StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
clowder2ncsaVerified publisher1.9.72 of 12See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

121,685
nginx-chartnginx-chart-testVerified publisher0.1.11 of 1See more

nginx-chart nginx-chart-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
papermergenicholaswildeVerified publisher1.0.21 of 1See more

papermerge nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,954
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:latest81a34254acaa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

16,238
opengistobeoneVerified publisher1.1.61 of 1See more

opengist obeone 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/thomiceli/opengist:1.15.1038d47937d3b
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

904
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,651
onechartonechart-slVerified publisher0.77.11 of 1See more

onechart onechart-sl 0.77.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

16,139
openclawopenclaw-helm-chartVerified publisher1.0.701 of 3See more

openclaw openclaw-helm-chart 1.0.70

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.10.67dbff0fe5f53
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,448
openobserveopenobserve1.0.31 of 6See more

openobserve openobserve 1.0.3

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.7ffce8bd10338
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,645
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
brotli@1.1.0-2build2
no fix listed

Open the chart page →

6,988
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.67 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.6

7 of the 34 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.1.0-telemetry-docs3f257a843222
brotli@1.2.0-r0
1.2.1-r0
ghcr.io/open-telemetry/demo:3.1.0-kafka4402ba7fd544
brotli@1.2.0-r0
1.2.1-r0
ghcr.io/open-telemetry/demo:3.1.0-chatbot604b1f493c92
brotli@1.2.0
1.2.1
ghcr.io/open-telemetry/demo:3.1.0-fraud-detectiona07ee694304b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1
ghcr.io/open-telemetry/demo:3.1.0-addfd7a4697116
brotli@1.1.0-2build2
no fix listed
ghcr.io/open-telemetry/demo:3.1.0-quotee0b1ab3784fd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

29,432
opikopikOfficialVerified publisher2.2.1195 of 12See more

opik opik 2.2.119

5 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.0862d86046bbc
brotli@1.2.0-r0
1.2.1-r0
curlimages/curl:8.12.194e9e444bcba
brotli@1.1.0-r2
1.1.1-r0
library/zookeeper:3.9.4dfa9ba46d14b
brotli@1.0.9-2build6
no fix listed
ghcr.io/comet-ml/opik/opik-frontend:2.2.119c8a9499c9b6f
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/comet-ml/opik/opik-python-backend:2.2.11961bff3ce24e9
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16,952
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest35575d4f2bfe
brotli@1.0.9-2build6
no fix listed
shaowenchen/ops-server:latest6bac5cebd125
brotli@1.0.9-2build6
no fix listed

Open the chart page →

97,816
orbitalregorbitalregVerified publisher0.4.21 of 5See more

orbitalreg orbitalreg 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-frontend:0.4.2d18ab6b3b33d
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

5,933
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

4,760
prowlarrpanzer1119Verified publisher0.4.181 of 2See more

prowlarr panzer1119 0.4.18

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/prowlarr:2.4.0.5397-ls149a46d0ce0a823
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,152
paperless-ngxpaperlessVerified publisher0.4.11 of 3See more

paperless-ngx paperless 0.4.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinned9bc6e8248891
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

10,012
homerpascaliskeVerified publisher3.1.11 of 1See more

homer pascaliske 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/bastienwirtz/homer:v25.11.15c3a0fb561e0
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

591
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,764
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,059
piholepihole-helmVerified publisher1.6.01 of 1See more

pihole pihole-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
pihole/pihole:2026.07.2f7d1be836e3b
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

943
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
brotli@1.0.9-2build6
no fix listed

Open the chart page →

8,162
playgroundplayground0.1.11 of 1See more

playground playground 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
matomopockostVerified publisher1.4.01 of 3See more

matomo pockost 1.4.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
pockost/matomo:5.14.0134c35415788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,738
portraitportraitVerified publisher0.2.135 of 8See more

portrait portrait 0.2.13

5 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
brotli@1.0.7-6ubuntu0.1
no fix listed
library/nginx:alpine892bb2152464
brotli@1.2.0-r1
1.2.1-r0
treskon/portrait:DEV-latest88e813f22347
brotli@1.2.0-3build1
no fix listed
treskon/portrait-pythonruntime:DEV-latest694c098bcb52
brotli@1.2.0-r1
1.2.1-r0
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

