StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.83 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
brotli@1.0.7-6ubuntu0.1
no fix listed
library/elasticsearch:7.17.1588c2ec10c7f2
brotli@1.0.7-6ubuntu0.1
no fix listed
library/kibana:7.17.150172f1c538e7
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

38,652
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
brotli@1.0.7-6ubuntu0.1
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

20,062
glassflow-etlglassflowVerified publisher0.5.212 of 16See more

glassflow-etl glassflow 0.5.21

2 of the 16 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/curl:latestba0b29b383a3
brotli@1.2.0-r1
1.2.1-r0
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

17,910
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:latest62a50b1419fe
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
vdiogov/glpi-conteiner:latest6945f84f0058
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

80,098
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:latestdc28ed5a9d0f
brotli@1.2.0-3build1
no fix listed

Open the chart page →

24,294
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:latestdc28ed5a9d0f
brotli@1.2.0-3build1
no fix listed

Open the chart page →

26,505
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
brotli@1.0.9-2build6
no fix listed

Open the chart page →

23,515
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

6,778
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
brotli@1.0.9-2build6
no fix listed

Open the chart page →

9,074
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,015
opentelemetry-demogpg-dev0.33.84 of 27See more

opentelemetry-demo gpg-dev 0.33.8

4 of the 27 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
brotli@1.1.0-2build2
no fix listed

Open the chart page →

199,455
video-analytics-demogpu-operator0.1.92 of 3See more

video-analytics-demo gpu-operator 0.1.9

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
brotli@1.0.7-6ubuntu0.1
no fix listed
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

16,849
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
hive-storagegraphql-hive1.0.01 of 3See more

hive-storage graphql-hive 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

783
hive-storagegraphql-hive-subcharts1.0.01 of 3See more

hive-storage graphql-hive-subcharts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

783
grapple-installergrapple-installer0.3.231 of 1See more

grapple-installer grapple-installer 0.3.23

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
brotli@1.1.0-2build2
no fix listed

Open the chart page →

90,530
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,341
grayloggraylogVerified publisher1.0.22 of 4See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
brotli@1.0.9-2build6
no fix listed
library/mongo:80e900a3364da
brotli@1.1.0-2build2
no fix listed

Open the chart page →

6,154
routergroundcover1.13.1512 of 7See more

router groundcover 1.13.151

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.55-grafana11.3.77d261462727d
brotli@1.0.9-2build6
no fix listed
quay.io/groundcover/tools:20260929e8a79ea4cf39
brotli@1.1.0-2+b7
1.2.0-4+e1

Open the chart page →

9,106
temporalgroundcover1.13.1512 of 2See more

temporal groundcover 1.13.151

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260929-1f21c0eb520a9
brotli@1.1.0-2+b7
1.2.0-4+e1
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
brotli@1.1.0-2+b7
1.2.0-4+e1

Open the chart page →

2,914
guacamoleguacamole1.0.01 of 4See more

guacamole guacamole 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
brotli@1.1.0-2build2
no fix listed

Open the chart page →

4,754
gwangju_2-3gwangju2-30.1.01 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fluent/fluent-bit:latest2740f387f6e6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

7,400
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,462
octoboxhalkeye0.1.11 of 1See more

octobox halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
octoboxio/octobox:latestd909041c46eb
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,471
hatchet-hahatchetOfficialVerified publisher0.20.01 of 8See more

hatchet-ha hatchet 0.20.0

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,829
hatchet-stackhatchetOfficialVerified publisher0.20.01 of 8See more

hatchet-stack hatchet 0.20.0

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,829
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
brotli@1.0.9-2build6
no fix listed

Open the chart page →

70,426
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,856
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,098
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
brotli@1.0.7-6ubuntu0.1
no fix listed
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

157,451
helixhelix1.4.32 of 2See more

helix helix 1.4.3

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
brotli@1.2.0-r0
1.2.1-r0
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,602
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,451
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
no fix listed

Open the chart page →

64,154
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

17,864
airports-postgreshelm-airports-dan0.1.01 of 1See more

airports-postgres helm-airports-dan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,223
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

