StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,407
of 18,232 indexed, latest versions
Container images
1,314
deployed by those charts
Fix available
4 of 5
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 1,407 of 18,232 indexed charts deploy, on 1,314 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+4 more1.0.9-2+deb12u1, 1.1.0-2+deb13u11,101
brotliapk1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0185
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 8.9.4-1nodesource1, 9.11.1-1nodesource1, 10.19.0~dfsg-3ubuntu1.3+31 moreno fix listed46
brotlipypi1.0.9, 1.1.0, 1.2.01.2.142
brotlicffipypi1.2.0.11.2.1.01
OSV records
ALPINE-CVE-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-2026-111497, BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

1,407 by stars
ChartLatestAffected imagesRadar Score
ghostfoliohelmforgeVerified publisher1.1.21 of 4See more

ghostfolio helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.88.0256c524a6116
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

5,086
hermes-agenthelmforgeVerified publisher1.0.21 of 1See more

hermes-agent helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

7,568
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

13,292
jenkinshelmforgeVerified publisher1.0.111 of 1See more

jenkins helmforge 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:2.580.1-lts-jdk21a660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,187
jupyterhubhelmforgeVerified publisher1.0.73 of 3See more

jupyterhub helmforge 1.0.7

3 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
brotli@1.2.0-r1
1.2.1-r0
jupyterhub/configurable-http-proxy:5.3.069a7170eeeda
brotli@1.2.0-r0
1.2.1-r0
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,232
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,104
medikeephelmforgeVerified publisher2.0.51 of 3See more

medikeep helmforge 2.0.5

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.72.09285e26f6d0d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,754
middlewarehelmforgeVerified publisher1.2.111 of 4See more

middleware helmforge 1.2.11

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
brotli@1.0.9-2+b6
nodejs@22.16.0-1nodesource1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

63,658
moodlehelmforgeVerified publisher1.1.51 of 2See more

moodle helmforge 1.1.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

34,608
nextcloudhelmforgeVerified publisher2.0.41 of 3See more

nextcloud helmforge 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nextcloud:35.0.2-apachea588aa535370
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,675
openhumanhelmforgeVerified publisher1.1.01 of 1See more

openhuman helmforge 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/tinyhumansai/openhuman-core:v0.64.15c694baccddb4
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,941
openreel-videohelmforgeVerified publisher1.0.41 of 1See more

openreel-video helmforge 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
helmforge/openreel-video:v0.5.07ba0d47b943f
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,261
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opensign/opensigndigest-pinned0ebc230eed21
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

69,398
paperless-ngxhelmforgeVerified publisher1.1.11 of 4See more

paperless-ngx helmforge 1.1.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,299
phpmyadminhelmforgeVerified publisher2.1.21 of 1See more

phpmyadmin helmforge 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,494
pimcorehelmforgeVerified publisher2.0.71 of 6See more

pimcore helmforge 2.0.7

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.30.4-alpine3.24dc5069ad14f1
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,751
ryothelmforgeVerified publisher1.0.21 of 2See more

ryot helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

7,255
stalwarthelmforgeVerified publisher1.1.11 of 1See more

stalwart helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.27c429b311c93d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,176
strava-statisticshelmforgeVerified publisher1.1.191 of 2See more

strava-statistics helmforge 1.1.19

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,256
supersethelmforgeVerified publisher1.4.21 of 5See more

superset helmforge 1.4.2

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

34,576
text-embeddings-inferencehelmforgeVerified publisher1.0.21 of 2See more

text-embeddings-inference helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.42538ea1c9640
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,169
mywebhelm-httpdVerified publisher0.3.01 of 1See more

myweb helm-httpd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:latest46a65814cc05
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,428
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

83,122
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latest357724bf0ae2
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,554
openaevhelm-openbasVerified publisher2.0.172See more

openaev helm-openbas 2.0.17

2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
openbas/caldera-server:5.1.0a277796d9724
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

—
openbashelm-openbasVerified publisher1.8.143 of 7See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
openbas/caldera-server:5.1.0a277796d9724
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
openbas/platform:2.0.5d986d80b0a75
brotli@1.1.0-2build2
no fix listed

