StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
pimcorehelmforgeVerified publisher2.0.72 of 6See more

pimcore helmforge 2.0.7

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.2916834e49961
brotli@1.2.0-r0
1.2.1-r0
library/nginx:1.30.4-alpine3.24dc5069ad14f1
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,929
poznotehelmforgeVerified publisher2.0.81 of 1See more

poznote helmforge 2.0.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/timothepoznanski/poznote:6.121.0c98d753c27c6
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

53
reactive-resumehelmforgeVerified publisher1.0.21 of 4See more

reactive-resume helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.30.4-alpineadf5042a17f4
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,422
rustfshelmforgeVerified publisher1.1.11 of 1See more

rustfs helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.39ca9559533b5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
ryothelmforgeVerified publisher1.0.21 of 2See more

ryot helmforge 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,473
stalwarthelmforgeVerified publisher1.1.11 of 1See more

stalwart helmforge 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.27c429b311c93d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,243
strapihelmforgeVerified publisher2.3.171 of 3See more

strapi helmforge 2.3.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
helmforge/strapi-base:5.52.25a6c2c449840
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,761
strava-statisticshelmforgeVerified publisher1.1.191 of 2See more

strava-statistics helmforge 1.1.19

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,277
supersethelmforgeVerified publisher1.4.21 of 5See more

superset helmforge 1.4.2

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

35,531
text-embeddings-inferencehelmforgeVerified publisher1.0.22 of 2See more

text-embeddings-inference helmforge 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.30.4-alpine442753882674
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.42538ea1c9640
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,313
tomcathelmforgeVerified publisher1.0.91 of 2See more

tomcat helmforge 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/tomcat:11.0.27-jdk17-temurin-noble6e8cc13f7956
brotli@1.1.0-2build2
no fix listed

Open the chart page →

876
twentyhelmforgeVerified publisher1.0.92 of 5See more

twenty helmforge 1.0.9

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.30.4-alpineadf5042a17f4
brotli@1.2.0-r1
1.2.1-r0
twentycrm/twenty:v2.49.080e1b33b0b4b
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,146
webodmhelmforgeVerified publisher1.1.21 of 4See more

webodm helmforge 1.1.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opendronemap/nodeodm:3.6.2fcd99eb23d8d
brotli@1.1.0-2build2
no fix listed

Open the chart page →

13,492
zookeeperhelmforgeVerified publisher1.2.01 of 1See more

zookeeper helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/zookeeper:3.9.65bad433c7170
brotli@1.0.9-2build6
no fix listed

Open the chart page →

3,768
mywebhelm-httpdVerified publisher0.3.01 of 1See more

myweb helm-httpd 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:latest46a65814cc05
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,520
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

84,323
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latest357724bf0ae2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,660
openaevhelm-openbasVerified publisher2.0.174 of 7See more

openaev helm-openbas 2.0.17

4 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
openaev/platform:3.261022.0a8d4597d5ca5
brotli@1.1.0-2build2
no fix listed
openbas/caldera-server:5.1.0a277796d9724
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
rustfs/rustfs:1.0.39ca9559533b5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

80,323
openbashelm-openbasVerified publisher1.8.143 of 7See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
openbas/caldera-server:5.1.0a277796d9724
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
openbas/platform:2.0.5d986d80b0a75
brotli@1.1.0-2build2
no fix listed

Open the chart page →

85,165
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,647
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,013
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
brotli@1.0.9-2build6
no fix listed

Open the chart page →

7,460
my-nginxhelmtaiwo0.1.01 of 1See more

my-nginx helmtaiwo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,585
zigbee2mqtthelm-zigbee2mqttVerified publisher1.4.21 of 1See more

zigbee2mqtt helm-zigbee2mqtt 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

335
nominatimheywood8-helm-chartsVerified publisher3.10.82 of 3See more

nominatim heywood8-helm-charts 3.10.8

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0
mediagis/nominatim:4.2d0eae7b51374
brotli@1.0.9-2build6
no fix listed

Open the chart page →

15,835
hivemq-edgehivemqOfficialVerified publisher0.1.371 of 1See more

hivemq-edge hivemq 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hivemq/hivemq-edge:2026.15da9e7b6b3139
brotli@1.1.0-2build2
no fix listed

Open the chart page →

757
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
brotli@1.0.9-2build6
no fix listed
hmediade/printserver-init:latest7f005eb6c718
brotli@1.0.9-2build6
no fix listed

Open the chart page →

13,281
mdbook-htmxholmes0.2.11 of 1See more

mdbook-htmx holmes 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpinedf221db836e1
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

132
homeboxhomebox-helmVerified publisher0.3.01 of 2See more

homebox homebox-helm 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sysadminsmedia/homebox:0.26.056e880b62309
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,283
changedetectionhomeenterpriseinc0.2.01 of 2See more

changedetection homeenterpriseinc 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.44534b9bc5c46e
brotli@1.0.9
1.2.1

Open the chart page →

2,683
cloudbeaverhomeenterpriseinc0.6.01 of 1See more

cloudbeaver homeenterpriseinc 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dbeaver/cloudbeaver:21.3.00c0985098263
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,559
homeassistanthomeenterpriseinc0.3.01 of 1See more

homeassistant homeenterpriseinc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2022.3.5565751f33794
brotli@1.0.9
1.2.1

