StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
brotli@1.2.0-r0
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

6,889
wireguardk8s-home-lab-repo1.6.01 of 1See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,662
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4c842ac797bd1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,520
radondb-mysqlkubesphere-testVerified publisher1.0.11 of 3See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,814
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

60,837
machinarislib42Verified publisher0.2.01 of 1See more

machinaris lib42 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/guydavis/machinaris:testf77fa53b89cb
brotli@1.1.0-2build2
no fix listed

Open the chart page →

26,707
vcluster-platformloftVerified publisher4.12.41 of 1See more

vcluster-platform loft 4.12.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-platform:4.12.4e70b55d801aa
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,257
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,522
sonarrm0nsterrr-sonarrVerified publisher2.3.01 of 1See more

sonarr m0nsterrr-sonarr 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.201f19eb5e0f42
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

336
memgraph-high-availabilitymemgraphVerified publisher1.4.31 of 2See more

memgraph-high-availability memgraph 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
memgraph/memgraph:3.14.0a73242121795
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,179
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

18,252
observalobservalVerified publisher1.15.12 of 8See more

observal observal 1.15.1

2 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.15.1e40d18a3a739
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/observal/observal-web:1.15.16d1aceb728bb
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

6,921
metabaseone-acre-fundVerified publisher0.1.111 of 3See more

metabase one-acre-fund 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
metabase/metabase:latesta314433f07c1
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

24
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

114,036
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jbtronics/part-db1:latestf6523ff48db1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,691
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache7ebeef41095c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,810
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,639
repoflowrepoflow-helm-public0.9.13 of 8See more

repoflow repoflow-helm-public 0.9.1

3 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
brotli@1.0.9-2build6
no fix listed
library/elasticsearch:8.15.0310b9fc03b06
brotli@1.0.7-6ubuntu0.1
no fix listed
nginxinc/nginx-unprivileged:1.31.3-alpinef972e5322b97
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

14,935
backrestrobertobochetVerified publisher0.7.01 of 1See more

backrest robertobochet 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
garethgeorge/backrest:v1.14.1b85297975428
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,385
nominatimrobjuz6.4.43 of 4See more

nominatim robjuz 6.4.4

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0
library/nginx:1.31.8-alpine1ef7ca94d787
brotli@1.2.0-r1
1.2.1-r0
mediagis/nominatim:5.3.27923a8e67197
brotli@1.1.0-2build2
no fix listed

Open the chart page →

57,197
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
brotli@1.1.0-2build2
no fix listed

Open the chart page →

7,171
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
brotli@1.0.7-6ubuntu0.1
nodejs@16.7.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

100,726
satisfactory-serversatisfactoryVerified publisher0.1.61 of 1See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.10e103700ae6ae
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,684
skypilotskypilotOfficialVerified publisher0.14.11 of 3See more

skypilot skypilot 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.14.125577df35586
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

7,122
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,829
spartanspartan0.11.01 of 1See more

spartan spartan 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
adminerstartechnicaVerified publisher1.1.11 of 1See more

adminer startechnica 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/adminer:5.4.2-standalone983261ecc40a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

644
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,625
sn-platformstreamnative1.11.461 of 9See more

sn-platform streamnative 1.11.46

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

76,134
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,786
pretixtechwolf12Verified publisher2026.8.01 of 3See more

pretix techwolf12 2026.8.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
pretix/standalone:2026.8.0ec17c2f761f7
brotli@1.1.0-2+b7
nodejs@22.23.3-1nodesource1
1.1.0-2+deb13u1
no fix listed

Open the chart page →

11,400
feedbacksystemthm-mni-iiVerified publisher0.48.35 of 14See more

feedbacksystem thm-mni-ii 0.48.3

5 of the 14 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/thm-mni-ii/fbs-core:v2.0.918e54463756e
brotli@1.2.0-3build1
no fix listed
ghcr.io/thm-mni-ii/fbs-core-web:v2.0.9daeca3604040
brotli@1.2.0-r0
1.2.1-r0
ghcr.io/thm-mni-ii/fbs-identity-service:v2.0.945929f5c1a12
brotli@1.2.0-3build1
no fix listed
ghcr.io/thm-mni-ii/fbs-sql-playground-web:v2.0.9806d28c6fac0
brotli@1.2.0-r0
1.2.1-r0
ghcr.io/thm-mni-ii/fbs-web-shell:v2.0.9939ec6417e01
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

30,582
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
brotli@1.0.9-2build6
no fix listed

Open the chart page →

12,895
vaultvaultVerified publisher1.22.01 of 4See more

vault vault 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/k8s:1.35.5d870622d0040
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

6,514
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,183
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

8,963
argo-cdwenerme10.11.11 of 3See more

argo-cd wenerme 10.11.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.68e5cc5bb008d
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,745
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablecd2c2cbaf830
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,774
buildkitdwiremindVerified publisher0.34.01 of 1See more

buildkitd wiremind 0.34.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
moby/buildkit:v0.34.1-rootlessf68752a5a94a
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

639
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

5,816
paperlesszekker6Verified publisher11.15.01 of 1See more

paperless zekker6 11.15.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.49bc6e8248891
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

5,588
admineradminerVerified publisher1.4.01 of 1See more

adminer adminer 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/adminer:6.1.174f29c416e14
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

37
paperless-ngxadnoctemVerified publisher0.5.13 of 5See more

paperless-ngx adnoctem 0.5.1

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
brotli@1.0.9-2build6
no fix listed
gotenberg/gotenberg:8.36.087c16b9f3642
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

