StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,708
of 18,232 indexed, latest versions
Container images
1,543
deployed by those charts
Fix available
4 of 5
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 1,708 of 18,232 indexed charts deploy, on 1,543 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+4 more1.0.9-2+deb12u1, 1.1.0-2+deb13u11,239
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0268
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+41 moreno fix listed60
brotlipypi1.0.9, 1.1.0, 1.2.01.2.156
brotlicffipypi1.2.0.11.2.1.01
OSV records
ALPINE-CVE-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-2026-111497, BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

1,708 by stars
ChartLatestAffected imagesRadar Score
topology-discoveryfrinx-helm-charts4.0.01 of 2See more

topology-discovery frinx-helm-charts 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
frinx/topology-discovery:7.0.37832e3589dba
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,580
borgmaticgabe565Verified publisher0.10.11 of 1See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,489
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latest04eaae7915ba
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,863
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest776a845d5089
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,142
relax-soundsgabe565Verified publisher1.1.01 of 1See more

relax-sounds gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

719
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
brotli@1.0.9-2+b6
nodejs@18.13.0+dfsg1-1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

15,129
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
brotli@1.1.0-2build2
no fix listed
gchq/hdfs:3.3.35ec58edbb2db
brotli@1.1.0-2build2
no fix listed

Open the chart page →

18,979
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
brotli@1.1.0-2build2
no fix listed

Open the chart page →

10,746
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,665
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

19,151
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

16,349
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

18,559
common-testgeek-cookbookVerified publisher1.0.41 of 1See more

common-test geek-cookbook 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
b4bz/homer:latestfebc8967c9f7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

242
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
brotli@1.0.7-6ubuntu0.1
nodejs@16.13.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

86,487
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,129
factoriogeek-cookbookVerified publisher1.2.21 of 2See more

factorio geek-cookbook 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
factoriotools/factorio:stable312341f29987
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,211
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,492
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
brotli@1.0.7-6ubuntu0.1
nodejs@14.17.2-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

12,719
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

10,901
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

11,116
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

16,122
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
brotli@1.0.9-2+b6
nodejs@18.20.8-1nodesource1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

68,367
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
brotli@1.0.9-2build6
no fix listed

Open the chart page →

13,649
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

19,608
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

29,922
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
brotli@1.0.9-2build6
no fix listed

Open the chart page →

22,223
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
brotli@1.0.7-6ubuntu0.1
nodejs@17.5.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

16,653
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,528
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
brotli@1.0.9-2build6
no fix listed

Open the chart page →

11,727
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,281
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,888
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

100,526
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
searx/searx:1.0.0-211-968b28993dbb3a6d9419
brotli@1.0.9
1.2.1

Open the chart page →

10,805
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

12,300
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,383
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

19,982
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,567
dispatchoor-uigeneral-helm-chartsVerified publisher0.1.01 of 1See more

dispatchoor-ui general-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,510
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

4,833
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,282
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.83 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
brotli@1.0.7-6ubuntu0.1
no fix listed
library/elasticsearch:7.17.1588c2ec10c7f2
brotli@1.0.7-6ubuntu0.1
no fix listed
library/kibana:7.17.150172f1c538e7
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

38,504
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
brotli@1.0.7-6ubuntu0.1
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

19,927
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:latest62a50b1419fe
brotli@1.1.0-2+b7
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

79,176
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,588
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
brotli@1.0.9-2build6
no fix listed

Open the chart page →

23,373
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

6,715
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
brotli@1.0.9-2build6
no fix listed

Open the chart page →

8,971
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,923
opentelemetry-demogpg-dev0.33.84 of 27See more

opentelemetry-demo gpg-dev 0.33.8

4 of the 27 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
brotli@1.1.0-2build2
no fix listed

Open the chart page →

196,819
video-analytics-demogpu-operator0.1.92 of 3See more

video-analytics-demo gpu-operator 0.1.9

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
brotli@1.0.7-6ubuntu0.1
no fix listed
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

