StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
dbrepodbrepo1.13.34 of 25See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

64,844
mealiedeimosfr-charts1.0.171 of 1See more

mealie deimosfr-charts 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,362
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
epam/ai-dial-core:latest15cd928861ed
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,759
phpipamdigitalhubVerified publisher0.1.12 of 2See more

phpipam digitalhub 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:latest366543984c63
brotli@1.2.0-r1
1.2.1-r0
phpipam/phpipam-www:latestd9f2b3a168cc
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,428
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

75,694
matomodigitalist-open-cloud-matomo12.0.271 of 3See more

matomo digitalist-open-cloud-matomo 12.0.27

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,766
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
brotli@1.0.9-2build6
no fix listed

Open the chart page →

76,611
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

93,216
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
brotli@1.1.0-2build2
no fix listed

Open the chart page →

42,115
nginx-phpfpmdrpsychickVerified publisher0.1.12 of 2See more

nginx-phpfpm drpsychick 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
library/php:8-fpm-alpinefa01fb1645cd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,822
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
brotli@1.1.0-2build2
no fix listed

Open the chart page →

76,129
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,319
glpieftechcombr-glpiVerified publisher2.12.11 of 5See more

glpi eftechcombr-glpi 2.12.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eftechcombr/glpi:php-fpm-12.0.038e06ba814b8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,184
egagenteginnovationsVerified publisher0.11.01 of 1See more

egagent eginnovations 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eginnovations/agent:7.6.005d8d2da700a
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,184
elastalert2elastalert22.31.01 of 1See more

elastalert2 elastalert2 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jertel/elastalert2:2.31.03cbf63f9b7dc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,490
elchi-stackelchi2.0.172 of 10See more

elchi-stack elchi 2.0.17

2 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jhonbrownn/elchi:v1.6.43148d16b8bfa
brotli@1.2.0-r1
1.2.1-r0
library/mongo:6.0.12646902910d6a
brotli@1.0.9-2build6
no fix listed

Open the chart page →

18,406
emqx-eeemqx-operator4.4.381 of 2See more

emqx-ee emqx-operator 4.4.38

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
emqx/emqx-ee:4.4.38d48360ed86f4
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

467
enavenav-service-architectureVerified publisher0.0.78 of 10See more

enav enav-service-architecture 0.0.7

8 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latestb9ba46e9bf03
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-aton-admin-service:lateste37dbcc47435
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-aton-service:latestf4f02868ff0c
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-aton-service-client:latestcb2164664144
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-ckeeper:latest9bf16ff1386c
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-eureka:latestdfe2f27d0149
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-msg-broker:latesta314c29cade8
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-vdes-controller:latest2b8007d4df23
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,648
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

78,014
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

7,290
eoapieoapiOfficialVerified publisher0.17.33 of 7See more

eoapi eoapi 0.17.3

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
brotli@1.1.0-r2
1.1.1-r0
ghcr.io/radiantearth/stac-browser:5.1.0e6d92b6ba593
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/stac-utils/stac-fastapi-pgstac:7.1.08d546f480e46
brotli@1.2.0
1.2.1

Open the chart page →

5,915
paraerudikaVerified publisher0.3.01 of 1See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
erudikaltd/para:latest_stable0f2a7fec2a48
brotli@1.2.0-3build1
no fix listed

Open the chart page →

924
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
brotli@1.0.9-2+b6
nodejs@18.20.4-1nodesource1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

80,348
vulnz-nvd-mirroreugen1.0.01 of 1See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,911
fastapi-microservice-appfast-api-microservice-app1.3.01 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:7.0c53852c00c23
brotli@1.0.9-2build6
no fix listed

Open the chart page →

11,091
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
brotli@1.1.0-r2
1.1.1-r0
featurehub/edge:1.9.198ad426737f6
brotli@1.1.0-r2
1.1.1-r0
featurehub/mr:1.9.1477d8bf771a9
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

11,377
zabbix-server-mysqlfermosit3.0.23 of 4See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
brotli@1.1.0-2build2
no fix listed
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
brotli@1.1.0-2build2
no fix listed
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
brotli@1.1.0-2build2
no fix listed

Open the chart page →

14,593
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest33afb0659d78
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

3,855
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latest6acb4a5903eb
brotli@1.1.0
1.2.1

Open the chart page →

2,913
rss-bridgegabe565Verified publisher0.5.21 of 1See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/rss-bridge/rss-bridge:latestfcd6ac6335ef
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,389
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

19,509
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
nodejs@14.17.0-1nodesource1
no fix listed

Open the chart page →

25,150
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
brotli@1.0.7-6ubuntu0.1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
brotli@1.0.7-6ubuntu0.1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

111,920
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/git:latest03228d7ded48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

5,543
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

85,999
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

15,664
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,597
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,336
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

11,990
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
brotli@1.0.9-2build6
no fix listed

Open the chart page →

14,691
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
brotli@1.0.7-6ubuntu0.1
no fix listed
haveagitgat/tdarr_node:2.00.101e3f9328327d
brotli@1.0.7-6ubuntu0.1
nodejs@14.15.3-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

103,481
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latestfde7829b12d3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,004
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,216
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latesta134550be58a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

