StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

63,100
clickstackhdx-oss-v21.1.11 of 5See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0.32-focal3b6c281e1c08
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

5,704
headscale-uiheadscale-uiVerified publisher0.3.11 of 1See more

headscale-ui headscale-ui 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/munmunmiao/headscale-ui:0.1.301d21fffac78
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,637
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,992
app-blueprinthelm-app-blueprintVerified publisher0.2.11 of 1See more

app-blueprint helm-app-blueprint 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,385
answerhelmforgeVerified publisher1.5.61 of 1See more

answer helmforge 1.5.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/answer:2.0.30863470d8293
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

467
guacamolehelmforgeVerified publisher1.6.31 of 5See more

guacamole helmforge 1.6.3

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
brotli@1.1.0-2build2
no fix listed

Open the chart page →

10,806
kafkahelmforgeVerified publisher1.5.11 of 1See more

kafka helmforge 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

798
opencloudhelmforgeVerified publisher1.0.11 of 1See more

opencloud helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opencloudeu/opencloud:7.2.46d992ccc5f1c
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,316
uptime-kumahelmforgeVerified publisher1.5.171 of 1See more

uptime-kuma helmforge 1.5.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

42,372
vaultwardenhelmforgeVerified publisher1.14.51 of 1See more

vaultwarden helmforge 1.14.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.37.4efb3cde96201
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,643
mywebapphelm-nginxVerified publisher0.1.01 of 1See more

mywebapp helm-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

20,188
hivemq-platform-operatorhivemqOfficialVerified publisher0.2.281 of 1See more

hivemq-platform-operator hivemq 0.2.28

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hivemq/hivemq-platform-operator:2.3.108cf25f815b9
brotli@1.2.0-3build1
no fix listed

Open the chart page →

626
hivemq-swarmhivemqOfficialVerified publisher0.2.721 of 1See more

hivemq-swarm hivemq 0.2.72

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hivemq/hivemq-swarm:4.56.1896616dea2f2
brotli@1.2.0-3build1
no fix listed

Open the chart page →

626
holoinsightholoinsight0.2.52 of 6See more

holoinsight holoinsight 0.2.5

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ceresdb/ceresdb-server:v1.0.053b2d0dbba1f
brotli@1.0.7-6ubuntu0.1
no fix listed
library/elasticsearch:7.16.18d5fd89230d7
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

30,618
homer-operatorhomer-operator0.3.41 of 2See more

homer-operator homer-operator 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

666
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,346
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
brotli@1.0.9-2build6
nodejs@24.13.1-1nodesource1
no fix listed
no fix listed

Open the chart page →

67,295
cyberchefhv-helm-repo0.3.41 of 1See more

cyberchef hv-helm-repo 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gchq/cyberchef:11.5.0f04a39926344
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

270
iceberg-resticeberg-rest-fixture0.0.11 of 2See more

iceberg-rest iceberg-rest-fixture 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,041
odooimioVerified publisher3.2.11 of 3See more

odoo imio 3.2.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.29.8-alpine5616878291a2
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,040
immichimmich-helmVerified publisher0.5.11 of 4See more

immich immich-helm 0.5.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.4f6475c58b07a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

10,531
elasticinseefrlab2.2.02 of 2See more

elastic inseefrlab 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
brotli@1.0.7-6ubuntu0.1
no fix listed
library/kibana:7.17.3e2e2031c15be
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

18,627
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
brotli@1.0.9
1.2.1

Open the chart page →

9,838
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

14,478
jdownloader2jdownloader2Verified publisher1.12.01 of 1See more

jdownloader2 jdownloader2 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jlesage/jdownloader-2:v26.09.1bd6cd2fdc728
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

346
jellyfinjellyfinVerified publisher0.3.321 of 1See more

jellyfin jellyfin 0.3.32

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:12.2c3efa69a22f2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,660
jenkinsjenkins-cicd-tool0.1.01 of 1See more

jenkins jenkins-cicd-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
jessejesse-chartVerified publisher0.0.462 of 6See more

jesse jesse-chart 0.0.46

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/git:latestce84fd6a057b
brotli@1.2.0-r1
1.2.1-r0
library/postgres:alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,772
chronoreaperjfwenisch1.1.101 of 1See more

chronoreaper jfwenisch 1.1.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wenisch-tech/chronoreaper:1.1.10447726cec07b
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,245
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,776
git-configmap-syncjulb-meVerified publisher1.0.11 of 2See more

git-configmap-sync julb-me 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/git:latest03228d7ded48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,413
jupyterhub-outpostjupyter-jscVerified publisher2.4.11 of 1See more

jupyterhub-outpost jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,068
qbittorrentk8s-chartsVerified publisher3.1.01 of 2See more

qbittorrent k8s-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,806
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.322 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

2 of the 17 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
brotli@1.2.0-r0
1.2.1-r0
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

19,304
ombik8s-home-lab-repo12.2.11 of 1See more

ombi k8s-home-lab-repo 12.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,745
radarrk8s-home-lab-repo17.6.11 of 1See more

radarr k8s-home-lab-repo 17.6.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/radarr:6.2.1a566e7d364b9
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

870
sonarrk8s-home-lab-repo17.3.11 of 1See more

sonarr k8s-home-lab-repo 17.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