16,446

Container images carrying it

1,543 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
photoprism/photoprism:260601650c6ad5a651
brotli@1.2.0-3build1
no fix listed
1
photoprism/photoprism:260728958642220223
brotli@1.2.0-3build1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
brotli@1.1.0-2build2
no fix listed
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
brotli@1.0.7-6ubuntu0.1
no fix listed
1
plexinc/pms-docker:1.43.3.10896-cb3ebc72d83a425ae9e13
brotli@1.1.0-2build2
no fix listed
1
pockost/matomo:5.14.0134c35415788
brotli@1.1.0-2+b7
no fix listed
1
polyaxon/polyaxon-api:2.18.0b795f2b224d2
brotli@1.1.0-2+b7
no fix listed
1
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
brotli@1.1.0-2+b7
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
brotli@1.1.0-2+b7
no fix listed
1
powerdns/pdns-auth-51:5.1.4bb5b1c133bcc
brotli@1.1.0-2+b7
no fix listed
1
powerdns/pdns-recursor-54:5.4.8347edcd144e0
brotli@1.1.0-2+b7
no fix listed
1
praravind1801/helmimages:3.0.0f29d637b9ce1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
prefecthq/prefect:3.9.0-python3.11e5f851d68db9
brotli@1.1.0-2+b7
no fix listed
1
pretix/standalone:2026.8.0ec17c2f761f7
brotli@1.1.0-2+b7
nodejs@22.23.3-1nodesource1
no fix listed
no fix listed
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
project2team4/react:latest3ff031a08887
brotli@1.0.7-6ubuntu0.1
no fix listed
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
brotli@1.1.0-2build2
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
pschichtel/mindustry-server:v145.1b543e9c2d371
brotli@1.0.9-2build6
no fix listed
1
psorab/elibrary:latest53b68896c4ce
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.0-deb-1nodesource1
no fix listed
no fix listed
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
brotli@1.0.7-6ubuntu0.1
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
brotli@1.1.0-2build2
no fix listed
1
quickwit/quickwit:v0.8.1d29332bdadcc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
qumine/minecraft-server:v0.1.15c0b650d51132
brotli@1.0.9-2build6
no fix listed
1
rabeh/apibootspring:1.0941007b6946e
brotli@1.0.9-2build6
no fix listed
1
radarbase/radar-push-endpoint:0.4.0e1758508e033
brotli@1.1.0-2build2
no fix listed
1
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
brotli@1.1.0-2build2
no fix listed
1
rajnandan1/kener:3.2.1930407afca731
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
razorbladex401/dayz:latest6a4d79248e7d
brotli@1.0.9-2build6
no fix listed
1
readysettech/sqp:latest588f3507280e
brotli@1.1.0-2build2
no fix listed
1
readysettech/sqp-duckdb:latest67a83203ce60
brotli@1.1.0-2build2
no fix listed
1
reaper99/recipya:v1.2.27f7ec3aeb88c
brotli@1.1.0-r2
1.1.1-r0
1
redash/redash:25.8.000d813437db5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
redash/redash:26.3.0c5c9148f5c38
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
redimp/otterwiki:2b7ece5b8d7cc
brotli@1.0.9-2+b6
no fix listed
1
resurfaceio/resurface:3.7.84d5cda2f64109
brotli@1.0.9-2build6
no fix listed
1
rezachalak/bzen-mongo:1.0.034f694325191
brotli@1.0.7-6ubuntu0.1
no fix listed
1
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
brotli@1.0.7-6ubuntu0.1
no fix listed
1
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
brotli@1.2.0-r0
1.2.1-r0
1
robotshop/rs-mongodb:latest119b545823cd
brotli@1.0.7-6ubuntu0.1
no fix listed
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
brotli@1.0.9-2+b6
no fix listed
1
rocketchat/freeswitch:stablecfba5c20a5cc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
rommapp/romm:5.2.03512f2ca4557
brotli@1.2.0-r0
1.2.1-r0
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
rraahul/test:latestbfe2c1183bc0
brotli@1.0.9-2build6
no fix listed
1
rrobetti/ojp:0.1.0-beta1141bd88232b
brotli@1.1.0-2build2
no fix listed
1
rtuszik/photon-docker:2.4.021549c60f9e6
brotli@1.1.0-2build2
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.