StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
883
of 18,232 indexed, latest versions
Container images
758
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 883 of 18,232 indexed charts deploy, on 758 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.9-2+b6, 1.1.0-2+b7, 1.1.0-2+dhi2, 1.2.0-3no fix listed758
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ECHO-1099-6733-474bDEBIAN-CVE-2026-111497

Charts affected

883 by stars
ChartLatestAffected imagesRadar Score
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

64,777
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

87,521
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

78,658
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

79,294
pinpointpinpointVerified publisher3.1.72 of 13See more

pinpoint pinpoint 3.1.7

2 of the 13 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:4.0.0-debian-12-r10aa0b2aee8c56
brotli@1.0.9-2+b6
no fix listed
bitnamilegacy/zookeeper:3.9.3-debian-12-r212982759ec212
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

34,351
pipekitpipekit-helmOfficialVerified publisher8.5.81 of 6See more

pipekit pipekit-helm 8.5.8

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:5.1.3c5542543523c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

970
web-chartpjw-ktcloudlab0.1.01 of 1See more

web-chart pjw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/node:208f693eaa7e0a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

76,475
k8s-oidc-discovery-providerpnnl-miscscripts0.1.21 of 2See more

k8s-oidc-discovery-provider pnnl-miscscripts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,951
nginx-apppnnl-miscscripts0.1.21 of 1See more

nginx-app pnnl-miscscripts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
pixiecore-simpleconfigpnnl-miscscripts0.1.51 of 1See more

pixiecore-simpleconfig pnnl-miscscripts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

87,997
libretimepodzone-chartsVerified publisher0.4.12 of 9See more

libretime podzone-charts 0.4.1

2 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
no fix listed
ghcr.io/libretime/icecast:latestc371c6b71c15
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

12,898
static-sitepodzone-chartsVerified publisher0.1.11 of 2See more

static-site podzone-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,656
agentpolyaxon2.18.03 of 4See more

agent polyaxon 2.18.0

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-cli:2.18.09cf0955704ee
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

10,372
polyaxonpolyaxon2.18.03 of 5See more

polyaxon polyaxon 2.18.0

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-api:2.18.0b795f2b224d2
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-cli:2.18.09cf0955704ee
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

14,347
quickwitportefaix-hub0.1.11 of 1See more

quickwit portefaix-hub 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.1d29332bdadcc
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,900
port-agentport-labsVerified publisher0.8.171 of 1See more

port-agent port-labs 0.8.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/port-labs/port-agent:v0.8.13b49d723a99fc
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

370
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

71,982
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

9,089
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:latestd42f63cb89ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,746
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,403
web-chartpsb-ktcloudlab0.1.01 of 1See more

web-chart psb-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
web-chartpsg-ktcloudlab0.1.01 of 1See more

web-chart psg-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
nginx-chartpshs-nginx0.1.01 of 1See more

nginx-chart pshs-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
apppvillaverdeVerified publisher0.2.61 of 1See more

app pvillaverde 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.31332d0beea97c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,661
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

98,916
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

83,071
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

83,071
open-terminalqaoruVerified publisher0.2.81 of 1See more

open-terminal qaoru 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/open-webui/open-terminal:0.14.2-slimfb53967318c5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,563
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,479
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

9,816
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,836
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

24,458
my-nginx-apprepo-for-helm-nginx-app0.1.01 of 1See more

my-nginx-app repo-for-helm-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,063
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

8,326
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,002
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

65,605
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

72,445
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
brotli@1.0.9-2+b6
no fix listed
istio/examples-helloworld-v2:latest0a7f02b2c7c9
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,124
kresusrm3lVerified publisher0.3.01 of 3See more

kresus rm3l 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

77,847
web-checkrm3lVerified publisher0.2.01 of 1See more

web-check rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lissy93/web-check:latest5e4feb4acbd5
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,867
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

12,612
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,884
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

11,029
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
brotli@1.0.9-2+b6
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

217,262
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

119,877
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

13,441

Container images carrying it

758 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.22542811ac831
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.58.08f1028df33aa
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.5.14863be916c31
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.5.15cf0f354870d
brotli@1.1.0-2+b7
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.36-f6d9c8816f322770697e
brotli@1.0.9-2+b6
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
brotli@1.1.0-2+b7
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
brotli@1.0.9-2+b6
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.