StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

63,100
clickstackhdx-oss-v21.1.11 of 5See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0.32-focal3b6c281e1c08
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

5,704
headscale-uiheadscale-uiVerified publisher0.3.11 of 1See more

headscale-ui headscale-ui 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/munmunmiao/headscale-ui:0.1.301d21fffac78
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,637
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,992
app-blueprinthelm-app-blueprintVerified publisher0.2.11 of 1See more

app-blueprint helm-app-blueprint 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,385
answerhelmforgeVerified publisher1.5.61 of 1See more

answer helmforge 1.5.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/answer:2.0.30863470d8293
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

467
guacamolehelmforgeVerified publisher1.6.31 of 5See more

guacamole helmforge 1.6.3

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
brotli@1.1.0-2build2
no fix listed

Open the chart page →

10,806
kafkahelmforgeVerified publisher1.5.11 of 1See more

kafka helmforge 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

798
opencloudhelmforgeVerified publisher1.0.11 of 1See more

opencloud helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opencloudeu/opencloud:7.2.46d992ccc5f1c
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,316
uptime-kumahelmforgeVerified publisher1.5.171 of 1See more

uptime-kuma helmforge 1.5.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

42,372
vaultwardenhelmforgeVerified publisher1.14.51 of 1See more

vaultwarden helmforge 1.14.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.37.4efb3cde96201
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,643
mywebapphelm-nginxVerified publisher0.1.01 of 1See more

mywebapp helm-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

20,188
hivemq-platform-operatorhivemqOfficialVerified publisher0.2.281 of 1See more

hivemq-platform-operator hivemq 0.2.28

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hivemq/hivemq-platform-operator:2.3.108cf25f815b9
brotli@1.2.0-3build1
no fix listed

Open the chart page →

626
hivemq-swarmhivemqOfficialVerified publisher0.2.721 of 1See more

hivemq-swarm hivemq 0.2.72

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hivemq/hivemq-swarm:4.56.1896616dea2f2
brotli@1.2.0-3build1
no fix listed

Open the chart page →

626
holoinsightholoinsight0.2.52 of 6See more

holoinsight holoinsight 0.2.5

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
brotli@1.0.7-6ubuntu0.1
no fix listed
library/elasticsearch:7.16.18d5fd89230d7
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

30,618
homer-operatorhomer-operator0.3.41 of 2See more

homer-operator homer-operator 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

666
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,346
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
brotli@1.0.9-2build6
nodejs@24.13.1-1nodesource1
no fix listed
no fix listed

Open the chart page →

67,295
cyberchefhv-helm-repo0.3.41 of 1See more

cyberchef hv-helm-repo 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gchq/cyberchef:11.5.0f04a39926344
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

270
iceberg-resticeberg-rest-fixture0.0.11 of 2See more

iceberg-rest iceberg-rest-fixture 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,041
odooimioVerified publisher3.2.11 of 3See more

odoo imio 3.2.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.29.8-alpine5616878291a2
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,040
immichimmich-helmVerified publisher0.5.11 of 4See more

immich immich-helm 0.5.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

10,531
elasticinseefrlab2.2.02 of 2See more

elastic inseefrlab 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
brotli@1.0.7-6ubuntu0.1
no fix listed
library/kibana:7.17.3e2e2031c15be
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

18,627
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
brotli@1.0.9
1.2.1

Open the chart page →

9,838
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

14,478
jdownloader2jdownloader2Verified publisher1.12.01 of 1See more

jdownloader2 jdownloader2 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jlesage/jdownloader-2:v26.09.1bd6cd2fdc728
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

346
jellyfinjellyfinVerified publisher0.3.321 of 1See more

jellyfin jellyfin 0.3.32

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:12.2c3efa69a22f2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,660
jenkinsjenkins-cicd-tool0.1.01 of 1See more

jenkins jenkins-cicd-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
jessejesse-chartVerified publisher0.0.462 of 6See more

jesse jesse-chart 0.0.46

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/git:latestce84fd6a057b
brotli@1.2.0-r1
1.2.1-r0
library/postgres:alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,772
chronoreaperjfwenisch1.1.101 of 1See more

chronoreaper jfwenisch 1.1.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wenisch-tech/chronoreaper:1.1.10447726cec07b
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,245
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,776
git-configmap-syncjulb-meVerified publisher1.0.11 of 2See more

git-configmap-sync julb-me 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/git:latest03228d7ded48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,413
jupyterhub-outpostjupyter-jscVerified publisher2.4.11 of 1See more

jupyterhub-outpost jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,068
qbittorrentk8s-chartsVerified publisher3.1.01 of 2See more

qbittorrent k8s-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,806
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.322 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

2 of the 17 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
brotli@1.2.0-r0
1.2.1-r0
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

