StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
876
of 18,232 indexed, latest versions
Container images
750
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 876 of 18,232 indexed charts deploy, on 750 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.9-2+b6, 1.1.0-2+b7, 1.1.0-2+dhi2, 1.2.0-3no fix listed750
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ECHO-1099-6733-474bDEBIAN-CVE-2026-111497

Charts affected

876 by stars
ChartLatestAffected imagesRadar Score
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

59,034
dependency-trackmediamarktsaturn1.9.21 of 2See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,488
flaresolverrmedia-servarrVerified publisher0.19.01 of 1See more

flaresolverr media-servarr 0.19.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

13,682
tinymediamanagermedia-servarrVerified publisher1.7.11 of 2See more

tinymediamanager media-servarr 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.448c15784a127
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

10,673
mediawikimediawiki0.4.21 of 1See more

mediawiki mediawiki 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mediawiki:1.43.08b19e819f2e1
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

65,983
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

64,688
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,423
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,437
testmesosphere0.1.01 of 1See more

test mesosphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
dexmesosphere-stable2.14.21 of 5See more

dex mesosphere-stable 2.14.2

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

23,038
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,423
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

14,679
servicesmicroslacVerified publisher0.4.04 of 8See more

services microslac 0.4.0

4 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
microslac/auth:latest5c1eb1f5c64d
brotli@1.0.9-2+b6
no fix listed
microslac/conversations:latest1b24afcd71ff
brotli@1.0.9-2+b6
no fix listed
microslac/teams:latest0f75997fcbe5
brotli@1.0.9-2+b6
no fix listed
microslac/users:latest216ea6832a56
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

358,351
teimilvus-helm1.6.01 of 1See more

tei milvus-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,521
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

68,657
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

169,156
simplewebappmlohrVerified publisher1.1.01 of 1See more

simplewebapp mlohr 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
mongo-compassmongo-compass-webVerified publisher1.1.41 of 1See more

mongo-compass mongo-compass-web 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.1f4f8fe4e21f1
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,237
mongo-compassmongo-compass-web-helm1.1.01 of 1See more

mongo-compass mongo-compass-web-helm 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.054f2112602ee
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,900
moodlemoodle2.0.11 of 2See more

moodle moodle 2.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cloudtooling/moodle:5.3.0.370961e4169fb
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,951
camera-viewermoreillonVerified publisher0.2.11 of 4See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
moreillon/camera-viewer:lateste418cc694bd5
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

14,087
group-managermoreillonVerified publisher0.4.41 of 3See more

group-manager moreillon 0.4.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
moreillon/group-manager-front:v3.3.1c9f85db3baa5
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,949
user-manager-mongodbmoreillonVerified publisher0.6.22 of 4See more

user-manager-mongodb moreillon 0.6.2

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
moreillon/user-manager-front:v5.0.3b067dbbbb6af
brotli@1.0.9-2+b6
no fix listed
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

105,749
user-manager-neo4jmoreillonVerified publisher0.9.73 of 6See more

user-manager-neo4j moreillon 0.9.7

3 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
moreillon/group-manager-front:v3.3.1c9f85db3baa5
brotli@1.0.9-2+b6
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
brotli@1.0.9-2+b6
no fix listed
moreillon/user-manager-front:v5.1.06597e6b98d21
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

110,369
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

7,232
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
machines/filestash:latest12bd8c30da4d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,401
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

14,677
vaultwardenmt1905027.3.41 of 3See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.443498a94b22f
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,391
backendmulti-chart-app0.1.01 of 1See more

backend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
frontendmulti-chart-app0.1.01 of 1See more

frontend multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
my-multi-chart-appmulti-chart-app0.1.01 of 2See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,283
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

90,179
apachemy-chart-repo0.1.01 of 2See more

apache my-chart-repo 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4c842ac797bd1
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,660
my-helm-chartmy-helm-charts-2024Verified publisher0.1.01 of 1See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
shamimkuet/nginx:1.0.2b82902a76a04
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,756
nginx-chartmyk8scharts1.0.01 of 1See more

nginx-chart myk8scharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
nginx-appmy-nginx-app0.1.31 of 1See more

nginx-app my-nginx-app 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
influxdbmy-personal-influxdb20.1.01 of 1See more

influxdb my-personal-influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,185
helloworldmysql2s3bk0.1.01 of 1See more

helloworld mysql2s3bk 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
mystoremystore-chart0.1.02 of 3See more

mystore mystore-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hazegoodlife/haaze:veggiesite50f02d2d5d4d
brotli@1.0.9-2+b6
no fix listed
hazegoodlife/haaze:milksite8d4c63169e14
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,276
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hecrom/myweatherangularclient:1.3.11bb0372939c19
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

20,366
my-nginxna-helm-chartsVerified publisher1.0.01 of 1See more

my-nginx na-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
dependency-tracknaj980.0.91 of 3See more

dependency-track naj98 0.0.9

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dependencytrack/apiserver:latest4d41f29ce886
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,613
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

94,983
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

19,088
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
brotli@1.0.9-2+b6
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
brotli@1.0.9-2+b6
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
brotli@1.0.9-2+b6
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

606,472
uptime-kumancsaVerified publisher1.7.31 of 1See more

uptime-kuma ncsa 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

39,360
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,801
web-applicationnetology-yc-helmVerified publisher4.0.01 of 1See more

web-application netology-yc-helm 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
egorz/netology-diploma-web-app:4.05627a54bd1ad
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,707
networkconnectivitytestnetworkconnectivitytest1.0.01 of 1See more

networkconnectivitytest networkconnectivitytest 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nomansadiq11/connectivitytest:v1.0.0eb14ccf304a7
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,229
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:latestce1317316e27
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,667

Container images carrying it

750 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

No deployed image carries CVE-2026-111497.

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.