StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,407
of 18,232 indexed, latest versions
Container images
1,314
deployed by those charts
Fix available
4 of 5
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 1,407 of 18,232 indexed charts deploy, on 1,314 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+4 more1.0.9-2+deb12u1, 1.1.0-2+deb13u11,101
brotliapk1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0185
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 8.9.4-1nodesource1, 9.11.1-1nodesource1, 10.19.0~dfsg-3ubuntu1.3+31 moreno fix listed46
brotlipypi1.0.9, 1.1.0, 1.2.01.2.142
brotlicffipypi1.2.0.11.2.1.01
OSV records
ALPINE-CVE-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-2026-111497, BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

1,407 by stars
ChartLatestAffected imagesRadar Score
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

33,371
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
brotli@1.1.0-2build2
no fix listed

Open the chart page →

9,452
ikigaiikigai-chartVerified publisher0.0.93 of 58See more

ikigai ikigai-chart 0.0.9

3 of the 58 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
brotli@1.0.9-2build6
no fix listed
jupyterhub/k8s-hub:1.2.0e4770285aaf7
brotli@1.0.7-6ubuntu0.1
no fix listed
library/zookeeper:3.8-temurin55d1e5b2e601
brotli@1.0.9-2build6
no fix listed

Open the chart page →

116,371
ilum-jupyterhubilumVerified publisher4.3.11 of 6See more

ilum-jupyterhub ilum 4.3.1

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.1.0eb10d5bf045c
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,929
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

67,204
web-chartimcherry57780.1.01 of 1See more

web-chart imcherry5778 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,965
onechartimioVerified publisher0.76.01 of 1See more

onechart imio 0.76.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,978
infisicalinfisical-charts0.4.21 of 3See more

infisical infisical-charts 0.4.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
infisical/infisical:latestdbc5be2079b6
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,596
infisical-standaloneinfisical-charts1.11.11 of 5See more

infisical-standalone infisical-charts 1.11.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
infisical/infisical:v0.167.0dbc5be2079b6
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,596
influxdb-enterpriseinfluxdata0.2.12 of 2See more

influxdb-enterprise influxdata 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/influxdb:1.12.3-meta8812029260b5
brotli@1.0.9-2+b6
no fix listed
library/influxdb:1.12.3-datab0f9fc41ed79
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

7,238
influxdbinfluxdb20.1.01 of 1See more

influxdb influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/influxdb:latest8f106f7ff126
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,638
op-stackinfradao0.0.11 of 1See more

op-stack infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

88,632
tcs-issuerintelVerified publisher0.5.01 of 2See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
intel/trusted-certificate-issuer:0.5.0591a9db4a427
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,190
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

96,633
inventreeinventreeOfficialVerified publisher0.4.342 of 2See more

inventree inventree 0.4.34

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
inventree/inventree:1.6.17c1e251a6c52
brotli@1.1.0-2+b7
no fix listed
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,185
istio-aws-private-ingress-customizedistio-aws-private-ingress-customized1.0.01 of 1See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,642
istio-azure-private-ingress-customizedistio-azure-private-ingress-customized1.0.01 of 1See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,642
daveit-at-mOfficialVerified publisher0.2.191 of 9See more

dave it-at-m 0.2.19

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

66,855
iteqiteqOfficialVerified publisher0.3.31 of 3See more

iteq iteq 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/teq-cloud/iteq-web:0.3.3-beta0acbe2f2e1ea
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,038
dynamic-ip-loadbalancer-controlleritsmethemojoVerified publisher0.1.01 of 1See more

dynamic-ip-loadbalancer-controller itsmethemojo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/buildpack-deps:curl6bdd718f8e49
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,299
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/buildpack-deps:scm6e8ba98ab916
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,806
opencloudjacobcolvinVerified publisher0.2.37 of 13See more

opencloud jacobcolvin 0.2.3

7 of the 13 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
brotli@1.1.0-2build2
no fix listed
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

48,724
web-chartjaeeyun-ktcloudlab0.1.01 of 1See more

web-chart jaeeyun-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
nginx-chartjaeki-nginx0.1.01 of 1See more

nginx-chart jaeki-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
brotli@1.0.9-2+b6
nodejs@18.19.0+dfsg-6~deb12u2
1.0.9-2+deb12u1
no fix listed

Open the chart page →

12,851
jasperjasperVerified publisher1.0.2111 of 2See more

jasper jasper 1.0.211

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

37,528
jasper-uijasperVerified publisher1.0.341 of 1See more

jasper-ui jasper 1.0.34

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,107
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

50,201
manyfoldjeffrescVerified publisher1.0.31 of 1See more

manyfold jeffresc 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold:0.136.0d14ca4d82475
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,204
jellyfinjellyfin-helm10.9.101 of 1See more

jellyfin jellyfin-helm 10.9.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.9.1079fb3d73a3e9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,854
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,491
jenkinsjenkins-automation-tool0.1.01 of 1See more

jenkins jenkins-automation-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,187
jenkinsjenkins-automation-tool-by-helm0.1.01 of 1See more

jenkins jenkins-automation-tool-by-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,187
jenkinsjenkins-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,187
jx-app-jenkinsjenkins-x0.0.151 of 2See more

jx-app-jenkins jenkins-x 0.0.15

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,187
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,853
nginx-chartjinbok-nginx0.1.01 of 1See more

nginx-chart jinbok-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
nginx-chartjiungVerified publisher0.1.01 of 1See more

nginx-chart jiung 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
jondos-genericjondos2.0.11 of 1See more

jondos-generic jondos 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
nginx-chartjongh09160.1.01 of 1See more

nginx-chart jongh0916 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
api-key-managerjtektVerified publisher0.3.01 of 4See more

api-key-manager jtekt 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/api-key-manager-gui:v0.1.10424fa47fbeb
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

