StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
978
of 18,232 indexed, latest versions
Container images
845
deployed by those charts
Fix available
3 of 4
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 978 of 18,232 indexed charts deploy, on 845 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+4 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1814
brotliapk1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r030
brotlipypi1.0.9, 1.1.01.2.14
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ALPINE-CVE-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322UBUNTU-CVE-2026-111497
Also known as
BIT-node-2026-111497, BIT-node-min-2026-111497, PYSEC-2026-4323

Charts affected

978 by stars
ChartLatestAffected imagesRadar Score
static-sitepodzone-chartsVerified publisher0.1.11 of 2See more

static-site podzone-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,656
agentpolyaxon2.18.03 of 4See more

agent polyaxon 2.18.0

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-cli:2.18.09cf0955704ee
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

10,372
polyaxonpolyaxon2.18.03 of 5See more

polyaxon polyaxon 2.18.0

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-api:2.18.0b795f2b224d2
brotli@1.1.0-2+b7
no fix listed
polyaxon/polyaxon-cli:2.18.09cf0955704ee
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

14,347
quickwitportefaix-hub0.1.11 of 1See more

quickwit portefaix-hub 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.1d29332bdadcc
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,900
port-agentport-labsVerified publisher0.8.171 of 1See more

port-agent port-labs 0.8.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/port-labs/port-agent:v0.8.13b49d723a99fc
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

370
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

71,982
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

9,089
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:latestd42f63cb89ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,746
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
toniblyx/prowler:stable9dbcc3c9abd7
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,403
web-chartpsb-ktcloudlab0.1.01 of 1See more

web-chart psb-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
web-chartpsg-ktcloudlab0.1.01 of 1See more

web-chart psg-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
nginx-chartpshs-nginx0.1.01 of 1See more

nginx-chart pshs-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
apppvillaverdeVerified publisher0.2.61 of 1See more

app pvillaverde 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.31332d0beea97c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,661
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

98,916
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

83,071
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

83,071
open-terminalqaoruVerified publisher0.2.81 of 1See more

open-terminal qaoru 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/open-webui/open-terminal:0.14.2-slimfb53967318c5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,563
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,479
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

9,816
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,836
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

24,458
my-nginx-apprepo-for-helm-nginx-app0.1.01 of 1See more

my-nginx-app repo-for-helm-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,063
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

8,326
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

4,002
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

65,605
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

72,445
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
brotli@1.0.9-2+b6
no fix listed
istio/examples-helloworld-v2:latest0a7f02b2c7c9
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,124
kresusrm3lVerified publisher0.3.01 of 3See more

kresus rm3l 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

77,847
web-checkrm3lVerified publisher0.2.01 of 1See more

web-check rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lissy93/web-check:latest5e4feb4acbd5
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,867
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

12,612
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
monitoringrocketchat-server0.0.171 of 9See more

monitoring rocketchat-server 0.0.17

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

11,110
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,884
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

11,029
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
brotli@1.0.9-2+b6
no fix listed
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

217,262
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

119,877
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

13,441
flaresolverrrubxkubeVerified publisher0.1.11 of 1See more

flaresolverr rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

35,070
jellyfinrubxkubeVerified publisher1.3.11 of 1See more

jellyfin rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,079
linkdingrubxkubeVerified publisher1.2.41 of 1See more

linkding rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.47.0e35cb50e0581
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,627
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

39,573
vaultwardenrubxkubeVerified publisher1.2.41 of 1See more

vaultwarden rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,277
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,659
runwhen-localrunwhen-contribVerified publisher0.7.31 of 3See more

runwhen-local runwhen-contrib 0.7.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.4914e75d9f445
brotli@1.1.0-2+b7
nodejs@26.11.1-1nodesource1
no fix listed
no fix listed

Open the chart page →

4,567
rybbitrybbit-helm1.3.21 of 7See more

rybbit rybbit-helm 1.3.2

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

9,183
transmissionryuunosukeds31.7.01 of 2See more

transmission ryuunosukeds3 1.7.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

11,106
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

105,777
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

101,766
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
brotli@1.0.9-2+b6
no fix listed
santisbon/evworker:lateste807283f8d69
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

176,638

Container images carrying it

845 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
brotli@1.0.9-2+b6
nodejs@22.17.1-1nodesource1
no fix listed
no fix listed
1
ghcr.io/open-webui/open-terminal:0.14.2-slimfb53967318c5
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/platformrelay/kollect:v0.21.0a86edc5ec3a8
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/port-labs/port-agent:v0.8.13b49d723a99fc
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/rss-bridge/rss-bridge:latestfcd6ac6335ef
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.4914e75d9f445
brotli@1.1.0-2+b7
nodejs@26.11.1-1nodesource1
no fix listed
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.4.1447e847ed614
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latestb0b6b96adaa3
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/steadybit/agent:2.4.87af728baabbe
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/stefanprodan/podinfo:6.15.0ec73780a8425
brotli@1.2.0-r1
1.2.1-r0
1
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
brotli@1.1.0-2+b7
nodejs@24.20.0-1nodesource1
no fix listed
no fix listed
1
ghcr.io/tinyhumansai/openhuman-core:v0.64.15c694baccddb4
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
brotli@1.0.9-2build6
no fix listed
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
brotli@1.0.9-2build6
no fix listed
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/wgbh-mla/chowda:maina63dadf119be
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
brotli@1.0.9-2+b6
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
brotli@1.1.0-2+b7
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
brotli@1.0.9-2+b6
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.