StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
dbrepodbrepo1.13.34 of 25See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

64,844
mealiedeimosfr-charts1.0.171 of 1See more

mealie deimosfr-charts 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,362
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
epam/ai-dial-core:latest15cd928861ed
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,759
phpipamdigitalhubVerified publisher0.1.12 of 2See more

phpipam digitalhub 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:latest366543984c63
brotli@1.2.0-r1
1.2.1-r0
phpipam/phpipam-www:latestd9f2b3a168cc
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,428
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

75,694
matomodigitalist-open-cloud-matomo12.0.271 of 3See more

matomo digitalist-open-cloud-matomo 12.0.27

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,766
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
brotli@1.0.9-2build6
no fix listed

Open the chart page →

76,611
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

93,216
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
brotli@1.1.0-2build2
no fix listed

Open the chart page →

42,115
nginx-phpfpmdrpsychickVerified publisher0.1.12 of 2See more

nginx-phpfpm drpsychick 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
library/php:8-fpm-alpinefa01fb1645cd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,822
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
brotli@1.1.0-2build2
no fix listed

Open the chart page →

76,129
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,319
glpieftechcombr-glpiVerified publisher2.12.11 of 5See more

glpi eftechcombr-glpi 2.12.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eftechcombr/glpi:php-fpm-12.0.038e06ba814b8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,184
egagenteginnovationsVerified publisher0.11.01 of 1See more

egagent eginnovations 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eginnovations/agent:7.6.005d8d2da700a
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,184
elastalert2elastalert22.31.01 of 1See more

elastalert2 elastalert2 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jertel/elastalert2:2.31.03cbf63f9b7dc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,490
elchi-stackelchi2.0.172 of 10See more

elchi-stack elchi 2.0.17

2 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jhonbrownn/elchi:v1.6.43148d16b8bfa
brotli@1.2.0-r1
1.2.1-r0
library/mongo:6.0.12646902910d6a
brotli@1.0.9-2build6
no fix listed

Open the chart page →

18,406
emqx-eeemqx-operator4.4.381 of 2See more

emqx-ee emqx-operator 4.4.38

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
emqx/emqx-ee:4.4.38d48360ed86f4
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

467
enavenav-service-architectureVerified publisher0.0.78 of 10See more

enav enav-service-architecture 0.0.7

8 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latestb9ba46e9bf03
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-aton-admin-service:lateste37dbcc47435
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-aton-service:latestf4f02868ff0c
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-aton-service-client:latestcb2164664144
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-ckeeper:latest9bf16ff1386c
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-eureka:latestdfe2f27d0149
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-msg-broker:latesta314c29cade8
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-vdes-controller:latest2b8007d4df23
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,648
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

78,014
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

7,290
eoapieoapiOfficialVerified publisher0.17.33 of 7See more

eoapi eoapi 0.17.3

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
brotli@1.1.0-r2
1.1.1-r0
ghcr.io/radiantearth/stac-browser:5.1.0e6d92b6ba593
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/stac-utils/stac-fastapi-pgstac:7.1.08d546f480e46
brotli@1.2.0
1.2.1

Open the chart page →

5,915
paraerudikaVerified publisher0.3.01 of 1See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
erudikaltd/para:latest_stable0f2a7fec2a48
brotli@1.2.0-3build1
no fix listed

Open the chart page →

924
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
brotli@1.0.9-2+b6
nodejs@18.20.4-1nodesource1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

80,348
vulnz-nvd-mirroreugen1.0.01 of 1See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,911
fastapi-microservice-appfast-api-microservice-app1.3.01 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:7.0c53852c00c23
brotli@1.0.9-2build6
no fix listed

Open the chart page →

11,091
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
brotli@1.1.0-r2
1.1.1-r0
featurehub/edge:1.9.198ad426737f6
brotli@1.1.0-r2
1.1.1-r0
featurehub/mr:1.9.1477d8bf771a9
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

11,377
zabbix-server-mysqlfermosit3.0.23 of 4See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
brotli@1.1.0-2build2
no fix listed
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
brotli@1.1.0-2build2
no fix listed
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
brotli@1.1.0-2build2
no fix listed

Open the chart page →

14,593
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest33afb0659d78
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

3,855
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latest6acb4a5903eb
brotli@1.1.0
1.2.1

Open the chart page →

2,913
rss-bridgegabe565Verified publisher0.5.21 of 1See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/rss-bridge/rss-bridge:latestfcd6ac6335ef
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,389
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

19,509
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
nodejs@14.17.0-1nodesource1
no fix listed

Open the chart page →

25,150
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
brotli@1.0.7-6ubuntu0.1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
brotli@1.0.7-6ubuntu0.1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

111,920
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/git:latest03228d7ded48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

5,543
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

85,999
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

15,664
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,597
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,336
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

11,990
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
brotli@1.0.9-2build6
no fix listed

Open the chart page →

14,691
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
brotli@1.0.7-6ubuntu0.1
no fix listed
haveagitgat/tdarr_node:2.00.101e3f9328327d
brotli@1.0.7-6ubuntu0.1
nodejs@14.15.3-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

103,481
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latestfde7829b12d3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,004
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,216
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latesta134550be58a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

