StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,408
of 18,232 indexed, latest versions
Container images
1,315
deployed by those charts
Fix available
4 of 5
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 1,408 of 18,232 indexed charts deploy, on 1,315 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+4 more1.0.9-2+deb12u1, 1.1.0-2+deb13u11,101
brotliapk1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0185
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 9.11.1-1nodesource1+32 moreno fix listed47
brotlipypi1.0.9, 1.1.0, 1.2.01.2.142
brotlicffipypi1.2.0.11.2.1.01
OSV records
ALPINE-CVE-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-2026-111497, BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

1,408 by stars
ChartLatestAffected imagesRadar Score
web-chartktcloudlabstudent0.1.01 of 1See more

web-chart ktcloudlabstudent 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
web-chartktcloudljw0.1.01 of 1See more

web-chart ktcloudljw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
kubeadapt-k8s-pulsekubeadaptVerified publisher1.0.21 of 1See more

kubeadapt-k8s-pulse kubeadapt 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,955
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
brotli@1.1.0-2+b7
brotli@1.1.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

10,189
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

17,999
ingress-nginxkubeblocksVerified publisher4.12.11 of 2See more

ingress-nginx kubeblocks 4.12.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,984
kubecachekubecacheVerified publisher0.14.11 of 1See more

kubecache kubecache 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
udhos/kubecache:0.14.1f44ef986df49
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

714
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,631
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.2.02 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.2.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
brotli@1.2.0-r1
1.2.1-r0
fireflyiii/core:version-6.6.6ae69fdd95cde
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,429
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

13,682
scrutinykubernetes-homelab-helm-chartsVerified publisher0.3.02 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.3.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/influxdb:2.9.18f106f7ff126
brotli@1.0.9-2+b6
no fix listed
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,311
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.3.01 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,596
vaultwardenkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

vaultwarden kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,576
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

36,844
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

58,445
hertzbeatkubesphere-carryon-test1.4.11 of 4See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,729
mysqlkubesphere-carryon-test1.0.21 of 3See more

mysql kubesphere-carryon-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,764
radondb-mysqlkubesphere-carryon-test1.0.11 of 3See more

radondb-mysql kubesphere-carryon-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,764
xenondbkubesphere-carryon-test1.0.01 of 3See more

xenondb kubesphere-carryon-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,764
mysqlkubesphere-testVerified publisher1.0.21 of 3See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,764
xenondbkubesphere-testVerified publisher1.0.01 of 3See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,764
kubestellar-consolekubestellar-consoleVerified publisher0.3.421 of 2See more

kubestellar-console kubestellar-console 0.3.42

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

6,088
kubestellar-uikubestellaruiVerified publisher0.1.12 of 4See more

kubestellar-ui kubestellarui 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mavrick1/kubestellar-b:latest45ca0429a1d4
brotli@1.1.0-r2
1.1.1-r0
mavrick1/kubestellar-f:latest56bd8eaa53a4
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

7,603
network-enforcerkubewardenVerified publisher0.1.31 of 3See more

network-enforcer kubewarden 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:5.1.3c5542543523c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,454
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

11,009
excalidrawkubitodevVerified publisher1.0.31 of 1See more

excalidraw kubitodev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
excalidraw/excalidraw:latestf7ee194addd6
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,369
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.42 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
brotli@1.1.0-2+b7
nodejs@18.20.8-1nodesource1
1.1.0-2+deb13u1
no fix listed
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

26,625
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
brotli@1.0.9-2build6
no fix listed

Open the chart page →

66,390
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,600
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,828
nginx-chartkyb-nginx0.1.01 of 1See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,428
stremiolbenicio-communityVerified publisher0.1.21 of 2See more

stremio lbenicio-community 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lbenicio/stremio-web:latest732f9003de33
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,292
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

42,850
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,199
kafkaleprechaun-charts0.1.31 of 1See more

kafka leprechaun-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

782
signal-cli-rest-apileprechaun-charts0.1.41 of 1See more

signal-cli-rest-api leprechaun-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:latest2cf09d66a86f
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,902
vaultwardenleprechaun-charts0.2.291 of 1See more

vaultwarden leprechaun-charts 0.2.29

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,576
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,931
delugelinkding0.2.31 of 1See more

deluge linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,423
excalidrawlinkding0.2.31 of 1See more

excalidraw linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
excalidraw/excalidraw:latestf7ee194addd6
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,369
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
brotli@1.0.9-2+b6
nodejs@20.19.2-1nodesource1
no fix listed
no fix listed

Open the chart page →

99,618
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
brotli@1.0.9-2build6
no fix listed