96,248
postgresqlpostgresqlVerified publisher0.3.172 of 2See more

postgresql postgresql 0.3.17

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/postgres:18.6-alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0
pgautoupgrade/pgautoupgrade:18-alpine516a55460258
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,480
postgresql-backup-restorepostgresql-backup-restore0.1.21 of 2See more

postgresql-backup-restore postgresql-backup-restore 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latesta134550be58a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

107
JenkinsprasoonjenkinsVerified publisher0.1.01 of 1See more

Jenkins prasoonjenkins 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
preparrpreparr0.19.106 of 6See more

preparr preparr 0.19.10

6 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0
linuxserver/prowlarr:latestf9151e5bc102
brotli@1.2.0-r1
1.2.1-r0
linuxserver/qbittorrent:latest97333cc1ccf9
brotli@1.2.0-r1
1.2.1-r0
linuxserver/radarr:latestcfbc4fa09dc9
brotli@1.2.0-r1
1.2.1-r0
linuxserver/sonarr:latestdffc730adcb8
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/robbeverhelst/preparr:latest85d13ddc19b8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,200
prometheus-sql-exporterprometheus-communityVerified publisher0.5.01 of 1See more

prometheus-sql-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,198
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

51,238
proxy-ipsecproxy-ipsec1.0.141 of 1See more

proxy-ipsec proxy-ipsec 1.0.14

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
caligari/proxy-ipsec:latest9d537a9c883d
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

468
pzserverpzserver0.1.171 of 2See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lis314/project-zomboid-docker:latestaa2089c37920
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,575
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
brotli@1.1.0-2build2
no fix listed

Open the chart page →

64,349
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
brotli@1.0.9-2build6
no fix listed

Open the chart page →

8,205
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latestf611790ecffa
brotli@1.0.9-2build6
no fix listed

Open the chart page →

69,797
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,384
reportportalreportportal-ioOfficialVerified publisher26.10.133 of 15See more

reportportal reportportal-io 26.10.13

3 of the 15 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
reportportal/k8s-wait-for:latestbd5cb2bd57f3
brotli@1.2.0-r1
1.2.1-r0
reportportal/service-ui:5.15.67f604771ce24
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

12,662
resurfaceresurfaceioVerified publisher3.9.02 of 3See more

resurface resurfaceio 3.9.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jitesoft/kubectl:latest8e4ceaa6d7db
brotli@1.2.0-r1
1.2.1-r0
resurfaceio/resurface:3.7.84d5cda2f64109
brotli@1.0.9-2build6
no fix listed

Open the chart page →

9,400
kube-resource-reportrlex0.10.11 of 2See more

kube-resource-report rlex 0.10.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpine892bb2152464
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,663
service-names-port-numbersrm3lVerified publisher0.27.01 of 1See more

service-names-port-numbers rm3l 0.27.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,746
kimai2robjuz5.0.181 of 2See more

kimai2 robjuz 5.0.18

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kimai/kimai2:2.70.20db3af96f0da
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

20,149
rocketadminrocketadminOfficialVerified publisher1.0.431 of 1See more

rocketadmin rocketadmin 1.0.43

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

27,427
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

6,619
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

57,399
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

7,592
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,827
routehub-client-hubroutehub-helm1.0.02 of 3See more

routehub-client-hub routehub-helm 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
brotli@1.0.7-6ubuntu0.1
no fix listed
timescale/timescaledb-ha:pg169c6c86701e9b
brotli@1.0.9-2build6
no fix listed