Open the chart page →

9,710
ipsechomeenterpriseinc0.7.01 of 1See more

ipsec homeenterpriseinc 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hwdsl2/ipsec-vpn-server:latestc5d8675b7468
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

68
plexhomeenterpriseinc0.14.01 of 1See more

plex homeenterpriseinc 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.23.6.4881-e2e58f321cf4e864d8bc0
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,350
radarrhomeenterpriseinc0.2.01 of 1See more

radarr homeenterpriseinc 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/radarr:3.2.25965bbb2f90d
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

6,936
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,459
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

19,601
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,541
webserverhongshaoyangVerified publisher0.1.31 of 1See more

webserver hongshaoyang 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:alpine435f992d5616
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

113
paperlesshpVerified publisher0.1.22 of 5See more

paperless hp 0.1.2

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

42,418
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

74,697
eoloplanthttpd-eoloplant0.1.02 of 7See more

eoloplant httpd-eoloplant 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
brotli@1.0.9-2build6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

38,091
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
brotli@1.0.9-2build6
no fix listed
apache/skywalking-ui:9.2.0295f1dc87d98
brotli@1.0.9-2build6
no fix listed

Open the chart page →

18,900
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
brotli@1.0.7-6ubuntu0.1
no fix listed
apache/skywalking-ui:8.9.180530f0308a5
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

23,027
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

4,392
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

10,539
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,064
nginx-charthyomin-nginx0.1.01 of 1See more

nginx-chart hyomin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
johnblack77/clustereye:latest-amd64c3dbd2db66c7
brotli@1.2.0-r0
1.2.1-r0
1
johnblack77/clustereye-api:latestd771c9e0e21e
brotli@1.1.0-r2
1.1.1-r0
1
jordan/icinga2:latestf75025fe8ea8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
josh5/unmanic:0.2.64d49c4816260
brotli@1.0.9-2build6
nodejs@20.11.1-1nodesource1
no fix listed
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
brotli@1.2.0-r0
1.2.1-r0
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
brotli@1.1.0-2build2
no fix listed
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
brotli@1.0.9-2build6
no fix listed
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
brotli@1.0.9-2build6
no fix listed
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
brotli@1.0.9-2build6
no fix listed
1
kanboard/kanboard:v1.2.56871435323da4
brotli@1.2.0-r1
1.2.1-r0
1
kayrosuno/kping:latestf3bd44b29b0d
brotli@1.1.0-2build2
no fix listed
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
brotli@1.2.0-r0
1.2.1-r0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
brotli@1.2.0-r0
1.2.1-r0
1
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
kerolosayman308/voting-app-env:examplevotingapp_result6e92e5a231fa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
brotli@1.0.7-6ubuntu0.1
no fix listed
1
kimai/kimai2:2.70.20db3af96f0da
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kinseii/wazuh-agent:4.14.17160eb143728
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kitware/cdash:v5.5.16fab5f5ec6f2
brotli@1.1.0-2+b7
nodejs@24.22.1-1nodesource1
1.1.0-2+deb13u1
no fix listed
1
kixote/typemill628f79a08cc7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
kixote/typemilla1982fcfdde1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
knspar/phronetis-operator:0.1.60c4f0543ee58
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
koenkk/zigbee2mqtt:2.7.260a295b40f4e
brotli@1.2.0-r0
1.2.1-r0
1
kong/httpbin:latesta6ac46531193
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-agent:1.8.5394847126d5c
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
brotli@1.0.7-6ubuntu0.1
no fix listed
1
krontechnology/aapm-service:1.2.3b964408930a5
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-sidecar-injector:1.2.18b42fad987b3
brotli@1.1.0-r2
1.1.1-r0
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
brotli@1.1.0-2build2
no fix listed
1
kubeshark/front:v53.67e5bb967176e
brotli@1.2.0-r1
1.2.1-r0
1
kubeshop/bitnami-mongodb:8.3.11e209888ede02
brotli@1.1.0-2build2
no fix listed
1
kubeshop/testkube-kubectl:1.37.15011b74081fa
brotli@1.2.0-r1
1.2.1-r0
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
brotli@1.2.0-r0
1.2.1-r0
1
kusionstack/kusion:v0.14.0126c8f0b0976
brotli@1.0.9-2build6
no fix listed
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
brotli@1.0.9-2build6
no fix listed
1
labs64/auditflow97825e27bd2c
brotli@1.2.0-3build1
no fix listed
1
labs64/checkout250aadcd0f20
brotli@1.2.0-3build1
no fix listed
1
labs64/payment-gatewayf41c9e15731c
brotli@1.2.0-3build1
no fix listed
1
laly9999/node-app:1dd0e503913e1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lancachenet/monolithic:latest155817065b13
brotli@1.1.0-2build2
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
langgenius/dify-agent-local-sandbox:1.17.0316279a82ead
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
langgenius/dify-api:1.0.0066035f93856
brotli@1.0.9-2+b6
brotli@1.1.0
nodejs@18.19.0+dfsg-6~deb12u2
1.0.9-2+deb12u1
1.2.1
no fix listed
1
langgenius/dify-api:1.17.052be6088dd84
brotli@1.0.9-2+b6
brotli@1.2.0
nodejs@22.21.0-1nodesource1
1.0.9-2+deb12u1
1.2.1
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
brotli@1.0.9-2+b6
brotli@1.1.0
nodejs@18.19.0+dfsg-6~deb12u1
1.0.9-2+deb12u1
1.2.1
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.