StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
waldurwaldur-chartsVerified publisher8.1.32 of 3See more

waldur waldur-charts 8.1.3

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opennode/waldur-homeport:8.1.39be2c1623637
brotli@1.2.0-r1
1.2.1-r0
opennode/waldur-mastermind:8.1.382e8f276c5ed
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,749
ingress-nginxwenerme4.15.11 of 2See more

ingress-nginx wenerme 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,421
natswenerme2.15.11 of 3See more

nats wenerme 2.15.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
natsio/nats-box:0.20.0d2f04223f40e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,121
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,652
spark-operatorwikimedia2.2.91 of 1See more

spark-operator wikimedia 2.2.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

55,704
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,561
wordpress-helmwordpress-helm0.2.111 of 4See more

wordpress-helm wordpress-helm 0.2.11

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.3.19c09a3563ca3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,235
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.121 of 1See more

workflows-aggregator workflows-aggregator 0.16.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,197
workloadworkloadVerified publisher2.1.01 of 1See more

workload workload 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stable-alpinef5116ed4606f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

13
discord-botxxczakiVerified publisher0.34.501See more

discord-bot xxczaki 0.34.50

1 container image this version deploys carries CVE-2026-111497.

Container imageDigestPackageFixed in
xxczaki/discord-bot:e42042cb15e6a5e0d1d28a340335888f1a88eb3c322aeb531022
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

—
aeneabotygdrassilOfficialVerified publisher0.2.01 of 2See more

aeneabot ygdrassil 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
elautoestopista/aeneabot:4.2.1125ba620d528
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,005
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
brotli@1.0.9-2build6
nodejs@16.14.2-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

10,779
fusekizazukoVerified publisher0.2.31 of 1See more

fuseki zazuko 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/zazuko/fuseki-geosparql:v5.2.06fbd8983f750
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

296
qleverzazukoVerified publisher0.7.22 of 2See more

qlever zazuko 0.7.2

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-server:v0.10.39f553deb16a5
brotli@1.1.0-2build2
no fix listed
ghcr.io/zazukoians/qlever-ui:v0.10.3c27e20f7a2ca
brotli@1.2.0
1.2.1

Open the chart page →

2,748
healthcheckszekker6Verified publisher1.24.01 of 1See more

healthchecks zekker6 1.24.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/healthchecks:5.0.20261020941ef825ead3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

0
opencode-serveraardbol-opencode-serverVerified publisher1.5.01 of 1See more

opencode-server aardbol-opencode-server 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

931
abstract-nodeabstract-nodeVerified publisher0.1.501 of 2See more

abstract-node abstract-node 0.1.50

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matterlabs/external-node:v33.1.0480edbd9257a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,691
active-mqactivemq-helm-chartVerified publisher1.8.21 of 3See more

active-mq activemq-helm-chart 1.8.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.44.00305c26f19ed
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,670
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

103,385
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,187
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,729
gotenbergadnoctemVerified publisher0.6.01 of 1See more

gotenberg adnoctem 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.38.1aa552cc115db
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,245
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,027
uptime-kumaadnoctemVerified publisher0.4.31 of 1See more

uptime-kuma adnoctem 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

39,295
vaultwardenadnoctemVerified publisher0.6.01 of 1See more

vaultwarden adnoctem 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.4-alpine19ea2b669945
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

13
bootaerokube1.0.11 of 4See more

boot aerokube 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/aerokube/keygen:1.0.1578934444f04
brotli@1.0.9-2build6
no fix listed

Open the chart page →

10,427
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

740
ahnlich-dbahnlich-dbVerified publisher0.1.11 of 1See more

ahnlich-db ahnlich-db 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/deven96/ahnlich-db:latest075301b4cfe1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,237
ai-k8s-agentai-k8s-agent0.1.11 of 2See more

ai-k8s-agent ai-k8s-agent 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jdilsham/ai-k8s-agent-frontend:0.1.162cbd2ed8f59
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,000
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,824
airbyteairbyte-v2Verified publisher2.4.02 of 10See more

airbyte airbyte-v2 2.4.0

2 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
temporalio/auto-setup:1.27.2b44cbfeb43db
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

15,874
airports-postgresairports-postgres0.1.01 of 1See more

airports-postgres airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

—
airsonic-advancedairsonic-advancedVerified publisher0.3.11 of 1See more

airsonic-advanced airsonic-advanced 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/airsonic-advanced:11.1.4bae6dde843d7
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,321
akeyless-gatewayakeyless-services-helmVerified publisher3.8.51 of 2See more

akeyless-gateway akeyless-services-helm 3.8.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
akeyless/gateway:5.5.30f582fc294a0
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,496
aktoakto0.2.03 of 7See more

akto akto 0.2.0

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/aktosecurity/akto-api-security-dashboard:latest142caa08d1f0
brotli@1.1.0-2build2
no fix listed
public.ecr.aws/aktosecurity/akto-api-testing:latest6695d8edd8d4
brotli@1.1.0-2build2
no fix listed

Open the chart page →

14,627
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
brotli@1.2.0-3build1
no fix listed

Open the chart page →

53,267
akto-central-setupakto1.2.44 of 5See more

akto-central-setup akto 1.2.4

4 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.18.75a0c66e59678
brotli@1.2.0-3build1
no fix listed
library/eclipse-temurin:2123cc5734ff46
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.70.3142caa08d1f0
brotli@1.1.0-2build2
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.70.366b0ec8b3de3
brotli@1.1.0-2build2
no fix listed