33,726
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

14,424
aerospike-graphaerospike-helmOfficialVerified publisher3.9.01 of 1See more

aerospike-graph aerospike-helm 3.9.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.394350338eb4c
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

115
agentareaagentareaVerified publisher0.0.294 of 17See more

agentarea agentarea 0.0.29

4 of the 17 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
agentarea/agentarea-api:0.1.1de166c910ef9
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
agentarea/agentarea-mcp-base:0.1.18b80f30570ff
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
agentarea/agentarea-mcp-runner:0.1.1066fa4a71695
brotli@1.0.9-2+b6
nodejs@22.23.3-1nodesource1
1.0.9-2+deb12u1
no fix listed
rustfs/rustfs:1.0.39ca9559533b5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

13,394
akeyless-api-gatewayakeyless-services-helmVerified publisher1.62.311 of 1See more

akeyless-api-gateway akeyless-services-helm 1.62.31

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
akeyless/base:latest759e4289fae8
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,254
icat-k8salba-helm-chartsVerified publisher1.1.02 of 4See more

icat-k8s alba-helm-charts 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:8.18.0d94d07ba9e7d
brotli@1.2.0-r0
1.2.1-r0
payara/server-full:7.2026.2-jdk2531f1253f0cf8
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,875
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,204
prowlarralekcVerified publisher2.6.01 of 1See more

prowlarr alekc 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/hotio/prowlarr:release-2.6.5.5623ed37728f55a3
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

66

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
brotli@1.1.0-2build2
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
brotli@1.1.0-2build2
no fix listed
1
langgenius/dify-plugin-daemon:main-localf37071eaf645
brotli@1.1.0-2build2
no fix listed
1
layer5/meshery:stable-latest78a8be21bef3
brotli@1.1.0-r2
1.1.1-r0
1
lbenicio/stremio-web:latest732f9003de33
brotli@1.2.0-r0
1.2.1-r0
1
lib42/jackett:latesta55596cda383
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/adminer:latest4e3a6514c26c
brotli@1.2.0-r1
1.2.1-r0
1
library/adminer:6.0.1:latest51262b555d9e
brotli@1.2.0-r1
1.2.1-r0
1
library/adminer:6.1.1:latest74f29c416e14
brotli@1.2.0-r1
1.2.1-r0
1
library/adminer:587f9aeeef916
brotli@1.2.0-r1
1.2.1-r0
1
library/adminer:5.4.2-standalone983261ecc40a
brotli@1.2.0-r1
1.2.1-r0
1
library/buildpack-deps:curl3dd78c060b4d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/buildpack-deps:curl6bdd718f8e49
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/buildpack-deps:scm6e8ba98ab916
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/caddy:2.11.2-alpine834468128c76
brotli@1.2.0-r0
1.2.1-r0
1
library/caddy:latestf2a1290d0463
brotli@1.2.0-r0
1.2.1-r0
1
library/cassandra:3.11.10b095ff3248c6
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/convertigo:8.4.67060aebbcbec
brotli@1.1.0-2build2
no fix listed
1
library/couchdb:3.53611ce43bd32
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/docker:29.3.0-dind-alpine3.231ba18449911d
brotli@1.2.0-r0
1.2.1-r0
1
library/docker:dind3e5756e2b6da
brotli@1.2.0-r1
1.2.1-r0
1
library/docker:29.8.1-dind:dind:latest3f3c01aaaebf
brotli@1.2.0-r1
1.2.1-r0
1
library/docker:dind-rootless825e451c9bd8
brotli@1.2.0-r1
1.2.1-r0
1
library/docker:27-cli851f91d24121
brotli@1.1.0-r2
1.1.1-r0
1
library/docker:27-dindaa3df78ecf32
brotli@1.1.0-r2
1.1.1-r0
1
library/drupal:11.4.10-php8.5-apache-bookworm116fbf35120e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/eclipse-temurin:25.0.3_9-jre-alpine-3.2328db6fdf60e3
brotli@1.2.0-r0
1.2.1-r0
1
library/elasticsearch:8.17.32cc40b15dff8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/elasticsearch:8.15.0310b9fc03b06
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/elasticsearch:7.17.0332c6d416808
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/elasticsearch:7.17.1588c2ec10c7f2
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/elasticsearch:7.16.18d5fd89230d7
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/elasticsearch:7.17.8fdc73b3249c1
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/flink:1.14.6-scala_2.122461f02672b3
brotli@1.0.9-2build6
no fix listed
1
library/golang:latest957861185dbf
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/httpd:2.4.631ae8051591a5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/httpd:latest46a65814cc05
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/httpd:2.4-alpine759a1d9178d3
brotli@1.2.0-r1
1.2.1-r0
1
library/influxdb:3.10.5-core695a8063ff10
brotli@1.1.0-2build2
no fix listed
1
library/influxdb:1.12.3-meta8812029260b5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/influxdb:1.12.3-datab0f9fc41ed79
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/influxdb:3.12.1-enterprisec9c06d1aab5f
brotli@1.1.0-2build2
no fix listed
1
library/kibana:7.17.150172f1c538e7
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/kibana:8.19.224116dd6a5838
brotli@1.1.0-2build2
no fix listed
1
library/kibana:7.17.8c5781ba340ef
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/kibana:7.17.3e2e2031c15be
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/kong:3.8.0322e80209a91
brotli@1.0.9-2build6
no fix listed
1
library/logstash:7.17.817a4f64e9cf5
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/matomo:5.14.0-apache40680f8e7ab6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.