StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
pgadmincetic0.1.121 of 1See more

pgadmin cetic 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dpage/pgadmin4:latestc332c5f6dfba
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

644
freshrsschristianhuthVerified publisher3.0.31 of 1See more

freshrss christianhuth 3.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
freshrss/freshrss:1.30.4-alpine840765ea01fb
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

28
headwind-mdmchristianhuthVerified publisher6.0.01 of 1See more

headwind-mdm christianhuth 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
headwindmdm/hmdm:0.1.93550b4840840
brotli@1.0.9-2build6
no fix listed

Open the chart page →

3,213
cloudquerycloudquery39.0.41 of 1See more

cloudquery cloudquery 39.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,038
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dolibarr/dolibarr:22.0.47ad88fc9b13c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

52,010
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
brotli@1.1.0
1.2.1

Open the chart page →

18,630
seafiledatamateVerified publisher0.6.02 of 6See more

seafile datamate 0.6.0

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
datamate/seafile-professional:11.0.202dd66b722464
brotli@1.0.9-2build6
no fix listed

Open the chart page →

85,274
dialdialOfficialVerified publisher8.1.02 of 4See more

dial dial 8.1.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
epam/ai-dial-chat-themes:0.21.0609c02472c07
brotli@1.2.0-r1
1.2.1-r0
epam/ai-dial-core:0.49.215cd928861ed
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,897
jellyfindjjudas21Verified publisher4.1.21 of 1See more

jellyfin djjudas21 4.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:12.32038fe038ab3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,516
adminerectobitVerified publisher0.3.11 of 1See more

adminer ectobit 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/adminer:6.0.151262b555d9e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

37
flannelflannel0.28.101 of 2See more

flannel flannel 0.28.10

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/flannel-io/flannel:v0.28.10f26b2403273c
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

711
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
redocly/redoc:latest265ecca9adb2
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,740
foundry-vttfoundry-vttVerified publisher14.369.01 of 1See more

foundry-vtt foundry-vtt 14.369.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/felddy/foundryvtt:14.369.076497e09a7ee
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,398
plexgabe565Verified publisher0.5.11 of 1See more

plex gabe565 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,938
geonode-k8sgeonode-k8sVerified publisher2.0.03 of 10See more

geonode-k8s geonode-k8s 2.0.0

3 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
brotli@1.0.9-2build6
no fix listed
geonode/geoserver_data:2.28.4-latest435cbc5f3f05
brotli@1.2.0-r1
1.2.1-r0
nginxinc/nginx-unprivileged:1.31.2-alpine3.236320020c7da8
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

60,908
gitops-promotergitops-promoterOfficialVerified publisher0.24.01 of 2See more

gitops-promoter gitops-promoter 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,821
glpiglpi-conteiner0.1.02 of 3See more

glpi glpi-conteiner 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:latestda3c72f9886f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
vdiogov/glpi-conteiner:latest6945f84f0058
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

80,474
mongodbgroundhog2k0.8.41 of 1See more

mongodb groundhog2k 0.8.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:8.3.13d0c8f51bb63f
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,456
dolibarrhelmforgeVerified publisher1.2.221 of 3See more

dolibarr helmforge 1.2.22

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.217692e7315b3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

27,369
karakeephelmforgeVerified publisher1.2.112 of 3See more

karakeep helmforge 1.2.11

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
brotli@1.1.0-2build2
no fix listed
ghcr.io/karakeep-app/karakeep:0.34.0151cdd6b5f2e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,431
openhabhelmforgeVerified publisher1.2.21 of 1See more

openhab helmforge 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openhab/openhab:5.2.3fa50a6934dfd
brotli@1.1.0-2+b7
nodejs@20.19.2+dfsg-1+deb13u3
1.1.0-2+deb13u1
no fix listed

Open the chart page →

3,987
umamihelmforgeVerified publisher2.4.21 of 3See more

umami helmforge 2.4.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.4.085909afc45bd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,206
openctihelm-openctiVerified publisher3.0.242 of 8See more

opencti helm-opencti 3.0.24

2 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
rustfs/rustfs:1.0.39ca9559533b5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,781
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
brotli@1.1.0-2build2
no fix listed
apache/hertzbeat-collector:1.8.0a2bab1be574c
brotli@1.1.0-2build2
no fix listed

Open the chart page →

17,020
infrahubinfrahubVerified publisher4.34.11 of 5See more

infrahub infrahub 4.34.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

12,678
jenkinsjenkins-helm-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
plexk8s-home-lab-repo7.3.11 of 1See more

plex k8s-home-lab-repo 7.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,012
mosquittok8sonlabVerified publisher2.7.31 of 1See more

mosquitto k8sonlab 2.7.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.1.2-alpine38c0da4f2ef8
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

28
kamu-api-serverkamuVerified publisher0.94.01 of 1See more

kamu-api-server kamu 0.94.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.94.093a07071cf3a
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,925
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:latestdbbc38ea2110
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,931
kubeflowkubeflow1.6.22 of 45See more

kubeflow kubeflow 1.6.2

2 of the 45 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/proxyv2:1.14.1df69c1a7af7c
brotli@1.0.7-6ubuntu0.1
no fix listed
library/python:3.7eedf63967cdb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

270,523
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

12,347
testkubekubeshop2.14.24 of 6See more

testkube kubeshop 2.14.2

4 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kubeshop/bitnami-mongodb:8.3.11e209888ede02
brotli@1.1.0-2build2
no fix listed
kubeshop/testkube-api-server:2.14.2a87d63dd1632
brotli@1.2.0-r1
1.2.1-r0
kubeshop/testkube-kubectl:1.37.15011b74081fa
brotli@1.2.0-r1
1.2.1-r0
kubeshop/testkube-minio:2025.10d8e1af6aca99
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,511
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,520
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
brotli@1.1.0-2build2
no fix listed

