StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,708
of 18,232 indexed, latest versions
Container images
1,543
deployed by those charts
Fix available
4 of 5
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 1,708 of 18,232 indexed charts deploy, on 1,543 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+4 more1.0.9-2+deb12u1, 1.1.0-2+deb13u11,239
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0268
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+41 moreno fix listed60
brotlipypi1.0.9, 1.1.0, 1.2.01.2.156
brotlicffipypi1.2.0.11.2.1.01
OSV records
ALPINE-CVE-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-2026-111497, BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

1,708 by stars
ChartLatestAffected imagesRadar Score
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

114,911
ibm-ucv-prodibm-helm5.3.01 of 16See more

ibm-ucv-prod ibm-helm 5.3.0

1 of the 16 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2fac502149c40
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

13,863
nextjsicoretechVerified publisher1.2.01 of 1See more

nextjs icoretech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
ingress-nginxifmethod-helm-charts4.12.11 of 2See more

ingress-nginx ifmethod-helm-charts 4.12.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,984
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

33,371
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
brotli@1.1.0-2build2
no fix listed

Open the chart page →

9,452
ikigaiikigai-chartVerified publisher0.0.93 of 58See more

ikigai ikigai-chart 0.0.9

3 of the 58 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
brotli@1.0.9-2build6
no fix listed
jupyterhub/k8s-hub:1.2.0e4770285aaf7
brotli@1.0.7-6ubuntu0.1
no fix listed
library/zookeeper:3.8-temurin55d1e5b2e601
brotli@1.0.9-2build6
no fix listed

Open the chart page →

116,371
ilum-jupyterhubilumVerified publisher4.3.11 of 6See more

ilum-jupyterhub ilum 4.3.1

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.1.0eb10d5bf045c
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,929
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

67,204
web-chartimcherry57780.1.01 of 1See more

web-chart imcherry5778 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,965
onechartimioVerified publisher0.76.01 of 1See more

onechart imio 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,978
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
infisical/infisical:latestdbc5be2079b6
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,596
infisical-standaloneinfisical-charts1.11.11 of 5See more

infisical-standalone infisical-charts 1.11.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
infisical/infisical:v0.167.0dbc5be2079b6
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,596
influxdb3-coreinfluxdata0.1.11 of 1See more

influxdb3-core influxdata 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/influxdb:3.10.5-core695a8063ff10
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,069
influxdb-enterpriseinfluxdata0.2.12 of 2See more

influxdb-enterprise influxdata 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/influxdb:1.12.3-meta8812029260b5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
library/influxdb:1.12.3-datab0f9fc41ed79
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,238
influxdbinfluxdb20.1.01 of 1See more

influxdb influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/influxdb:latest8f106f7ff126
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,638
op-stackinfradao0.0.11 of 1See more

op-stack infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
brotli@1.0.9-2build6
no fix listed

Open the chart page →

12,462
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

88,632
tcs-issuerintelVerified publisher0.5.01 of 2See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
intel/trusted-certificate-issuer:0.5.0591a9db4a427
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,190
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

96,633
interbtc-parachaininterlay0.4.131 of 1See more

interbtc-parachain interlay 0.4.13

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
interlayhq/interbtc:latesta66d0e35e70f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

3,486
polkabtc-parachaininterlay0.2.411 of 4See more

polkabtc-parachain interlay 0.2.41

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
interlayhq/interbtc:latesta66d0e35e70f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

4,532
inventreeinventreeOfficialVerified publisher0.4.342 of 2See more

inventree inventree 0.4.34

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
inventree/inventree:1.6.17c1e251a6c52
brotli@1.1.0-2+b7
no fix listed
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,185
istio-aws-private-ingress-customizedistio-aws-private-ingress-customized1.0.01 of 1See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,642
istio-azure-private-ingress-customizedistio-azure-private-ingress-customized1.0.01 of 1See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,642
ztunnelistio-ztunnelVerified publisher1.25.01 of 1See more

ztunnel istio-ztunnel 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/ztunnel:1.25.005f3972d80a9
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,792
daveit-at-mOfficialVerified publisher0.2.191 of 9See more

dave it-at-m 0.2.19

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

66,855
iteqiteqOfficialVerified publisher0.3.31 of 3See more

iteq iteq 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/teq-cloud/iteq-web:0.3.3-beta0acbe2f2e1ea
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,038
dynamic-ip-loadbalancer-controlleritsmethemojoVerified publisher0.1.01 of 1See more

dynamic-ip-loadbalancer-controller itsmethemojo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/buildpack-deps:curl6bdd718f8e49
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,299
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/buildpack-deps:scm6e8ba98ab916
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,806
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
brotli@1.1.0-2build2
no fix listed
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

48,724
web-chartjaeeyun-ktcloudlab0.1.01 of 1See more

web-chart jaeeyun-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
nginx-chartjaeki-nginx0.1.01 of 1See more

nginx-chart jaeki-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
brotli@1.0.9-2+b6
nodejs@18.19.0+dfsg-6~deb12u2
1.0.9-2+deb12u1
no fix listed