17,247
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,863
gluugluu-flexOfficial0.0.0-nightly9 of 9See more

gluu gluu-flex 0.0.0-nightly

9 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gluufederation/flex/admin-ui:0.0.0-nightly18fa568c0ceb
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gluufederation/flex/persistence-loader:0.0.0-nightly6989516e4943
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightlya1e82488e141
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/casa:0.0.0-nightly2928a069e765
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly71dac4d5d55f
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly62bd0cf3b8dc
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/configurator:0.0.0-nightlya63c560869f6
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/fido2:0.0.0-nightlyf8946f24c96e
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/scim:0.0.0-nightly528e8b045647
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

272
greenkubegreenkubeVerified publisher0.3.01 of 3See more

greenkube greenkube 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,270
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

77,092
bazarrhalkeye0.2.01 of 1See more

bazarr halkeye 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/bazarr:latestfb0437897eaa
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

688
haproxy-unified-gatewayhaproxytechVerified publisher1.2.11 of 1See more

haproxy-unified-gateway haproxytech 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
haproxytech/haproxy-unified-gateway:1.0.808f293b32638
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

256

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
johnblack77/clustereye:latest-amd64c3dbd2db66c7
brotli@1.2.0-r0
1.2.1-r0
1
johnblack77/clustereye-api:latestd771c9e0e21e
brotli@1.1.0-r2
1.1.1-r0
1
jordan/icinga2:latestf75025fe8ea8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
josh5/unmanic:0.2.64d49c4816260
brotli@1.0.9-2build6
nodejs@20.11.1-1nodesource1
no fix listed
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
brotli@1.2.0-r0
1.2.1-r0
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
brotli@1.1.0-2build2
no fix listed
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
brotli@1.0.9-2build6
no fix listed
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
brotli@1.0.9-2build6
no fix listed
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
brotli@1.0.9-2build6
no fix listed
1
kanboard/kanboard:v1.2.56871435323da4
brotli@1.2.0-r1
1.2.1-r0
1
kayrosuno/kping:latestf3bd44b29b0d
brotli@1.1.0-2build2
no fix listed
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
brotli@1.2.0-r0
1.2.1-r0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
brotli@1.2.0-r0
1.2.1-r0
1
kerolosayman308/voting-app-env:examplevotingapp_vote29d99802f2d7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
kerolosayman308/voting-app-env:examplevotingapp_result6e92e5a231fa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
brotli@1.0.7-6ubuntu0.1
no fix listed
1
kimai/kimai2:2.70.20db3af96f0da
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kinseii/wazuh-agent:4.14.17160eb143728
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kitware/cdash:v5.5.16fab5f5ec6f2
brotli@1.1.0-2+b7
nodejs@24.22.1-1nodesource1
1.1.0-2+deb13u1
no fix listed
1
kixote/typemill628f79a08cc7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
kixote/typemilla1982fcfdde1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
knspar/phronetis-operator:0.1.60c4f0543ee58
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
koenkk/zigbee2mqtt:2.7.260a295b40f4e
brotli@1.2.0-r0
1.2.1-r0
1
kong/httpbin:latesta6ac46531193
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-agent:1.8.5394847126d5c
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
brotli@1.0.7-6ubuntu0.1
no fix listed
1
krontechnology/aapm-service:1.2.3b964408930a5
brotli@1.0.9-2build6
no fix listed
1
krontechnology/aapm-sidecar-injector:1.2.18b42fad987b3
brotli@1.1.0-r2
1.1.1-r0
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
brotli@1.1.0-2build2
no fix listed
1
kubeshark/front:v53.67e5bb967176e
brotli@1.2.0-r1
1.2.1-r0
1
kubeshop/bitnami-mongodb:8.3.11e209888ede02
brotli@1.1.0-2build2
no fix listed
1
kubeshop/testkube-kubectl:1.37.15011b74081fa
brotli@1.2.0-r1
1.2.1-r0
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
brotli@1.2.0-r0
1.2.1-r0
1
kusionstack/kusion:v0.14.0126c8f0b0976
brotli@1.0.9-2build6
no fix listed
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
brotli@1.0.9-2build6
no fix listed
1
labs64/auditflow97825e27bd2c
brotli@1.2.0-3build1
no fix listed
1
labs64/checkout250aadcd0f20
brotli@1.2.0-3build1
no fix listed
1
labs64/payment-gatewayf41c9e15731c
brotli@1.2.0-3build1
no fix listed
1
laly9999/node-app:1dd0e503913e1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lancachenet/monolithic:latest155817065b13
brotli@1.1.0-2build2
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
langgenius/dify-agent-local-sandbox:1.17.0316279a82ead
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
langgenius/dify-api:1.0.0066035f93856
brotli@1.0.9-2+b6
brotli@1.1.0
nodejs@18.19.0+dfsg-6~deb12u2
1.0.9-2+deb12u1
1.2.1
no fix listed
1
langgenius/dify-api:1.17.052be6088dd84
brotli@1.0.9-2+b6
brotli@1.2.0
nodejs@22.21.0-1nodesource1
1.0.9-2+deb12u1
1.2.1
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
brotli@1.0.9-2+b6
brotli@1.1.0
nodejs@18.19.0+dfsg-6~deb12u1
1.0.9-2+deb12u1
1.2.1
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.