Open the chart page →

4,973
akto-dashboardakto0.1.71 of 1See more

akto-dashboard akto 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-api-security-dashboard:latest9ef5e8cb6a43
brotli@1.1.0-2build2
no fix listed

Open the chart page →

924
akto-dbabsakto0.1.91 of 1See more

akto-dbabs akto 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestb5a1c2601c12
brotli@1.1.0-2build2
no fix listed

Open the chart page →

—
akto-hybrid-redactakto1.44.123 of 5See more

akto-hybrid-redact akto 1.44.12

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.6_local62d30add38b5
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.7_local500745200425
brotli@1.2.0-3build1
no fix listed

Open the chart page →

6,482
akto-mini-runtimeakto0.7.232 of 5See more

akto-mini-runtime akto 0.7.23

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latesteeff3738d708
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-threat-detection:latesta1fe1ef75a55
brotli@1.2.0-3build1
no fix listed

Open the chart page →

6,657
akto-mini-testingakto1.47.03 of 5See more

akto-mini-testing akto 1.47.0

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest3fde5f4a0c1d
brotli@1.2.0
1.2.1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.75.1_local8eff42336169
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

5,472
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

7,672
akto-regional-setupakto1.4.123 of 9See more

akto-regional-setup akto 1.4.12

3 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.6.6dc4b05df83f7
brotli@1.2.0-3build1
no fix listed
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-threat-detection:1.18.755b1bd20ef02
brotli@1.2.0-3build1
no fix listed

Open the chart page →

34,971
akto-runtimeakto0.1.81 of 2See more

akto-runtime akto 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest62d30add38b5
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,288
akto-testing-db-layerakto1.42.171 of 2See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
brotli@1.1.0-2build2
no fix listed

Open the chart page →

41,785
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:latestbdf060b0c11b
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,041
akto-threat-clientakto0.2.01 of 2See more

akto-threat-client akto 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-threat-detection:latest581eacdcd559
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,078
data-ingestion-serviceakto0.1.61 of 1See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-servicedigest-pinned213aded7adc5
brotli@1.1.0-2build2
no fix listed

Open the chart page →

64,053
browserlessalekcVerified publisher1.3.31 of 1See more

browserless alekc 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,266

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
ispras/svacer:11-2-042aa9fa9f189
brotli@1.0.9-2build6
no fix listed
1
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-helloworld-v1:latest328b237e4fb1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
istio/install-cni:1.23.6ab34c4740f44
brotli@1.1.0-2build2
no fix listed
1
istio/install-cni:1.29.0ce27c9ce43c8
brotli@1.1.0-2build2
no fix listed
1
istio/operator:1.12.06cfce8a071b9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.29.0325156535773
brotli@1.1.0-2build2
no fix listed
1
istio/pilot:1.23.69c3d6a218181
brotli@1.1.0-2build2
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.17.1ce9d87606701
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.15.2db08d6963975
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.29.1f8b0e412ac4a
brotli@1.1.0-2build2
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/ztunnel:1.25.005f3972d80a9
brotli@1.1.0-2build2
no fix listed
1
itzg/bungeecord:latest2a77bff989e1
brotli@1.2.0-3build1
no fix listed
1
itzg/minecraft-server:2026.10.05a2ab74ae179
brotli@1.1.0-2build2
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jaedb/iris:latest048cfbf58d57
brotli@1.0.9-2+b6
nodejs@18.20.8-1nodesource1
1.0.9-2+deb12u1
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
brotli@1.0.7-6ubuntu0.1
nodejs@16.13.0-deb-1nodesource1
no fix listed
no fix listed
1
jbtronics/part-db1:latestf6523ff48db1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
brotli@1.1.0-r2
1.1.1-r0
1
jeboehm/mailserver-virus:5.0.92eb5c1c260d11
brotli@1.1.0-r2
1.1.1-r0
1
jedi132000/nextapp:latestdc2a81e92f23
brotli@1.0.7-6ubuntu0.1
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed
1
jellyfin/jellyfin:10.11.81694ff069f0c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.11.717285f9cce63
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:12.32038fe038ab3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.11.6333b64771663
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:12.2:latest357724bf0ae2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:10.10.77ae36aab93ef
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:10.10.696b09723b22f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jenkins/jenkins:2.580.1-jdk2542fc298cdafa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jertel/elastalert2:2.31.03cbf63f9b7dc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jesec/flood:4.14.3c887dad96b40
brotli@1.2.0-r1
1.2.1-r0
1
jhipster/jhipster-registry:latest7184525acd4d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jhonbrownn/elchi:v1.6.43148d16b8bfa
brotli@1.2.0-r1
1.2.1-r0
1
jhonbrownn/merge-pilot-frontend:1.6.09ae41ca173c7
brotli@1.2.0-r0
1.2.1-r0
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jitesoft/kubectl:latest8e4ceaa6d7db
brotli@1.2.0-r1
1.2.1-r0
1
jlesage/firefox:v25.03.1055c28defe31
brotli@1.1.0-r2
1.1.1-r0
1
jlesage/jdownloader-2:v26.09.1bd6cd2fdc728
brotli@1.2.0-r1
1.2.1-r0
1
jodogne/orthanc-plugins:latest6ff510aa29c2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.