StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
978
of 18,232 indexed, latest versions
Container images
846
deployed by those charts
Fix available
3 of 4
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 978 of 18,232 indexed charts deploy, on 846 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+4 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1815
brotliapk1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r030
brotlipypi1.0.9, 1.1.01.2.14
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ALPINE-CVE-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322UBUNTU-CVE-2026-111497
Also known as
BIT-node-2026-111497, BIT-node-min-2026-111497, PYSEC-2026-4323

Charts affected

978 by stars
ChartLatestAffected imagesRadar Score
speedtestsantisbon0.1.02 of 3See more

speedtest santisbon 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
brotli@1.0.9-2+b6
no fix listed
santisbon/speedtest:latest8ee3a1697227
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

94,964
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

12,007
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,468
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

11,552
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

63,803
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,366
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

56,972
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

89,216
dawarichschichtelVerified publisher0.5.01 of 1See more

dawarich schichtel 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
freikin/dawarich:1.16.0b533e6eac446
brotli@1.1.0-2+b7
nodejs@20.19.2+dfsg-1+deb13u3
no fix listed
no fix listed

Open the chart page →

6,504
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,372
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,167
vaultwardenschichtelVerified publisher0.9.41 of 1See more

vaultwarden schichtel 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.37.4efb3cde96201
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,576
wordpressschichtelVerified publisher0.11.02 of 2See more

wordpress schichtel 0.11.0

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:7.1.3-fpm0453b09f7e78
brotli@1.1.0-2+b7
no fix listed
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

7,083
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
redimp/otterwiki:2b7ece5b8d7cc
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,135
seafileschmitzis13.0.131 of 4See more

seafile schmitzis 13.0.13

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:mainlinef9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

45,095
uptime-kumaschoenwald1.0.101 of 1See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

39,370
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,491
typo3schoolguys-helmcharts0.5.01 of 1See more

typo3 schoolguys-helmcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.36-f6d9c8816f322770697e
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

17,233
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,854
trivysecurecodebox-trivy5.9.01 of 1See more

trivy securecodebox-trivy 5.9.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aquasec/trivy:0.74.062b1e65e8869
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

894
my-nginx-appsherif-nginx-app0.1.01 of 1See more

my-nginx-app sherif-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
backendsignalen4.25.01 of 4See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
signalen/backend:2.50.1826bb090bc4e4
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

36,809
sigscale-cgfsigscale-cgfOfficialVerified publisher1.0.81 of 1See more

sigscale-cgf sigscale-cgf 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sigscale/cgf:lateste076e06d7647
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,102
sigscale-imsigscale-imOfficialVerified publisher1.0.31 of 1See more

sigscale-im sigscale-im 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sigscale/im:2.1.1-160ee9b3d5721
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,741
kubernetes-dashboard-gatewaysikalabs0.1.01 of 1See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:latestf3e6835fa7d4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,635
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
bitwardensinextraVerified publisher0.10.41 of 1See more

bitwarden sinextra 0.10.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.37.4efb3cde96201
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,576
infisicalsinextraVerified publisher0.7.21 of 1See more

infisical sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
infisical/infisical:v0.166.8bb8352b71cea
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,219
sistas-rasasistas-chatbot5.0.21 of 3See more

sistas-rasa sistas-chatbot 5.0.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest58adaa4e8dca
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

113
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,259
deconzsmall-hack0.1.01 of 1See more

deconz small-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.26.123c86008d73f
brotli@1.0.9-2+b6
nodejs@18.19.0+dfsg-6~deb12u1
no fix listed
no fix listed

Open the chart page →

14,935
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

10,031
daemonsetsnowplow-devopsVerified publisher0.7.11 of 1See more

daemonset snowplow-devops 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest332d0beea97c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,661
service-deploymentsnowplow-devopsVerified publisher0.43.11 of 1See more

service-deployment snowplow-devops 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stabled715f7a85cdf
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,732
ingress-nginxsoftonic4.15.11 of 2See more

ingress-nginx softonic 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,421
nginx-chartsongduckbae-nginx0.1.01 of 1See more

nginx-chart songduckbae-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

78,237
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,430
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

17,762
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

17,848
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

15,939
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

17,848
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

15,544
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

15,544
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

17,416
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

17,090
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

12,170
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,872
servicexssl-hep1.8.610 of 16See more

servicex ssl-hep 1.8.6

10 of the 16 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/python:3.10c10791e6f690
brotli@1.1.0-2+b7
no fix listed
sslhep/servicex_app:v1.8.6c935e123030d
brotli@1.1.0-2+b7
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
brotli@1.1.0-2+b7
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
brotli@1.1.0-2+b7
no fix listed
sslhep/servicex_code_gen_python:v1.8.696805be717ff
brotli@1.1.0-2+b7
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
brotli@1.1.0-2+b7
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
brotli@1.1.0-2+b7
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
brotli@1.1.0-2+b7
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
brotli@1.1.0-2+b7
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

67,074

Container images carrying it

846 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.42538ea1c9640
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
brotli@1.0.9-2+b6
nodejs@18.20.4+dfsg-1~deb12u1
no fix listed
no fix listed
1
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/infiniteprimates/nilchela:0.0.5098e6879c83c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/jellyfin/jellyfin:12.2c3efa69a22f2
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/kubectl:1.33.1393d2a3f53a5
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/oasgen-provider:0.10.0656ec60c6407
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
brotli@1.1.0-2+b7
nodejs@18.20.8-1nodesource1
no fix listed
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/libretime/icecast:latestc371c6b71c15
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
brotli@1.1.0-r2
1.1.1-r0
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
brotli@1.1.0-2build2
no fix listed
1
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/lloesche/valheim-server:latestfde7829b12d3
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/maltzsama/lakedeepdiver:0.3.5a6e0b03141ff
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/moghtech/komodo-core:2.3.4bc2f9ae27030
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/monicahq/monica-next:main8a02508cbdcf
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/music-assistant/server:2.10.645fdb050e069
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.627597e9f4664
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/nefelim4ag/k8s-dummy-lb:0.0.6f12291f7cce5
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/observal/observal-api:1.15.1e40d18a3a739
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/okteto/buildkit:0.0.0-2026-08-03:0.0.0-2026-08-17:0.0.0-2026-08-24:0.0.0-2026-08-31:0.0.0-2026-09-21:0.0.0-2026-09-2814527ca5d2a9
brotli@1.2.0-r0
1.2.1-r0
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-17:0.0.0-2026-08-24:0.0.0-2026-08-31:0.0.0-2026-09-21:0.0.0-2026-09-283e56bdd1b90d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
ghcr.io/openclaw/openclaw:2026.10.5:latestf40d1e66fd14
brotli@1.0.9-2+b6
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.