StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
brotli@1.2.0-r0
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

6,889
wireguardk8s-home-lab-repo1.6.01 of 1See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,662
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4c842ac797bd1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,520
radondb-mysqlkubesphere-testVerified publisher1.0.11 of 3See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,814
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

60,837
machinarislib42Verified publisher0.2.01 of 1See more

machinaris lib42 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/guydavis/machinaris:testf77fa53b89cb
brotli@1.1.0-2build2
no fix listed

Open the chart page →

26,707
vcluster-platformloftVerified publisher4.12.41 of 1See more

vcluster-platform loft 4.12.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-platform:4.12.4e70b55d801aa
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,257
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,522
sonarrm0nsterrr-sonarrVerified publisher2.3.01 of 1See more

sonarr m0nsterrr-sonarr 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.201f19eb5e0f42
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

336
memgraph-high-availabilitymemgraphVerified publisher1.4.31 of 2See more

memgraph-high-availability memgraph 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
memgraph/memgraph:3.14.0a73242121795
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,179
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

18,252
observalobservalVerified publisher1.15.12 of 8See more

observal observal 1.15.1

2 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.15.1e40d18a3a739
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/observal/observal-web:1.15.16d1aceb728bb
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

6,921
metabaseone-acre-fundVerified publisher0.1.111 of 3See more

metabase one-acre-fund 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
metabase/metabase:latesta314433f07c1
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

24
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

114,036
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jbtronics/part-db1:latestf6523ff48db1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,691
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache7ebeef41095c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,810
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,639
repoflowrepoflow-helm-public0.9.13 of 8See more

repoflow repoflow-helm-public 0.9.1

3 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
brotli@1.0.9-2build6
no fix listed
library/elasticsearch:8.15.0310b9fc03b06
brotli@1.0.7-6ubuntu0.1
no fix listed
nginxinc/nginx-unprivileged:1.31.3-alpinef972e5322b97
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

14,935
backrestrobertobochetVerified publisher0.7.01 of 1See more

backrest robertobochet 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
garethgeorge/backrest:v1.14.1b85297975428
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,385
nominatimrobjuz6.4.43 of 4See more

nominatim robjuz 6.4.4

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0
library/nginx:1.31.8-alpine1ef7ca94d787
brotli@1.2.0-r1
1.2.1-r0
mediagis/nominatim:5.3.27923a8e67197
brotli@1.1.0-2build2
no fix listed

Open the chart page →

57,197
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
brotli@1.1.0-2build2
no fix listed

Open the chart page →

7,171
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
brotli@1.0.7-6ubuntu0.1
nodejs@16.7.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

100,726
satisfactory-serversatisfactoryVerified publisher0.1.61 of 1See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.10e103700ae6ae
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,684
skypilotskypilotOfficialVerified publisher0.14.11 of 3See more

skypilot skypilot 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.14.125577df35586
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

7,122
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,829
spartanspartan0.11.01 of 1See more

spartan spartan 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
adminerstartechnicaVerified publisher1.1.11 of 1See more

adminer startechnica 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/adminer:5.4.2-standalone983261ecc40a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

644
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,625
sn-platformstreamnative1.11.461 of 9See more

sn-platform streamnative 1.11.46

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

76,134
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,786
pretixtechwolf12Verified publisher2026.8.01 of 3See more

pretix techwolf12 2026.8.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
pretix/standalone:2026.8.0ec17c2f761f7
brotli@1.1.0-2+b7
nodejs@22.23.3-1nodesource1
1.1.0-2+deb13u1
no fix listed

Open the chart page →

11,400
feedbacksystemthm-mni-iiVerified publisher0.48.35 of 14See more

feedbacksystem thm-mni-ii 0.48.3

5 of the 14 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-core:v2.0.918e54463756e
brotli@1.2.0-3build1
no fix listed
ghcr.io/thm-mni-ii/fbs-core-web:v2.0.9daeca3604040
brotli@1.2.0-r0
1.2.1-r0
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.945929f5c1a12
brotli@1.2.0-3build1
no fix listed
ghcr.io/thm-mni-ii/fbs-sql-playground-web:v2.0.9806d28c6fac0
brotli@1.2.0-r0
1.2.1-r0
ghcr.io/thm-mni-ii/fbs-web-shell:v2.0.9939ec6417e01
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

30,582
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
brotli@1.0.9-2build6
no fix listed

Open the chart page →

12,895
vaultvaultVerified publisher1.22.01 of 4See more

vault vault 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

6,514
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,183
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

8,963
argo-cdwenerme10.11.11 of 3See more

argo-cd wenerme 10.11.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.68e5cc5bb008d
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,745
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablecd2c2cbaf830
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,774
buildkitdwiremindVerified publisher0.34.01 of 1See more

buildkitd wiremind 0.34.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
moby/buildkit:v0.34.1-rootlessf68752a5a94a
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

639
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

5,816
paperlesszekker6Verified publisher11.15.01 of 1See more

paperless zekker6 11.15.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.49bc6e8248891
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