Open the chart page →

6,988
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestf1bc435659b9
brotli@1.1.0-2build2
no fix listed

Open the chart page →

4,417
radarrloeken-at-homeVerified publisher5.27.0-nightly1 of 1See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
loeken/radarr:5.27.0-nightlya24409d3846d
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,085
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

10,534
open5gsopen5gsVerified publisher2.3.81 of 5See more

open5gs open5gs 2.3.8

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gradiant/open5gs-dbctl:0.10.3332031245fce
brotli@1.1.0-2build2
no fix listed

Open the chart page →

12,766
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
brotli@1.0.9-2build6
no fix listed

Open the chart page →

10,224
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

11,780
scm-managerscm-manager3.12.21 of 1See more

scm-manager scm-manager 3.12.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
scmmanager/scm-manager:3.12.2d452555db6e5
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

818
manyfoldself-hosters-by-nightVerified publisher0.7.41 of 1See more

manyfold self-hosters-by-night 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold-solo:0.147.2ed5a792b0e8d
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

806
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.12 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,212
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

102,635
unboundunbound-helmchartVerified publisher0.2.21 of 1See more

unbound unbound-helmchart 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,071
athens-proxyvolker-raschekVerified publisher2.1.01 of 1See more

athens-proxy volker-raschek 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gomods/athens:v0.17.10f61d1e62359
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,930
reposilitevolker-raschekVerified publisher1.0.11 of 1See more

reposilite volker-raschek 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.6.390de4c8e6c0e
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,380
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,450
matrixzekker6Verified publisher3.34.01 of 4See more

matrix zekker6 3.34.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.163.141d8a4edfdc6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,555

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
johnblack77/clustereye:latest-amd64c3dbd2db66c7
brotli@1.2.0-r0
1.2.1-r0
1
johnblack77/clustereye-api:latestd771c9e0e21e
brotli@1.1.0-r2
1.1.1-r0
1
jordan/icinga2:latestf75025fe8ea8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
josh5/unmanic:0.2.64d49c4816260
brotli@1.0.9-2build6
nodejs@20.11.1-1nodesource1
no fix listed
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
brotli@1.2.0-r0
1.2.1-r0
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
brotli@1.1.0-2build2
no fix listed
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
brotli@1.0.9-2build6
no fix listed
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
brotli@1.0.9-2build6
no fix listed
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
brotli@1.0.9-2build6
no fix listed
1
kanboard/kanboard:v1.2.56871435323da4
brotli@1.2.0-r1
1.2.1-r0
1
kayrosuno/kping:latestf3bd44b29b0d
brotli@1.1.0-2build2
no fix listed
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
brotli@1.2.0-r0
1.2.1-r0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
brotli@1.2.0-r0
1.2.1-r0
1
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
kerolosayman308/voting-app-env:examplevotingapp_result6e92e5a231fa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
brotli@1.0.7-6ubuntu0.1
no fix listed
1
kimai/kimai2:2.70.20db3af96f0da
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kinseii/wazuh-agent:4.14.17160eb143728
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kitware/cdash:v5.5.16fab5f5ec6f2
brotli@1.1.0-2+b7
nodejs@24.22.1-1nodesource1
1.1.0-2+deb13u1
no fix listed
1
kixote/typemill628f79a08cc7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
kixote/typemilla1982fcfdde1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
knspar/phronetis-operator:0.1.60c4f0543ee58
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
koenkk/zigbee2mqtt:2.7.260a295b40f4e
brotli@1.2.0-r0
1.2.1-r0
1
kong/httpbin:latesta6ac46531193
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-agent:1.8.5394847126d5c
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
brotli@1.0.7-6ubuntu0.1
no fix listed
1
krontechnology/aapm-service:1.2.3b964408930a5
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-sidecar-injector:1.2.18b42fad987b3
brotli@1.1.0-r2
1.1.1-r0
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
brotli@1.1.0-2build2
no fix listed
1
kubeshark/front:v53.67e5bb967176e
brotli@1.2.0-r1
1.2.1-r0
1
kubeshop/bitnami-mongodb:8.3.11e209888ede02
brotli@1.1.0-2build2
no fix listed
1
kubeshop/testkube-kubectl:1.37.15011b74081fa
brotli@1.2.0-r1
1.2.1-r0
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
brotli@1.2.0-r0
1.2.1-r0
1
kusionstack/kusion:v0.14.0126c8f0b0976
brotli@1.0.9-2build6
no fix listed
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
brotli@1.0.9-2build6
no fix listed
1
labs64/auditflow97825e27bd2c
brotli@1.2.0-3build1
no fix listed
1
labs64/checkout250aadcd0f20
brotli@1.2.0-3build1
no fix listed
1
labs64/payment-gatewayf41c9e15731c
brotli@1.2.0-3build1
no fix listed
1
laly9999/node-app:1dd0e503913e1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lancachenet/monolithic:latest155817065b13
brotli@1.1.0-2build2
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
langgenius/dify-agent-local-sandbox:1.17.0316279a82ead
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
langgenius/dify-api:1.0.0066035f93856
brotli@1.0.9-2+b6
brotli@1.1.0
nodejs@18.19.0+dfsg-6~deb12u2
1.0.9-2+deb12u1
1.2.1
no fix listed
1
langgenius/dify-api:1.17.052be6088dd84
brotli@1.0.9-2+b6
brotli@1.2.0
nodejs@22.21.0-1nodesource1
1.0.9-2+deb12u1
1.2.1
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
brotli@1.0.9-2+b6
brotli@1.1.0
nodejs@18.19.0+dfsg-6~deb12u1
1.0.9-2+deb12u1
1.2.1
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.