Open the chart page →

83,954
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,905
my-nginxhelmtaiwo0.1.01 of 1See more

my-nginx helmtaiwo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,722
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,356
zigbee2mqtthelm-zigbee2mqttVerified publisher1.4.21 of 1See more

zigbee2mqtt helm-zigbee2mqtt 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

296
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
brotli@1.0.9-2build6
no fix listed

Open the chart page →

15,675
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,361
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

19,066
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,443
paperlesshpVerified publisher0.1.22 of 5See more

paperless hp 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
brotli@1.1.0-2+b7
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

38,515
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

74,990
eoloplanthttpd-eoloplant0.1.02 of 7See more

eoloplant httpd-eoloplant 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
brotli@1.0.9-2build6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

37,925
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
brotli@1.0.9-2build6
no fix listed
apache/skywalking-ui:9.2.0295f1dc87d98
brotli@1.0.9-2build6
no fix listed

Open the chart page →

18,780
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

4,320
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

10,055
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,639
nginx-charthyomin-nginx0.1.01 of 1See more

nginx-chart hyomin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
hyperglance-helmhyperglance-helmVerified publisher10.0.153See more

hyperglance-helm hyperglance-helm 10.0.15

3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
brotli@1.0.9-2build6
no fix listed
hyperglance/init:postgres9fd5faf1fe80
brotli@1.0.9-2build6
no fix listed
hyperglance/init:apacheb2f8c6d52623
brotli@1.0.9-2build6
no fix listed

Open the chart page →

—
nginx-charthyun-nginx0.1.01 of 1See more

nginx-chart hyun-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
brotli@1.0.9-2build6
no fix listed

Open the chart page →

7,803
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

7,912
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

114,911
ibm-ucv-prodibm-helm5.3.01 of 16See more

ibm-ucv-prod ibm-helm 5.3.0

1 of the 16 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2fac502149c40
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

13,863
nextjsicoretechVerified publisher1.2.01 of 1See more

nextjs icoretech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
ingress-nginxifmethod-helm-charts4.12.11 of 2See more

ingress-nginx ifmethod-helm-charts 4.12.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,984

Container images carrying it

1,314 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
brotli@1.0.9-2+b6
no fix listed
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sslhep/servicex_app:v1.8.6c935e123030d
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.696805be717ff
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
brotli@1.1.0-2+b7
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
brotli@1.1.0-2+b7
no fix listed
1
stackstorm/st2actionrunner:3.888235ba70cad
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2api:3.86f56d239d280
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2auth:3.833ecfda16608
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2notifier:3.8f190a6212195
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2rulesengine:3.8259503496ff9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2scheduler:3.8b1de2055c362
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2web:3.809989a26c8b7
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stashapp/stash:v0.31.1df744af5a0c9
brotli@1.2.0-r0
1.2.1-r0
1
stashapp/stash-box:latesta534c8afdf39
brotli@1.1.0-2build2
no fix listed
1
statcan/ckan:2.93921305425b8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
strangebee/thehive:6.0.0-14f6db02bb2b8
brotli@1.0.9-2+b6
no fix listed
1
structurizr/onpremises:2025.11.094b5ffb5119c8
brotli@1.1.0-2build2
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
supabase/logflare:latest9d9c8f8c4626
brotli@1.1.0-2+b7
no fix listed
1
supabase/postgres:17.6.1.136f371b5f3f2ac
brotli@1.2.0-r0
1.2.1-r0
1
supabase/realtime:latest768b559241dd
brotli@1.1.0-2+b7
no fix listed
1
supabase/realtime:v2.102.3aa1c92c0cf32
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
supabase/realtime:v2.33.8d207e6e23ad3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
supabase/studio:20241021-9f9b08326d8070c55e9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
supabase/studio:latestd878dcd9dba7
brotli@1.0.9-2+b6
no fix listed
1
svcosti/cidrapp:latest8428d87bc5d0
brotli@1.1.0-r2
1.1.1-r0
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
brotli@1.0.9-2build6
no fix listed
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
brotli@1.0.7-6ubuntu0.1
nodejs@10.19.0~dfsg-3ubuntu1.3
no fix listed
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
brotli@1.0.9-2+b6
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.15.11a2604718368
brotli@1.0.9-2+b6
no fix listed
1
sysnet4admin/colosseum-agg:logbc25b152d88e
brotli@1.0.9-2build6
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.