StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
905
of 18,232 indexed, latest versions
Container images
780
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 905 of 18,232 indexed charts deploy, on 780 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.9-2+b6, 1.1.0-2+b7, 1.1.0-2+dhi2, 1.2.0-3no fix listed780
nodejsdeb18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1, 18.19.0+dfsg-6~deb12u2, 18.20.4-1nodesource1+15 moreno fix listed26
OSV records
ECHO-1099-6733-474bDEBIAN-CVE-2026-111497

Charts affected

905 by stars
ChartLatestAffected imagesRadar Score
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

18,048
observalobservalVerified publisher1.15.11 of 8See more

observal observal 1.15.1

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.15.1e40d18a3a739
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,684
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

113,443
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jbtronics/part-db1:latestf6523ff48db1
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,499
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache7ebeef41095c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,588
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,396
skypilotskypilotOfficialVerified publisher0.14.11 of 3See more

skypilot skypilot 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.14.125577df35586
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,818
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,737
spartanspartan0.10.01 of 1See more

spartan spartan 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest332d0beea97c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,661
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

7,557
pretixtechwolf12Verified publisher2026.8.01 of 3See more

pretix techwolf12 2026.8.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
pretix/standalone:2026.8.0ec17c2f761f7
brotli@1.1.0-2+b7
nodejs@22.23.3-1nodesource1
no fix listed
no fix listed

Open the chart page →

10,704
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,818
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablecd2c2cbaf830
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

9,402
paperlesszekker6Verified publisher11.14.01 of 1See more

paperless zekker6 11.14.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,853
paperless-ngxadnoctemVerified publisher0.5.12 of 5See more

paperless-ngx adnoctem 0.5.1

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
brotli@1.1.0-2+b7
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

29,781
agentareaagentareaVerified publisher0.0.293 of 17See more

agentarea agentarea 0.0.29

3 of the 17 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
agentarea/agentarea-api:0.1.1de166c910ef9
brotli@1.1.0-2+b7
no fix listed
agentarea/agentarea-mcp-base:0.1.18b80f30570ff
brotli@1.0.9-2+b6
no fix listed
agentarea/agentarea-mcp-runner:0.1.1066fa4a71695
brotli@1.0.9-2+b6
nodejs@22.23.3-1nodesource1
no fix listed
no fix listed

Open the chart page →

12,660
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,079
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

15,112
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

8,258
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

6,647
music-assistantbdclark-helm-chartsVerified publisher0.4.151 of 1See more

music-assistant bdclark-helm-charts 0.4.15

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

5,373
pgcagriekinVerified publisher2.5.01 of 2See more

pg cagriekin 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,260
pgvectorcagriekinVerified publisher2.5.01 of 3See more

pgvector cagriekin 2.5.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.2.0-pg1844ec6f90669f
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,692
carbone-eecarboneOfficialVerified publisher1.0.91 of 1See more

carbone-ee carbone 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
carbone/carbone-ee:full-5.15.447dee6e75c95
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,105
home-assistant-matter-servercharts-derwitt-devVerified publisher4.4.11 of 2See more

home-assistant-matter-server charts-derwitt-dev 4.4.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/matter-js/matterjs-server:1.5.247bc4d8354ba
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,750
typo3christianhuthVerified publisher8.0.11 of 1See more

typo3 christianhuth 8.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
crinis/typo3:legacy-13.4.365636db17b924
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,718
claude-code-hubclaude-code-hub0.1.01 of 4See more

claude-code-hub claude-code-hub 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ding113/claude-code-hub:latestfa7c6f5428c2
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,370
dawarichcogitriVerified publisher2.10.01 of 3See more

dawarich cogitri 2.10.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
freikin/dawarich:1.16.0b533e6eac446
brotli@1.1.0-2+b7
nodejs@20.19.2+dfsg-1+deb13u3
no fix listed
no fix listed

Open the chart page →

6,727
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

10,178
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

13,591
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

16,543
dbrepodbrepo1.13.34 of 25See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
brotli@1.0.9-2+b6
no fix listed
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
brotli@1.0.9-2+b6
no fix listed
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
brotli@1.0.9-2+b6
no fix listed
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

63,615
mealiedeimosfr-charts1.0.171 of 1See more

mealie deimosfr-charts 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,045
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

91,975
nginx-phpfpmdrpsychickVerified publisher0.1.11 of 2See more

nginx-phpfpm drpsychick 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,682
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

4,199
elastalert2elastalert22.31.01 of 1See more

elastalert2 elastalert2 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jertel/elastalert2:2.31.03cbf63f9b7dc
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,414
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
brotli@1.1.0-2+b7
no fix listed
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

76,510
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

6,904
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
brotli@1.0.9-2+b6
nodejs@18.20.4-1nodesource1
no fix listed
no fix listed

Open the chart page →

79,213
rss-bridgegabe565Verified publisher0.5.21 of 1See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/rss-bridge/rss-bridge:latestfcd6ac6335ef
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

2,229
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latestfde7829b12d3
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

