StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
885
of 18,232 indexed, latest versions
Container images
760
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 885 of 18,232 indexed charts deploy, on 760 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.9-2+b6, 1.1.0-2+b7, 1.1.0-2+dhi2, 1.2.0-3no fix listed760
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ECHO-1099-6733-474bDEBIAN-CVE-2026-111497

Charts affected

885 by stars
ChartLatestAffected imagesRadar Score
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

94,983
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

19,088
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
brotli@1.0.9-2+b6
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
brotli@1.0.9-2+b6
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
brotli@1.0.9-2+b6
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

606,472
uptime-kumancsaVerified publisher1.7.31 of 1See more

uptime-kuma ncsa 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

39,360
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,801
web-applicationnetology-yc-helmVerified publisher4.0.01 of 1See more

web-application netology-yc-helm 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
egorz/netology-diploma-web-app:4.05627a54bd1ad
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,707
networkconnectivitytestnetworkconnectivitytest1.0.01 of 1See more

networkconnectivitytest networkconnectivitytest 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nomansadiq11/connectivitytest:v1.0.0eb14ccf304a7
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,229
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:latestce1317316e27
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,667
esphome-device-buildernewbenji-chartsVerified publisher0.1.11 of 1See more

esphome-device-builder newbenji-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.7.4e636269c6390
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,194
music-assistantnewbenji-chartsVerified publisher0.1.01 of 1See more

music-assistant newbenji-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,382
agent-controlnewrelic0.0.921 of 1See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,843
nginx-appnginx-app0.1.21 of 1See more

nginx-app nginx-app 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
nginx-samplenginx-sample0.5.01 of 1See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,707
nginx-sample-dependentnginx-sample-dependent0.2.01 of 1See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,707
nginx-examplengrok-ingress-helm0.3.01 of 2See more

nginx-example ngrok-ingress-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,427
nilchelanilchela-chartsVerified publisher0.1.21 of 1See more

nilchela nilchela-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/infiniteprimates/nilchela:0.0.5098e6879c83c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

26,221
basenn-coVerified publisher0.1.01 of 1See more

base nn-co 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest956eac231bb3
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,661
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

65,393
node-debug-dashboardnode-debug-dashboardVerified publisher0.4.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.4.1447e847ed614
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,996
app1node-web-app10.1.31 of 1See more

app1 node-web-app1 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
app2node-web-app10.1.31 of 1See more

app2 node-web-app1 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
nginx-chartnomadshk-nginx0.1.01 of 1See more

nginx-chart nomadshk-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

97,323
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

97,401
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

97,374
cloakbrowser-mcpobeoneVerified publisher0.3.51 of 1See more

cloakbrowser-mcp obeone 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
swimmwatch/cloakbrowser-mcp:1.15.11a2604718368
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,147
firecrawlobeoneVerified publisher3.0.212 of 5See more

firecrawl obeone 3.0.21

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/firecrawl:2.11.693-staginge2f493babbc5
brotli@1.0.9-2+b6
no fix listed
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

11,334
web-chartoje-ktcloudlab0.1.01 of 1See more

web-chart oje-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

59,016
laravel-appoli-the-devVerified publisher2.1.21 of 1See more

laravel-app oli-the-dev 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginxcc307f78ea04
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,107
paperless-ngxoli-the-devVerified publisher1.3.21 of 1See more

paperless-ngx oli-the-dev 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,853
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latestf76bfd1f3c18
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,895
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,178
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,059
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

70,084
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

9,077
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

79,254
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.04 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/git:latest4b08d0c5af8d
brotli@1.0.9-2+b6
no fix listed
yetiplatform/yeti:2.9.09bcbe2650a14
brotli@1.1.0-2+b7
no fix listed
yetiplatform/yeti-frontend:2.9.0873ef15d267b
brotli@1.1.0-2+b7
no fix listed
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

307,187
yetiosdfir-infrastructureVerified publisher1.0.52 of 4See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest8673609841e3
brotli@1.1.0-2+b7
no fix listed
yetiplatform/yeti-frontend:latestd602b1969a64
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

7,094
webot-container-kit0.1.01 of 1See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
workerot-container-kit0.1.01 of 1See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
lens-metric-proxyowan-charts0.1.01 of 1See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

88,541
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
brotli@1.0.9-2+b6
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

162,759
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,461
vaultwardenpascaliskeVerified publisher2.0.01 of 1See more

vaultwarden pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,988
examplepauls-helm-charts0.1.21 of 1See more

example pauls-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
kubeconpauls-helm-charts0.1.01 of 1See more

kubecon pauls-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
matomopetbattle11.0.11 of 2See more

matomo petbattle 11.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

13,640
mongodbpetersandor14.1.81 of 1See more

mongodb petersandor 14.1.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnami/mongodb:8.0.8b3bd5b6be9a0
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,458

Container images carrying it

760 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.5.1e56f0bd5b96c
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.42.0-gitlabb194be2ff740
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.22542811ac831
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.08f1028df33aa
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.14863be916c31
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.5.15cf0f354870d
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.36-f6d9c8816f322770697e
brotli@1.0.9-2+b6
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
brotli@1.1.0-2+b7
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
brotli@1.0.9-2+b6
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.