7,821
image-storage-servicejtektVerified publisher0.5.13 of 4See more

image-storage-service jtekt 0.5.1

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
brotli@1.0.9-2build6
no fix listed
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

88,967
shinsei-managerjtektVerified publisher0.2.07 of 8See more

shinsei-manager jtekt 0.2.0

7 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
brotli@1.0.9-2+b6
no fix listed
moreillon/group-manager:latest3caa8f710ee0
brotli@1.0.9-2+b6
no fix listed
moreillon/group-manager-front:latest5f0a38498271
brotli@1.1.0-2+b7
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
moreillon/user-manager-front:v5.0.3b067dbbbb6af
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
brotli@1.0.9-2+b6
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

314,894
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

96,104
jupyter-hub-customizationsjupyter-jscVerified publisher0.27.211 of 4See more

jupyter-hub-customizations jupyter-jsc 0.27.21

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.314c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
jupyter-nginxjupyter-jscVerified publisher0.1.31 of 1See more

jupyter-nginx jupyter-jsc 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,075
jwks-mergejwks-merge0.1.01 of 2See more

jwks-merge jwks-merge 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,834
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

12,041

Container images carrying it

1,314 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
brotli@1.0.9-2+b6
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
brotli@1.0.9-2+b6
no fix listed
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
rustfs/rustfs:1.0.0-beta.12:latest41fe89380f41
brotli@1.2.0-r1
1.2.1-r0
1
ryshe/terraria:latest8a4f775d02ad
brotli@1.0.9-2+b6
no fix listed
1
santisbon/evwatcher:latestc4e994ca4540
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
santisbon/evworker:lateste807283f8d69
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
santisbon/speedtest:latest8ee3a1697227
brotli@1.0.9-2+b6
no fix listed
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
brotli@1.0.9-2+b6
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
brotli@1.0.9-2+b6
nodejs@18.13.0+dfsg1-1
1.0.9-2+deb12u1
no fix listed
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
brotli@1.0.9-2build6
no fix listed
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
brotli@1.0.9-2build6
no fix listed
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
brotli@1.0.9-2build6
no fix listed
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
brotli@1.1.0-2build2
no fix listed
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
brotli@1.1.0-2build2
no fix listed
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
brotli@1.1.0-2build2
no fix listed
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
brotli@1.2.0-3build1
no fix listed
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
brotli@1.2.0-3build1
no fix listed
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
searx/searx:1.0.0-211-968b28993dbb3a6d9419
brotli@1.0.9
1.2.1
1
semaphoreui/semaphore:v2.9.645b50bc11833f
brotli@1.0.9
1.2.1
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
brotli@1.1.0-r2
1.1.1-r0
1
serversideup/php:8.5-fpm-nginxcc307f78ea04
brotli@1.1.0-2+b7
no fix listed
1
shamimkuet/nginx:1.0.2b82902a76a04
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
shlinkio/shlink-web-client:4.8.1dc8bf3565a25
brotli@1.2.0-r1
1.2.1-r0
1
siakhooi/query:1.0.0f1f4b5b1b870
brotli@1.2.0-r0
1.2.1-r0
1
signalen/backend:2.50.1826bb090bc4e4
brotli@1.0.9-2+b6
no fix listed
1
sigp/siren:v3.0.42c219b04758e
brotli@1.0.9-2+b6
no fix listed
1
sigscale/cgf:lateste076e06d7647
brotli@1.0.9-2+b6
no fix listed
1
sigscale/cse:latestdfa75c395b95
brotli@1.0.9-2+b6
no fix listed
1
sigscale/im:2.1.1-160ee9b3d5721
brotli@1.0.9-2+b6
no fix listed
1
sigscale/ocs:latest3b8ec91d359d
brotli@1.0.9-2+b6
no fix listed
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sissbruecker/linkding:1.35.00c5dddf0b37c
brotli@1.0.9-2+b6
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
brotli@1.0.9-2+b6
nodejs@20.19.2-1nodesource1
no fix listed
no fix listed
1
sissbruecker/linkding:1.47.0e35cb50e0581
brotli@1.1.0-2+b7
no fix listed
1
snipe/snipe-it:v6.0.1455fb7636a98c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
brotli@1.0.7-6ubuntu0.1
no fix listed
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
brotli@1.0.9-2+b6
no fix listed
1
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
brotli@1.0.9-2+b6
no fix listed
1
somnathmore/custom-nginx:v2bdfc06cad4ec
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
soulteary/cronicle:0.9.80ac2512fa6e39
brotli@1.1.0-r2
1.1.1-r0
1
speckle/speckle-preview-service:2.26.3092384dba45d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.