Open the chart page →

12,851
jasperjasperVerified publisher1.0.2111 of 2See more

jasper jasper 1.0.211

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

37,528
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,107
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

50,201
manyfoldjeffrescVerified publisher1.0.31 of 1See more

manyfold jeffresc 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,204
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,854
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,491
jenkinsjenkins-automation-tool0.1.01 of 1See more

jenkins jenkins-automation-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,187
jenkinsjenkins-automation-tool-by-helm0.1.01 of 1See more

jenkins jenkins-automation-tool-by-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,187
jenkinsjenkins-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,187
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,187
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,853
nginx-chartjinbok-nginx0.1.01 of 1See more

nginx-chart jinbok-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
nginx-chartjiungVerified publisher0.1.01 of 1See more

nginx-chart jiung 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
jondos-genericjondos2.0.11 of 1See more

jondos-generic jondos 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722

Container images carrying it

1,543 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
linuxserver/unifi-controller:7.3.83ab105cc50322
brotli@1.0.7-6ubuntu0.1
no fix listed
1
lis314/project-zomboid-docker:latestaa2089c37920
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lissy93/web-check:latest5e4feb4acbd5
brotli@1.0.9-2+b6
no fix listed
1
livekit/ingress:v1.2.21ab01641b366
brotli@1.0.9-2build6
no fix listed
1
localstack/localstack:3.19d278167f2b7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
locustio/locust:2.24.151d866285170
brotli@1.1.0
1.2.1
1
loeken/jellyfin:10.11.87efbc24e47b0
brotli@1.2.0-r0
1.2.1-r0
1
loeken/radarr:5.27.0-nightlya24409d3846d
brotli@1.1.0-r2
1.1.1-r0
1
logiqai/flash:v3.10.265b996bc7bdc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.24c364ef96aad
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
brotli@1.0.9-2+b6
no fix listed
1
louislam/uptime-kuma:2.5.4917318f9d7be
brotli@1.0.9-2+b6
no fix listed
1
louislam/uptime-kuma:2.4.091e963bfda56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.0a8610b3b4c38
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.5c74379ac4509
brotli@1.0.9-2+b6
no fix listed
1
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
brotli@1.0.9-2+b6
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
brotli@1.0.7-6ubuntu0.1
nodejs@10.19.0~dfsg-3ubuntu1
no fix listed
no fix listed
1
luligu/matterbridge:3.0.28f97884bebc2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
machines/filestash:latest12bd8c30da4d
brotli@1.1.0-2+b7
no fix listed
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makersquad/harp-proxy:0.8.1a40dd258c527
brotli@1.0.9-2+b6
no fix listed
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.2-1nodesource1
no fix listed
no fix listed
1
mariusm/vingress:0.5.0b3db186c3d72
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
mathesar/mathesar:0.12.0091757cb01fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mathnao/certs:2.1.3b900e6b64684
brotli@1.1.0-r2
1.1.1-r0
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v33.1.0480edbd9257a
brotli@1.0.9-2+b6
no fix listed
1
matterlabs/external-node:v24.0.06cbfea4c694a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mautic/mautic:7-apacheeb8cc73d97e1
brotli@1.0.9-2+b6
nodejs@24.15.0-1nodesource1
1.0.9-2+deb12u1
no fix listed
1
mavrick1/kubestellar-b:latest45ca0429a1d4
brotli@1.1.0-r2
1.1.1-r0
1
mavrick1/kubestellar-f:latest56bd8eaa53a4
brotli@1.1.0-r2
1.1.1-r0
1
mawad98/backstage-pyactions:demo99422c56a274
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
mbround18/valheim:3.1.070bd4da591cd
brotli@1.0.9-2build6
no fix listed
1
mcp/kubernetes:latest5ffbf7f0a8aa
brotli@1.0.9-2+b6
no fix listed
1
mediagis/nominatim:5.3.27923a8e67197
brotli@1.1.0-2build2
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
brotli@1.0.7-6ubuntu0.1
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
brotli@1.0.9-2build6
no fix listed
1
merlos/zookeeper:3.9.3a38fc7e09ed7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
metabase/metabase:v0.63.1.124f150effd484
brotli@1.2.0-r0
1.2.1-r0
1
metabase/metabase:v0.53.4.17807bc5cad17
brotli@1.1.0-r2
1.1.1-r0
1
microslac/auth:latest5c1eb1f5c64d
brotli@1.0.9-2+b6
no fix listed
1
microslac/conversations:latest1b24afcd71ff
brotli@1.0.9-2+b6
no fix listed
1
microslac/teams:latest0f75997fcbe5
brotli@1.0.9-2+b6
no fix listed
1
microslac/users:latest216ea6832a56
brotli@1.0.9-2+b6
no fix listed
1
middlewareeng/middleware:0.3.1747d880812f1
brotli@1.0.9-2+b6
nodejs@22.16.0-1nodesource1
1.0.9-2+deb12u1
no fix listed
1
milvusdb/milvus:v2.2.13a3a55e1c1497
brotli@1.0.7-6ubuntu0.1
no fix listed
1
mindsdb/mindsdb:latest163011c09299
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
brotli@1.0.7-6ubuntu0.1
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.