StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
changedetectionalekcVerified publisher0.14.71 of 1See more

changedetection alekc 0.14.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.904eaae7915ba
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

3,129
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
brotli@1.0.9-2build6
no fix listed

Open the chart page →

9,168
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hayk96/alerta-web:9.0.486377705e9e3
brotli@1.1.0
1.2.1

Open the chart page →

5,022
vaultwardenandrenarchyVerified publisher6.28.01 of 1See more

vaultwarden andrenarchy 6.28.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.31587c45feaa4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,056
tt-rssangelnu7.0.01 of 2See more

tt-rss angelnu 7.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/angelnu/tt-rss:2.0.10086c9d9ea1e37c4
brotli@1.2.0-4
no fix listed

Open the chart page →

1,135
limesurveyarea-42Verified publisher0.3.1011 of 2See more

limesurvey area-42 0.3.101

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.6.0bb3e8d6e8dde
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,669
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,429
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

68,421
geoservercloudcamptocamp23.0.27 of 7See more

geoservercloud camptocamp2 3.0.2

7 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.2244572a8e01d
brotli@1.2.0-3build1
no fix listed
geoservercloud/geoserver-cloud-gwc:3.0.25f81a737aff3
brotli@1.2.0-3build1
no fix listed
geoservercloud/geoserver-cloud-rest:3.0.2c14c7be99fd7
brotli@1.2.0-3build1
no fix listed
geoservercloud/geoserver-cloud-wcs:3.0.254cfe408a3ef
brotli@1.2.0-3build1
no fix listed
geoservercloud/geoserver-cloud-webui:3.0.23d01d85dcff4
brotli@1.2.0-3build1
no fix listed
geoservercloud/geoserver-cloud-wfs:3.0.267be5bf231e1
brotli@1.2.0-3build1
no fix listed
geoservercloud/geoserver-cloud-wms:3.0.26243931b4cc7
brotli@1.2.0-3build1
no fix listed

Open the chart page →

5,930
certscertsVerified publisher2.1.31 of 1See more

certs certs 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mathnao/certs:2.1.3b900e6b64684
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,114
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,387
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,605
openstack-manila-csicloud-provider-openstack2.37.11 of 5See more

openstack-manila-csi cloud-provider-openstack 2.37.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/manila-csi-plugin:v1.37.146373e7e6a4b
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

5,389
coder-observabilitycoder-observabilityVerified publisher0.8.01 of 21See more

coder-observability coder-observability 0.8.0

1 of the 21 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:10.4.19a9043254ba16
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

15,068
convertigoconvertigoOfficialVerified publisher8.4.63 of 5See more

convertigo convertigo 8.4.6

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
brotli@1.0.9-2+b6
brotli@1.1.0
nodejs@21.7.3-1nodesource1
1.0.9-2+deb12u1
1.2.1
no fix listed
library/convertigo:8.4.67060aebbcbec
brotli@1.1.0-2build2
no fix listed
library/couchdb:3.53611ce43bd32
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

79,283
cosmocosmo-platformOfficialVerified publisher0.22.12 of 10See more

cosmo cosmo-platform 0.22.1

2 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

94,494
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

11,582
defectdojodefectdojo1.9.601 of 4See more

defectdojo defectdojo 1.9.60

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
defectdojo/defectdojo-django:3.4.202b1c3fc5c295f
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

2,104
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,211
duplistatusduplistatusVerified publisher1.3.02 of 2See more

duplistatus duplistatus 1.3.0

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:8.18.0d94d07ba9e7d
brotli@1.2.0-r0
1.2.1-r0
wsjbr/duplistatus:1.5.0bede86cf183f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,265
bscdysnixVerified publisher0.6.592 of 4See more

bsc dysnix 0.6.59

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gcr.io/google.com/cloudsdktool/google-cloud-cli:alpinecfbfeb8b32f9
brotli@1.2.0-r0
1.2.1-r0
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,032
edgelessdbedgelesssysVerified publisher0.3.21 of 1See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

5,237
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
brotli@1.0.9
1.2.1

Open the chart page →

16,105
zabbix-agentfermosit0.0.51 of 1See more

zabbix-agent fermosit 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,735
keydbfinkinfridomVerified publisher0.48.31 of 1See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

6,643
flyte-binaryflyte2.0.521 of 4See more

flyte-binary flyte 2.0.52

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/unionai-oss/flyteconsole-v2:latest7e19bbdd2e7d
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

45,483
flyte-coreflyte2.0.521 of 3See more

flyte-core flyte 2.0.52

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/unionai-oss/flyteconsole-v2:latest7e19bbdd2e7d
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,003
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,031
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
diygod/rsshub:latest9cd681008232
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,632
plexgeek-cookbookVerified publisher6.4.31 of 1See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

11,046
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

12,002
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

12,488
openbaogitlabVerified publisher0.20.21 of 1See more

openbao gitlab 0.20.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1295422a492cf
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,965
gitlab-runnergitlab-jh0.94.11 of 1See more

gitlab-runner gitlab-jh 0.94.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/gitlab-runner:alpine-v19.5.186a371df46b0
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

280
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latesta134550be58a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

12,313
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,629
apimgraviteeioVerified publisher4.13.12 of 4See more

apim graviteeio 4.13.1

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.13.1-debian5ff7976c6355
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
graviteeio/apim-management-api:4.13.1-debian44d1d17ff3b1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,859
giteagroundhog2k0.16.61 of 1See more

gitea groundhog2k 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gitea/gitea:28.2.030777c91280d
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