885
tautullik8s-home-lab-repo12.3.01 of 1See more

tautulli k8s-home-lab-repo 12.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-operations/tautulli:2.17.12183820d45a1
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,207
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
brotli@1.0.9-2build6
no fix listed
kafkakraft/kafka-controller:3.7.0f261ad288fce
brotli@1.0.9-2build6
no fix listed
kafkakraft/kafkakraft:3.7.02e4b593b878b
brotli@1.0.9-2build6
no fix listed

Open the chart page →

16,146
kangalkangal2.3.11 of 2See more

kangal kangal 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:latest58c1fbf5f5cf
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

132
web-chartkbt-ktcloudlab0.1.01 of 1See more

web-chart kbt-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
kdiffkdiff-snapshotsVerified publisher0.0.2032 of 2See more

kdiff kdiff-snapshots 0.0.203

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
filegator/filegator:latesta40a23c383c6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,579
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,036
app-componentkeltio-helm-chartsVerified publisher3.14.01 of 1See more

app-component keltio-helm-charts 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
kenerkenerVerified publisher0.2.01 of 1See more

kener kener 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,511
keydbkeydb-helmVerified publisher1.0.61 of 1See more

keydb keydb-helm 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

6,643
netbirdkitstream-netbird0.7.21 of 3See more

netbird kitstream-netbird 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.95.03d6adfee19dd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,150
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
glpi/glpi:latestc90bc626bcf4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,232

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
linuxserver/sonarr:latestdffc730adcb8
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/sonarr:latestf247545d23ba
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/tautulli:latestd3c53deb09f6
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/unifi-controller:8.0.240ae315a3a456
brotli@1.0.7-6ubuntu0.1
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
brotli@1.0.7-6ubuntu0.1
no fix listed
1
linuxserver/unifi-network-application:10.6.106-ls151392031f6300b
brotli@1.2.0-3build1
no fix listed
1
linuxserver/wireguard:1.0.20260223-r0-ls126:latest6bcf5d2f5a26
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/wireguard:1.0.20260223-r0-ls127e2f655e1956a
brotli@1.2.0-r1
1.2.1-r0
1
lis314/project-zomboid-docker:latestaa2089c37920
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lissy93/web-check:latest5e4feb4acbd5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
livekit/ingress:v1.2.21ab01641b366
brotli@1.0.9-2build6
no fix listed
1
localstack/localstack:3.19d278167f2b7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
locustio/locust:2.24.151d866285170
brotli@1.1.0
1.2.1
1
loeken/home-assistant:2026.9.2b1dff5b4c593
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1
1
loeken/jellyfin:10.11.87efbc24e47b0
brotli@1.2.0-r0
1.2.1-r0
1
loeken/radarr:5.27.0-nightlya24409d3846d
brotli@1.1.0-r2
1.1.1-r0
1
loeken/sonarr:4.0.19d5f29c8b9fad
brotli@1.2.0-r1
1.2.1-r0
1
log10x/filebeat-10x:1.1.39-native7d6a79dacd58
brotli@1.0.7-6ubuntu0.1
no fix listed
1
logiqai/flash:v3.10.265b996bc7bdc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.24c364ef96aad
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.4917318f9d7be
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.4.091e963bfda56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.0a8610b3b4c38
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.5c74379ac4509
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
brotli@1.0.7-6ubuntu0.1
nodejs@10.19.0~dfsg-3ubuntu1
no fix listed
no fix listed
1
luligu/matterbridge:3.0.28f97884bebc2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
m11s/decap-cms:0.2.11-s318bf5dd04f1c
brotli@1.2.0-r1
1.2.1-r0
1
machines/filestash:latest12bd8c30da4d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makeplane/admin-commercial:v3.3.35bac92edd8dc
brotli@1.2.0-r1
1.2.1-r0
1
makeplane/backend-commercial:v3.3.39f650887385e
brotli@1.2.0-r0
1.2.1-r0
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makeplane/space-commercial:v3.3.3c4a6236c4080
brotli@1.2.0-r1
1.2.1-r0
1
makeplane/web-commercial:v3.3.30773d0414fd0
brotli@1.2.0-r1
1.2.1-r0
1
makersquad/harp-proxy:0.8.1a40dd258c527
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.2-1nodesource1
no fix listed
no fix listed
1
manyfold3d/manyfold-solo:0.150.0f171f544b81a
brotli@1.2.0-r1
1.2.1-r0
1
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
brotli@1.2.0-r0
1.2.1-r0
1
maponyacharles/sceptreai:ui-0.1.127cd0f11c5e55
brotli@1.2.0-r0
1.2.1-r0
1
mariusm/vingress:0.5.0b3db186c3d72
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
mathesar/mathesar:0.12.0091757cb01fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mathnao/certs:2.1.3b900e6b64684
brotli@1.1.0-r2
1.1.1-r0
1
matrixdotorg/synapse:v1.163.141d8a4edfdc6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v33.1.0480edbd9257a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v24.0.06cbfea4c694a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mautic/mautic:7-apacheeb8cc73d97e1
brotli@1.0.9-2+b6
nodejs@24.15.0-1nodesource1
1.0.9-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.