17,247
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,863
gluugluu-flexOfficial0.0.0-nightly9 of 9See more

gluu gluu-flex 0.0.0-nightly

9 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gluufederation/flex/admin-ui:0.0.0-nightly18fa568c0ceb
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gluufederation/flex/persistence-loader:0.0.0-nightly6989516e4943
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightlya1e82488e141
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/casa:0.0.0-nightly2928a069e765
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly71dac4d5d55f
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly62bd0cf3b8dc
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/configurator:0.0.0-nightlya63c560869f6
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/fido2:0.0.0-nightlyf8946f24c96e
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/scim:0.0.0-nightly528e8b045647
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

272
greenkubegreenkubeVerified publisher0.3.01 of 3See more

greenkube greenkube 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,270
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

77,092
bazarrhalkeye0.2.01 of 1See more

bazarr halkeye 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/bazarr:latestfb0437897eaa
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

688
haproxy-unified-gatewayhaproxytechVerified publisher1.2.11 of 1See more

haproxy-unified-gateway haproxytech 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
haproxytech/haproxy-unified-gateway:1.0.808f293b32638
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

256

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
library/mediawiki:1.43.08b19e819f2e1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/mongo:7.0.140032d2ca20db
brotli@1.0.9-2build6
no fix listed
1
library/mongo:4.4.1305678ae4e5e1
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/mongo:80e900a3364da
brotli@1.1.0-2build2
no fix listed
1
library/mongo:5.0.32-focal3b6c281e1c08
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/mongo:5.0.14-focal50cae5081ab4
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/mongo:noble61dd87ff554d
brotli@1.1.0-2build2
no fix listed
1
library/mongo:6.0.12646902910d6a
brotli@1.0.9-2build6
no fix listed
1
library/mongo:6.0.271a63fc2438e
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/mongo:5.0.217c81758cb295
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/mongo:7.0.28-jammy88785f6f665a
brotli@1.0.9-2build6
no fix listed
1
library/mongo:7.0.12ae1cf99fa7bf
brotli@1.0.9-2build6
no fix listed
1
library/mongo:8.3.13d0c8f51bb63f
brotli@1.1.0-2build2
no fix listed
1
library/mongo:8.0d0d926f94df0
brotli@1.1.0-2build2
no fix listed
1
library/mongo:4.4.18d23ec07162ca
brotli@1.0.7-6ubuntu0.1
no fix listed
1
library/mongo:8.0.11dca8d11fe467
brotli@1.1.0-2build2
no fix listed
1
library/mongo:8.2.12e0ce8c35124d
brotli@1.1.0-2build2
no fix listed
1
library/mongo:9.0.2f5c6240ae8fc
brotli@1.1.0-2build2
no fix listed
1
library/monica:4.1.2-fpm-alpine1104023d0636
brotli@1.2.0-r1
1.2.1-r0
1
library/nextcloud:31.0.6-apache588609d76b21
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/nextcloud:31.0.10-apacheb7faa1653c39
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/nginx:1.27.409369da6b103
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/nginx:1.28146adea4768b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/nginx:1.31.8-alpine1ef7ca94d787
brotli@1.2.0-r1
1.2.1-r0
1
library/nginx:1.31.0-alpine2f07d83bf561
brotli@1.2.0-r0
1.2.1-r0
1
library/nginx:1.31.3-alpine4a73073bd557
brotli@1.2.0-r1
1.2.1-r0
1
library/nginx:1.29.8-alpine5616878291a2
brotli@1.2.0-r0
1.2.1-r0
1
library/nginx:1.27-alpine65645c7bb6a0
brotli@1.1.0-r2
1.1.1-r0
1
library/nginx:1.276784fb0834aa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/nginx:1.25.167f9a4f10d14
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/nginx:1.25.49ff236ed47fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/nginx:1.31:latest:mainline:trixieabe47724e466
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/nginx:1-alpine-perlc803a28886a8
brotli@1.2.0-r1
1.2.1-r0
1
library/nginx:stablecd2c2cbaf830
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/nginx:1.30.4-alpine3.24:stable-alpinedc5069ad14f1
brotli@1.2.0-r1
1.2.1-r0
1
library/nginx:1.31.8-alpinee2d97c2b8c01
brotli@1.2.0-r1
1.2.1-r0
1
library/nginx:stableeb1c896deef8
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/nginx:1.27.3fb197595ebe7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/node:lts6449e19d8184
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/node:208f693eaa7e0a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/node:latesta98e6fda54fd
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/php:8.5.12-fpm-alpine3.244943e6c8a080
brotli@1.2.0-r1
1.2.1-r0
1
library/php:8.4-fpmcc7cdfe4da7d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/php:8-fpm-alpinefa01fb1645cd
brotli@1.2.0-r1
1.2.1-r0
1
library/phpmyadmin:5.2.3-apache:latest7ebeef41095c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/postgres:18.6-alpine3.23478cd7c2fb8c
brotli@1.2.0-r0
1.2.1-r0
1
library/python:3.10c10791e6f690
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
library/python:3.8d41127070014
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
library/python:3.9da5aee29682d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.