab52bf932546
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
fluent/fluent-bit:4.2:4.2.86806769c10ac
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
fluent/fluent-bit:4.0-debuge76397ef3983
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
flyway/flyway:9.1545b5d7cdc75a
brotli@1.0.7-6ubuntu0.1
no fix listed
1
fnzv/dump1090:latestb3079b95c336
brotli@1.0.9-2build6
no fix listed
1
folioci/mod-graphql:latestf0655a6a08fd
brotli@1.2.0-r0
1.2.1-r0
1
folioci/mod-z3950:latest2493041ce880
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
fosrl/pangolin:latest5039d0e64a2e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
fosrl/pangolin:1.13.0c32ad797ab96
brotli@1.2.0-r0
1.2.1-r0
1
frankescobar/allure-docker-service:2.35.14154286c0209
brotli@1.1.0-2build2
no fix listed
1
frankescobar/allure-docker-service:latestdc171ec796d5
brotli@1.1.0-2build2
no fix listed
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
brotli@1.0.9-2build6
no fix listed
1
freshrss/freshrss:1.30.4-alpine840765ea01fb
brotli@1.2.0-r1
1.2.1-r0
1
frinx/conductor-server:6.1.159aa36c359f2
brotli@1.0.7-6ubuntu0.1
no fix listed
1
frinx/conductor-server:6.1.0d01264a908c9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
frinx/frinx-graphql-proxy:7.0.017a139608024
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
frinx/frinx-graphql-proxy:6.1.05f1368ef47b8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
fthomas/scala-steward:latest27d7486df0a0
brotli@1.2.0-r1
1.2.1-r0
1
galaxy/cloudman-server:lateste5c265fe9fcd
brotli@1.0.9
brotli@1.0.7-6ubuntu0.1
1.2.1
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
nodejs@9.11.1-1nodesource1
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
gchq/accumulo:2.0.1c460bb587d6d
brotli@1.1.0-2build2
no fix listed
1
geldata/gel:6b3a2815a3956
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
brotli@1.0.9-2build6
no fix listed
1
geonode/geoserver_data:2.28.4-latest435cbc5f3f05
brotli@1.2.0-r1
1.2.1-r0
1
geoservercloud/geoserver-cloud-gateway:3.0.2244572a8e01d
brotli@1.2.0-3build1
no fix listed
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
brotli@1.0.7-6ubuntu0.1
no fix listed
1
geoservercloud/geoserver-cloud-gwc:3.0.25f81a737aff3
brotli@1.2.0-3build1
no fix listed
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
brotli@1.0.7-6ubuntu0.1
no fix listed
1
geoservercloud/geoserver-cloud-rest:3.0.2c14c7be99fd7
brotli@1.2.0-3build1
no fix listed
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
brotli@1.0.7-6ubuntu0.1
no fix listed
1
geoservercloud/geoserver-cloud-wcs:3.0.254cfe408a3ef
brotli@1.2.0-3build1
no fix listed
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
brotli@1.0.7-6ubuntu0.1
no fix listed
1
geoservercloud/geoserver-cloud-webui:3.0.23d01d85dcff4
brotli@1.2.0-3build1
no fix listed
1
geoservercloud/geoserver-cloud-wfs:3.0.267be5bf231e1
brotli@1.2.0-3build1
no fix listed
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
brotli@1.0.7-6ubuntu0.1
no fix listed
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
brotli@1.0.7-6ubuntu0.1
no fix listed
1
geoservercloud/geoserver-cloud-wms:3.0.26243931b4cc7
brotli@1.2.0-3build1
no fix listed
1
gethue/hue:4.11.011b649636e68
brotli@1.0.7-6ubuntu0.1
nodejs@14.21.2-deb-1nodesource1
no fix listed
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
nodejs@14.17.0-1nodesource1
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
brotli@1.0.9-2build6
nodejs@24.13.1-1nodesource1
no fix listed
no fix listed
1
getsentry/relay:24.10.0ba7bf9163219
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
getwud/wud:8.1.1b1cd01c43839
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
ghostfolio/ghostfolio:3.88.0256c524a6116
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
gitea/act_runner:nightly7940221bcfc9
brotli@1.2.0-r0
1.2.1-r0
1
gitea/act_runner:0.3.08368754bb612
brotli@1.2.0-r0
1.2.1-r0
1
gitea/act_runner:latestb5c35d6bdbb9
brotli@1.2.0-r0
1.2.1-r0
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.