Open the chart page →

15,722
rstudio-pmrstudioVerified publisher0.20.71 of 1See more

rstudio-pm rstudio 0.20.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
posit/package-manager:2026.10.0-ubuntu-24.04574ed7ec955f
brotli@1.1.0-2build2
no fix listed

Open the chart page →

24,894

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
linuxserver/sonarr:latestdffc730adcb8
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/sonarr:latestf247545d23ba
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/tautulli:latestd3c53deb09f6
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/unifi-controller:8.0.240ae315a3a456
brotli@1.0.7-6ubuntu0.1
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
brotli@1.0.7-6ubuntu0.1
no fix listed
1
linuxserver/unifi-network-application:10.6.106-ls151392031f6300b
brotli@1.2.0-3build1
no fix listed
1
linuxserver/wireguard:1.0.20260223-r0-ls126:latest6bcf5d2f5a26
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/wireguard:1.0.20260223-r0-ls127e2f655e1956a
brotli@1.2.0-r1
1.2.1-r0
1
lis314/project-zomboid-docker:latestaa2089c37920
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lissy93/web-check:latest5e4feb4acbd5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
livekit/ingress:v1.2.21ab01641b366
brotli@1.0.9-2build6
no fix listed
1
localstack/localstack:3.19d278167f2b7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
locustio/locust:2.24.151d866285170
brotli@1.1.0
1.2.1
1
loeken/home-assistant:2026.9.2b1dff5b4c593
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1
1
loeken/jellyfin:10.11.87efbc24e47b0
brotli@1.2.0-r0
1.2.1-r0
1
loeken/radarr:5.27.0-nightlya24409d3846d
brotli@1.1.0-r2
1.1.1-r0
1
loeken/sonarr:4.0.19d5f29c8b9fad
brotli@1.2.0-r1
1.2.1-r0
1
log10x/filebeat-10x:1.1.39-native7d6a79dacd58
brotli@1.0.7-6ubuntu0.1
no fix listed
1
logiqai/flash:v3.10.265b996bc7bdc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.24c364ef96aad
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.4917318f9d7be
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.4.091e963bfda56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.0a8610b3b4c38
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.5c74379ac4509
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
brotli@1.0.7-6ubuntu0.1
nodejs@10.19.0~dfsg-3ubuntu1
no fix listed
no fix listed
1
luligu/matterbridge:3.0.28f97884bebc2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
m11s/decap-cms:0.2.11-s318bf5dd04f1c
brotli@1.2.0-r1
1.2.1-r0
1
machines/filestash:latest12bd8c30da4d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makeplane/admin-commercial:v3.3.35bac92edd8dc
brotli@1.2.0-r1
1.2.1-r0
1
makeplane/backend-commercial:v3.3.39f650887385e
brotli@1.2.0-r0
1.2.1-r0
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makeplane/space-commercial:v3.3.3c4a6236c4080
brotli@1.2.0-r1
1.2.1-r0
1
makeplane/web-commercial:v3.3.30773d0414fd0
brotli@1.2.0-r1
1.2.1-r0
1
makersquad/harp-proxy:0.8.1a40dd258c527
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.2-1nodesource1
no fix listed
no fix listed
1
manyfold3d/manyfold-solo:0.150.0f171f544b81a
brotli@1.2.0-r1
1.2.1-r0
1
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
brotli@1.2.0-r0
1.2.1-r0
1
maponyacharles/sceptreai:ui-0.1.127cd0f11c5e55
brotli@1.2.0-r0
1.2.1-r0
1
mariusm/vingress:0.5.0b3db186c3d72
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
mathesar/mathesar:0.12.0091757cb01fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mathnao/certs:2.1.3b900e6b64684
brotli@1.1.0-r2
1.1.1-r0
1
matrixdotorg/synapse:v1.163.141d8a4edfdc6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v33.1.0480edbd9257a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v24.0.06cbfea4c694a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mautic/mautic:7-apacheeb8cc73d97e1
brotli@1.0.9-2+b6
nodejs@24.15.0-1nodesource1
1.0.9-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.