2,847
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

3,689
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

75,861
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

62,106
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,868
matomohelmforgeVerified publisher2.3.51 of 3See more

matomo helmforge 2.3.5

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/matomo:5.14.0-apache1e0019262702
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

3,172
uptime-kumahelmforgeVerified publisher1.5.171 of 1See more

uptime-kuma helmforge 1.5.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
no fix listed

Open the chart page →

39,295
vaultwardenhelmforgeVerified publisher1.14.51 of 1See more

vaultwarden helmforge 1.14.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.37.4efb3cde96201
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,576
mywebapphelm-nginxVerified publisher0.1.01 of 1See more

mywebapp helm-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
no fix listed

Open the chart page →

1,661

Container images carrying it

780 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
graviteeio/apim-gateway:4.13.0-debian1f563b333b38
brotli@1.1.0-2+b7
no fix listed
2
graviteeio/apim-management-api:4.13.0-debianca7f0aa8414d
brotli@1.1.0-2+b7
no fix listed
2
infisical/infisical:latest:v0.167.0dbc5be2079b6
brotli@1.1.0-2+b7
no fix listed
2
jellyfin/jellyfin:12.2:latest357724bf0ae2
brotli@1.1.0-2+b7
no fix listed
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
brotli@1.0.9-2+b6
no fix listed
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
brotli@1.1.0-2+b7
no fix listed
2
juicedata/juicefs-csi-driver:v0.33.1103ac60b6b9c
brotli@1.0.9-2+b6
no fix listed
2
library/influxdb:2.9.1:latest8f106f7ff126
brotli@1.0.9-2+b6
no fix listed
2
library/influxdb:2.7b8d940ca9376
brotli@1.0.9-2+b6
no fix listed
2
library/nginx:latest6e23479198b9
brotli@1.1.0-2+b7
no fix listed
2
library/nginx:1.27.098f8ec75657d
brotli@1.0.9-2+b6
no fix listed
2
library/nginx:1.29.49dd288848f44
brotli@1.1.0-2+b7
no fix listed
2
library/node:lts14078204b6bb
brotli@1.0.9-2+b6
no fix listed
2
library/phpmyadmin:5.2.16e75aa8f767c
brotli@1.0.9-2+b6
no fix listed
2
library/phpmyadmin:5.2.3-apache:latest7ebeef41095c
brotli@1.1.0-2+b7
no fix listed
2
library/python:3.7eedf63967cdb
brotli@1.0.9-2+b6
no fix listed
2
library/redmine:6.1.3-trixief474a901faec
brotli@1.1.0-2+b7
no fix listed
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
brotli@1.1.0-2+b7
no fix listed
2
library/wordpress:7.1.3-apache:latest81a34254acaa
brotli@1.1.0-2+b7
no fix listed
2
library/wordpress:latestd42f63cb89ad
brotli@1.1.0-2+b7
no fix listed
2
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
brotli@1.0.9-2+b6
no fix listed
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
brotli@1.0.9-2+b6
no fix listed
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
brotli@1.0.9-2+b6
no fix listed
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
brotli@1.0.9-2+b6
no fix listed
2
openbas/caldera-server:5.1.0a277796d9724
brotli@1.0.9-2+b6
no fix listed
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
brotli@1.0.9-2+b6
no fix listed
2
opencsghq/label-studio:v2.6.0-llm-back03da7327c91e
brotli@1.1.0-2+b7
no fix listed
2
opencsghq/label-studio:v2.6.01f6764097129
brotli@1.1.0-2+b7
no fix listed
2
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
brotli@1.1.0-2+b7
no fix listed
2
polyaxon/polyaxon-cli:2.18.09cf0955704ee
brotli@1.1.0-2+b7
no fix listed
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
brotli@1.0.9-2+b6
no fix listed
2
quickwit/quickwit:v0.8.2363ff56ce456
brotli@1.0.9-2+b6
no fix listed
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
brotli@1.0.9-2+b6
no fix listed
2
uffizzi/controller:latest0344805f267b
brotli@1.0.9-2+b6
no fix listed
2
vaultwarden/server:1.37.2:latest094b5689ed81
brotli@1.1.0-2+b7
no fix listed
2
vdiogov/glpi-conteiner:latest6945f84f0058
brotli@1.0.9-2+b6
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
brotli@1.0.9-2+b6
no fix listed
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
brotli@1.1.0-2+b7
no fix listed
2
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
brotli@1.1.0-2+b7
no fix listed
2
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
brotli@1.1.0-2+b7
no fix listed
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
brotli@1.0.9-2+b6
no fix listed
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
brotli@1.0.9-2+b6
no fix listed
2
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
brotli@1.1.0-2+b7
no fix listed
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
no fix listed
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
brotli@1.0.9-2+b6
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.3.19c09a3563ca3
brotli@1.1.0-2+b7
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
brotli@1.0.9-2+b6
no fix listed
1
adamzammit/limesurvey:7.6.0bb3e8d6e8dde
brotli@1.1.0-2+b7
no fix listed
1

syft 1.42.1 · advisories as of 23 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.