19,304
ombik8s-home-lab-repo12.2.11 of 1See more

ombi k8s-home-lab-repo 12.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,745
radarrk8s-home-lab-repo17.6.11 of 1See more

radarr k8s-home-lab-repo 17.6.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/radarr:6.2.1a566e7d364b9
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

870
sonarrk8s-home-lab-repo17.3.11 of 1See more

sonarr k8s-home-lab-repo 17.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

885
tautullik8s-home-lab-repo12.3.01 of 1See more

tautulli k8s-home-lab-repo 12.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/tautulli:2.17.12183820d45a1
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,207
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
brotli@1.0.9-2build6
no fix listed
kafkakraft/kafka-controller:3.7.0f261ad288fce
brotli@1.0.9-2build6
no fix listed
kafkakraft/kafkakraft:3.7.02e4b593b878b
brotli@1.0.9-2build6
no fix listed

Open the chart page →

16,146
kangalkangal2.3.11 of 2See more

kangal kangal 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:latest58c1fbf5f5cf
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

132
web-chartkbt-ktcloudlab0.1.01 of 1See more

web-chart kbt-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
kdiffkdiff-snapshotsVerified publisher0.0.2032 of 2See more

kdiff kdiff-snapshots 0.0.203

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
filegator/filegator:latesta40a23c383c6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,579
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,036
app-componentkeltio-helm-chartsVerified publisher3.14.01 of 1See more

app-component keltio-helm-charts 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,511
keydbkeydb-helmVerified publisher1.0.61 of 1See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

6,643
netbirdkitstream-netbird0.7.21 of 3See more

netbird kitstream-netbird 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.95.03d6adfee19dd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,150
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
glpi/glpi:latestc90bc626bcf4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,232

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
ispras/svacer:11-2-042aa9fa9f189
brotli@1.0.9-2build6
no fix listed
1
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-helloworld-v1:latest328b237e4fb1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
istio/install-cni:1.23.6ab34c4740f44
brotli@1.1.0-2build2
no fix listed
1
istio/install-cni:1.29.0ce27c9ce43c8
brotli@1.1.0-2build2
no fix listed
1
istio/operator:1.12.06cfce8a071b9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.29.0325156535773
brotli@1.1.0-2build2
no fix listed
1
istio/pilot:1.23.69c3d6a218181
brotli@1.1.0-2build2
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.17.1ce9d87606701
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.15.2db08d6963975
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.29.1f8b0e412ac4a
brotli@1.1.0-2build2
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/ztunnel:1.25.005f3972d80a9
brotli@1.1.0-2build2
no fix listed
1
itzg/bungeecord:latest2a77bff989e1
brotli@1.2.0-3build1
no fix listed
1
itzg/minecraft-server:2026.10.05a2ab74ae179
brotli@1.1.0-2build2
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jaedb/iris:latest048cfbf58d57
brotli@1.0.9-2+b6
nodejs@18.20.8-1nodesource1
1.0.9-2+deb12u1
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
brotli@1.0.7-6ubuntu0.1
nodejs@16.13.0-deb-1nodesource1
no fix listed
no fix listed
1
jbtronics/part-db1:latestf6523ff48db1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
brotli@1.1.0-r2
1.1.1-r0
1
jeboehm/mailserver-virus:5.0.92eb5c1c260d11
brotli@1.1.0-r2
1.1.1-r0
1
jedi132000/nextapp:latestdc2a81e92f23
brotli@1.0.7-6ubuntu0.1
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed
1
jellyfin/jellyfin:10.11.81694ff069f0c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.11.717285f9cce63
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:12.32038fe038ab3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.11.6333b64771663
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:12.2:latest357724bf0ae2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:10.10.77ae36aab93ef
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:10.10.696b09723b22f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jenkins/jenkins:2.580.1-jdk2542fc298cdafa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jertel/elastalert2:2.31.03cbf63f9b7dc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jesec/flood:4.14.3c887dad96b40
brotli@1.2.0-r1
1.2.1-r0
1
jhipster/jhipster-registry:latest7184525acd4d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jhonbrownn/elchi:v1.6.43148d16b8bfa
brotli@1.2.0-r1
1.2.1-r0
1
jhonbrownn/merge-pilot-frontend:1.6.09ae41ca173c7
brotli@1.2.0-r0
1.2.1-r0
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jitesoft/kubectl:latest8e4ceaa6d7db
brotli@1.2.0-r1
1.2.1-r0
1
jlesage/firefox:v25.03.1055c28defe31
brotli@1.1.0-r2
1.1.1-r0
1
jlesage/jdownloader-2:v26.09.1bd6cd2fdc728
brotli@1.2.0-r1
1.2.1-r0
1
jodogne/orthanc-plugins:latest6ff510aa29c2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.