10,410
airports-postgreshelm-airports-postgres0.1.01 of 1See more

airports-postgres helm-airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,223
my_web1helm-chart-by-piyush0.1.01 of 1See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:latesta30cd4cd57f3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,386
jenkinshelm-chart-for-jenkinsVerified publisher1.0.01 of 1See more

jenkins helm-chart-for-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,126
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
brotli@1.1.0-r2
brotli@1.1.0
1.1.1-r0
1.2.1

Open the chart page →

6,874
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,339
streamsheetshelm-chartsVerified publisher0.2.31 of 8See more

streamsheets helm-charts 0.2.3

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:238c0da4f2ef8
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

92,071
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:latestdbbc38ea2110
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16,394
nginx-charthelm-chart-sample-app0.1.01 of 1See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rraahul/test:latestbfe2c1183bc0
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,979
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
brotli@1.1.0
1.2.1

Open the chart page →

3,166
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

31,616

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
ispras/svacer:11-2-042aa9fa9f189
brotli@1.0.9-2build6
no fix listed
1
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-helloworld-v1:latest328b237e4fb1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
istio/install-cni:1.23.6ab34c4740f44
brotli@1.1.0-2build2
no fix listed
1
istio/install-cni:1.29.0ce27c9ce43c8
brotli@1.1.0-2build2
no fix listed
1
istio/operator:1.12.06cfce8a071b9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.29.0325156535773
brotli@1.1.0-2build2
no fix listed
1
istio/pilot:1.23.69c3d6a218181
brotli@1.1.0-2build2
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.17.1ce9d87606701
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.15.2db08d6963975
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.29.1f8b0e412ac4a
brotli@1.1.0-2build2
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/ztunnel:1.25.005f3972d80a9
brotli@1.1.0-2build2
no fix listed
1
itzg/bungeecord:latest2a77bff989e1
brotli@1.2.0-3build1
no fix listed
1
itzg/minecraft-server:2026.10.05a2ab74ae179
brotli@1.1.0-2build2
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jaedb/iris:latest048cfbf58d57
brotli@1.0.9-2+b6
nodejs@18.20.8-1nodesource1
1.0.9-2+deb12u1
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
brotli@1.0.7-6ubuntu0.1
nodejs@16.13.0-deb-1nodesource1
no fix listed
no fix listed
1
jbtronics/part-db1:latestf6523ff48db1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
brotli@1.1.0-r2
1.1.1-r0
1
jeboehm/mailserver-virus:5.0.92eb5c1c260d11
brotli@1.1.0-r2
1.1.1-r0
1
jedi132000/nextapp:latestdc2a81e92f23
brotli@1.0.7-6ubuntu0.1
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed
1
jellyfin/jellyfin:10.11.81694ff069f0c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.11.717285f9cce63
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:12.32038fe038ab3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.11.6333b64771663
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:12.2:latest357724bf0ae2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:10.10.77ae36aab93ef
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:10.10.696b09723b22f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jenkins/jenkins:2.580.1-jdk2542fc298cdafa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jertel/elastalert2:2.31.03cbf63f9b7dc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jesec/flood:4.14.3c887dad96b40
brotli@1.2.0-r1
1.2.1-r0
1
jhipster/jhipster-registry:latest7184525acd4d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jhonbrownn/elchi:v1.6.43148d16b8bfa
brotli@1.2.0-r1
1.2.1-r0
1
jhonbrownn/merge-pilot-frontend:1.6.09ae41ca173c7
brotli@1.2.0-r0
1.2.1-r0
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jitesoft/kubectl:latest8e4ceaa6d7db
brotli@1.2.0-r1
1.2.1-r0
1
jlesage/firefox:v25.03.1055c28defe31
brotli@1.1.0-r2
1.1.1-r0
1
jlesage/jdownloader-2:v26.09.1bd6cd2fdc728
brotli@1.2.0-r1
1.2.1-r0
1
jodogne/orthanc-plugins:latest6ff510aa29c2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.