Open the chart page →

12,453
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

4,436
homerlmatfyVerified publisher0.1.11 of 1See more

homer lmatfy 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
b4bz/homer:v25.02.2c367265313f9
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

628
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,079
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,259
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
brotli@1.1.0
1.2.1

Open the chart page →

9,359

Container images carrying it

1,315 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
nacos/nacos-server:v3.0.130a39cb0c54d
brotli@1.1.0-r2
1.1.1-r0
1
natsio/nats-box:0.19.7ffce8bd10338
brotli@1.2.0-r0
1.2.1-r0
1
netapp/trident-protect-utils:v3.0.0cad26cd945d1
brotli@1.1.0-2+b7
no fix listed
1
netboxcommunity/netbox:v3.2.83d652dca5351
brotli@1.0.9-2build6
no fix listed
1
netdata/netdata:v2.12.15cfa05a5fa56
brotli@1.1.0-2+b7
no fix listed
1
nethermind/nethermind:1.14.615517708c3b6
brotli@1.0.9-2build6
no fix listed
1
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
brotli@1.2.0-r0
1.2.1-r0
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
brotli@1.1.0-2+b7
no fix listed
1
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
brotli@1.1.0-r2
1.1.1-r0
1
nginxinc/nginx-unprivileged:1.31.2-alpine3.236320020c7da8
brotli@1.2.0-r0
1.2.1-r0
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
nginxinc/nginx-unprivileged:stabled715f7a85cdf
brotli@1.1.0-2+b7
no fix listed
1
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
brotli@1.2.0-r0
1.2.1-r0
1
nginxinc/nginx-unprivileged:1.31.3-alpinef972e5322b97
brotli@1.2.0-r1
1.2.1-r0
1
nginx/nginx-ingress:edge9b13f0b831ab
brotli@1.1.0-2+b7
no fix listed
1
nginx/nginx-ingress:5.7.0c603a5cbac85
brotli@1.1.0-2+b7
no fix listed
1
nirmalnaveen/supermario:latest8541a39162f3
brotli@1.0.9-2+b6
no fix listed
1
nocodb/nocodb:0.301.5d9516f0bf546
brotli@1.1.0-r2
1.1.1-r0
1
nodered/node-red:5.0.410f40d0a83e7
brotli@1.2.0-r1
1.2.1-r0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
brotli@1.2.0-r0
1.2.1-r0
1
nomansadiq11/connectivitytest:v1.0.0eb14ccf304a7
brotli@1.0.9-2+b6
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
brotli@1.1.0-2+b7
brotlicffi@1.2.0.1
1.1.0-2+deb13u1
1.2.1.0
1
nousresearch/hermes-agent:v2026.9.24fca358f12efd
brotli@1.1.0-2+b7
no fix listed
1
obolnetwork/helios:e10e753cb7e97d39d46
brotli@1.1.0-2build2
no fix listed
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
brotli@1.0.9-2+b6
nodejs@18.20.4+dfsg-1~deb12u1
1.0.9-2+deb12u1
no fix listed
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
brotli@1.0.9-2+b6
nodejs@18.19.0+dfsg-6~deb12u2
1.0.9-2+deb12u1
no fix listed
1
oled01/automx2:2025.1.105d3e398e675
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
oled01/db-backup:0.1.06302fd2b5333
brotli@1.0.9-2build6
no fix listed
1
olvid/bot-daemon:2.0.1e0e6b165d879
brotli@1.1.0-2build2
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
nodejs@8.9.4-1nodesource1
no fix listed
1
onyxdotapp/onyx-backend:latestf76bfd1f3c18
brotli@1.1.0-2+b7
no fix listed
1
opea/chatqna:1.038c51b791efa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codegen:1.058f91683892d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codegen-ui:1.02bee4eb66f3e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codetrans:1.0e2436483b73d
brotli@1.0.9-2+b6
no fix listed
1
opea/codetrans-ui:1.03ef121f34610
brotli@1.0.9-2+b6
no fix listed
1
opea/docsum:1.03eaa91849512
brotli@1.0.9-2+b6
no fix listed
1
opea/docsum-ui:1.07f854e9bffaf
brotli@1.0.9-2+b6
no fix listed
1
opea/speecht5:1.0249afad3d268
brotli@1.0.9-2+b6
no fix listed
1
openbas/platform:2.0.5d986d80b0a75
brotli@1.1.0-2build2
no fix listed
1
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
brotli@1.0.9-2+b6
no fix listed
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
brotli@1.1.0-2+b7
no fix listed
1
opencsghq/csghub-xnet:v2.6.0-ee2aefb4393ddf
brotli@1.0.9-2+b6
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.