44
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
brotli@1.2.0-3build1
no fix listed

Open the chart page →

3,279
jacketthalkeye0.1.31 of 1See more

jackett halkeye 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/jackett:latest104a82c2f758
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ryshe/terraria:latest8a4f775d02ad
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,075
haproxyhaproxytechVerified publisher1.30.21 of 1See more

haproxy haproxytech 1.30.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:3.4.41fe3f201ebb5
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

909
matomohelmforgeVerified publisher2.4.01 of 3See more

matomo helmforge 2.4.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/matomo:5.14.0-apache40680f8e7ab6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,005
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.21 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,659
hermes-agenthermes-agentVerified publisher1.22.01 of 1See more

hermes-agent hermes-agent 1.22.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v0.22.59c5561579f3f
brotli@1.1.0-2+b7
brotlicffi@1.2.0.2
1.1.0-2+deb13u1
1.2.1.0

Open the chart page →

4,519
home-assistanthome-assistantVerified publisher0.5.142 of 3See more

home-assistant home-assistant 0.5.14

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.2addbfb08fcef
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/home-assistant/home-assistant:2026.10.233afb0659d78
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

4,129
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.22.11 of 5See more

infrahub-enterprise infrahub-enterprise 4.22.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

12,828
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.28cfde8170c92f
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

14,661
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,083
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
brotli@1.2.0
brotli@1.1.0-2build2
1.2.1
no fix listed

Open the chart page →

7,392

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
johnblack77/clustereye:latest-amd64c3dbd2db66c7
brotli@1.2.0-r0
1.2.1-r0
1
johnblack77/clustereye-api:latestd771c9e0e21e
brotli@1.1.0-r2
1.1.1-r0
1
jordan/icinga2:latestf75025fe8ea8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
josh5/unmanic:0.2.64d49c4816260
brotli@1.0.9-2build6
nodejs@20.11.1-1nodesource1
no fix listed
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
brotli@1.2.0-r0
1.2.1-r0
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
brotli@1.1.0-2build2
no fix listed
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
brotli@1.0.9-2build6
no fix listed
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
brotli@1.0.9-2build6
no fix listed
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
brotli@1.0.9-2build6
no fix listed
1
kanboard/kanboard:v1.2.56871435323da4
brotli@1.2.0-r1
1.2.1-r0
1
kayrosuno/kping:latestf3bd44b29b0d
brotli@1.1.0-2build2
no fix listed
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
brotli@1.2.0-r0
1.2.1-r0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
brotli@1.2.0-r0
1.2.1-r0
1
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
kerolosayman308/voting-app-env:examplevotingapp_result6e92e5a231fa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
brotli@1.0.7-6ubuntu0.1
no fix listed
1
kimai/kimai2:2.70.20db3af96f0da
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kinseii/wazuh-agent:4.14.17160eb143728
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kitware/cdash:v5.5.16fab5f5ec6f2
brotli@1.1.0-2+b7
nodejs@24.22.1-1nodesource1
1.1.0-2+deb13u1
no fix listed
1
kixote/typemill628f79a08cc7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
kixote/typemilla1982fcfdde1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
knspar/phronetis-operator:0.1.60c4f0543ee58
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
koenkk/zigbee2mqtt:2.7.260a295b40f4e
brotli@1.2.0-r0
1.2.1-r0
1
kong/httpbin:latesta6ac46531193
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-agent:1.8.5394847126d5c
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
brotli@1.0.7-6ubuntu0.1
no fix listed
1
krontechnology/aapm-service:1.2.3b964408930a5
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-sidecar-injector:1.2.18b42fad987b3
brotli@1.1.0-r2
1.1.1-r0
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
brotli@1.1.0-2build2
no fix listed
1
kubeshark/front:v53.67e5bb967176e
brotli@1.2.0-r1
1.2.1-r0
1
kubeshop/bitnami-mongodb:8.3.11e209888ede02
brotli@1.1.0-2build2
no fix listed
1
kubeshop/testkube-kubectl:1.37.15011b74081fa
brotli@1.2.0-r1
1.2.1-r0
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
brotli@1.2.0-r0
1.2.1-r0
1
kusionstack/kusion:v0.14.0126c8f0b0976
brotli@1.0.9-2build6
no fix listed
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
brotli@1.0.9-2build6
no fix listed
1
labs64/auditflow97825e27bd2c
brotli@1.2.0-3build1
no fix listed
1
labs64/checkout250aadcd0f20
brotli@1.2.0-3build1
no fix listed
1
labs64/payment-gatewayf41c9e15731c
brotli@1.2.0-3build1
no fix listed
1
laly9999/node-app:1dd0e503913e1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lancachenet/monolithic:latest155817065b13
brotli@1.1.0-2build2
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
langgenius/dify-agent-local-sandbox:1.17.0316279a82ead
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
langgenius/dify-api:1.0.0066035f93856
brotli@1.0.9-2+b6
brotli@1.1.0
nodejs@18.19.0+dfsg-6~deb12u2
1.0.9-2+deb12u1
1.2.1
no fix listed
1
langgenius/dify-api:1.17.052be6088dd84
brotli@1.0.9-2+b6
brotli@1.2.0
nodejs@22.21.0-1nodesource1
1.0.9-2+deb12u1
1.2.1
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
brotli@1.0.9-2+b6
brotli@1.1.0
nodejs@18.19.0+dfsg-6~deb12u1
1.0.9-2+deb12u1
1.2.1
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.