5,588
admineradminerVerified publisher1.4.01 of 1See more

adminer adminer 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/adminer:6.1.174f29c416e14
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

37
paperless-ngxadnoctemVerified publisher0.5.13 of 5See more

paperless-ngx adnoctem 0.5.1

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
brotli@1.0.9-2build6
no fix listed
gotenberg/gotenberg:8.36.087c16b9f3642
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

33,726
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

14,424
aerospike-graphaerospike-helmOfficialVerified publisher3.9.01 of 1See more

aerospike-graph aerospike-helm 3.9.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.394350338eb4c
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

115
agentareaagentareaVerified publisher0.0.294 of 17See more

agentarea agentarea 0.0.29

4 of the 17 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
agentarea/agentarea-api:0.1.1de166c910ef9
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
agentarea/agentarea-mcp-base:0.1.18b80f30570ff
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
agentarea/agentarea-mcp-runner:0.1.1066fa4a71695
brotli@1.0.9-2+b6
nodejs@22.23.3-1nodesource1
1.0.9-2+deb12u1
no fix listed
rustfs/rustfs:1.0.39ca9559533b5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

13,394
akeyless-api-gatewayakeyless-services-helmVerified publisher1.62.311 of 1See more

akeyless-api-gateway akeyless-services-helm 1.62.31

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
akeyless/base:latest759e4289fae8
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,254
icat-k8salba-helm-chartsVerified publisher1.1.02 of 4See more

icat-k8s alba-helm-charts 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:8.18.0d94d07ba9e7d
brotli@1.2.0-r0
1.2.1-r0
payara/server-full:7.2026.2-jdk2531f1253f0cf8
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,875
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,204
prowlarralekcVerified publisher2.6.01 of 1See more

prowlarr alekc 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/hotio/prowlarr:release-2.6.5.5623ed37728f55a3
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

66

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
ispras/svacer:11-2-042aa9fa9f189
brotli@1.0.9-2build6
no fix listed
1
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/examples-helloworld-v1:latest328b237e4fb1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
istio/install-cni:1.23.6ab34c4740f44
brotli@1.1.0-2build2
no fix listed
1
istio/install-cni:1.29.0ce27c9ce43c8
brotli@1.1.0-2build2
no fix listed
1
istio/operator:1.12.06cfce8a071b9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.29.0325156535773
brotli@1.1.0-2build2
no fix listed
1
istio/pilot:1.23.69c3d6a218181
brotli@1.1.0-2build2
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.17.1ce9d87606701
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.15.2db08d6963975
brotli@1.0.9-2build6
no fix listed
1
istio/pilot:1.29.1f8b0e412ac4a
brotli@1.1.0-2build2
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
istio/ztunnel:1.25.005f3972d80a9
brotli@1.1.0-2build2
no fix listed
1
itzg/bungeecord:latest2a77bff989e1
brotli@1.2.0-3build1
no fix listed
1
itzg/minecraft-server:2026.10.05a2ab74ae179
brotli@1.1.0-2build2
no fix listed
1
ixsystems/truecommand:3.2.019c218455cd2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jaedb/iris:latest048cfbf58d57
brotli@1.0.9-2+b6
nodejs@18.20.8-1nodesource1
1.0.9-2+deb12u1
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
brotli@1.0.7-6ubuntu0.1
nodejs@16.13.0-deb-1nodesource1
no fix listed
no fix listed
1
jbtronics/part-db1:latestf6523ff48db1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
brotli@1.1.0-r2
1.1.1-r0
1
jeboehm/mailserver-virus:5.0.92eb5c1c260d11
brotli@1.1.0-r2
1.1.1-r0
1
jedi132000/nextapp:latestdc2a81e92f23
brotli@1.0.7-6ubuntu0.1
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed
1
jellyfin/jellyfin:10.11.81694ff069f0c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.11.717285f9cce63
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:12.32038fe038ab3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.11.6333b64771663
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:12.2:latest357724bf0ae2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:10.10.77ae36aab93ef
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jellyfin/jellyfin:10.10.696b09723b22f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jenkins/jenkins:2.580.1-jdk2542fc298cdafa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jertel/elastalert2:2.31.03cbf63f9b7dc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
jesec/flood:4.14.3c887dad96b40
brotli@1.2.0-r1
1.2.1-r0
1
jhipster/jhipster-registry:latest7184525acd4d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jhonbrownn/elchi:v1.6.43148d16b8bfa
brotli@1.2.0-r1
1.2.1-r0
1
jhonbrownn/merge-pilot-frontend:1.6.09ae41ca173c7
brotli@1.2.0-r0
1.2.1-r0
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jitesoft/kubectl:latest8e4ceaa6d7db
brotli@1.2.0-r1
1.2.1-r0
1
jlesage/firefox:v25.03.1055c28defe31
brotli@1.1.0-r2
1.1.1-r0
1
jlesage/jdownloader-2:v26.09.1bd6cd2fdc728
brotli@1.2.0-r1
1.2.1-r0
1
jodogne/orthanc-plugins:latest6ff510aa29c2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.