StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
inbox-uiappscodeVerified publisher2026.11.301 of 1See more

inbox-ui appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-ui:0.0.5d6d77659b12a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

270
james-komposeappscodeVerified publisher0.1.02 of 4See more

james-kompose appscode 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
brotli@1.0.9-2build6
no fix listed
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
brotli@1.0.9-2build6
no fix listed

Open the chart page →

20,063
kubedb-uiappscodeVerified publisher2026.11.301 of 1See more

kubedb-ui appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/appscode/kubedb-ui:2.5.04eee8608ac49
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

208
marketplace-apiappscodeVerified publisher2026.11.301 of 1See more

marketplace-api appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,766
neo4j-alertsappscodeVerified publisher2026.7.141 of 1See more

neo4j-alerts appscode 2026.7.14

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
pgadminappscodeVerified publisher2026.3.301 of 1See more

pgadmin appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.11.050700ac17936
brotli@1.2.0
1.2.1

Open the chart page →

2,308
platform-apiappscodeVerified publisher2026.11.302 of 3See more

platform-api appscode 2026.11.30

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.11.3081cdbbb5d2d7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

49,447
rustfsappscodeVerified publisher2026.11.301 of 1See more

rustfs appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.08cc980175544
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

37
s3proxyappscodeVerified publisher2026.11.301 of 1See more

s3proxy appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
brotli@1.0.9-2build6
no fix listed

Open the chart page →

3,723
websiteappscodeVerified publisher2026.11.301 of 1See more

website appscode 2026.11.30

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/appscode/website:v2026.11.302c33a9170272
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

86
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,027
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:latestdc28ed5a9d0f
brotli@1.2.0-3build1
no fix listed

Open the chart page →

9,192
appwriteappwrite-helmVerified publisher1.3.22 of 8See more

appwrite appwrite-helm 1.3.2

2 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
brotli@1.2.0-r0
1.2.1-r0
clamav/clamav:1.0dd0d9cc746af
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

13,735
aptlyaptlyVerified publisher0.2.21 of 2See more

aptly aptly 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1-alpine884e0b7f42f3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

86
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,254
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
brotli@1.1.0-2build2
no fix listed

Open the chart page →

10,522
argonix-apiargonix0.6.52 of 4See more

argonix-api argonix 0.6.5

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/argonix-io/argonix-api-frontend:0.6.5613d3b337486
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

7,438
nalkinscloud-nginxarielevs0.1.41 of 1See more

nalkinscloud-nginx arielevs 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpinea3554c0d0b48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
aias-servicesarlas-stackVerified publisher28.10.04 of 5See more

aias-services arlas-stack 28.10.0

4 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gisaia/agate:0.21.09c4e14b49cff
brotli@1.2.0-r1
1.2.1-r0
gisaia/airs:0.21.0550b497ebd2a
brotli@1.2.0-r1
1.2.1-r0
gisaia/aproc-service:0.21.0ec396328a6fd
brotli@1.2.0-r1
1.2.1-r0
gisaia/fam:0.21.0eeb6311803d2
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,164
arlas-aiasarlas-stackVerified publisher28.10.015 of 22See more

arlas-aias arlas-stack 28.10.0

15 of the 22 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
gisaia/agate:0.21.09c4e14b49cff
brotli@1.2.0-r1
1.2.1-r0
gisaia/airs:0.21.0550b497ebd2a
brotli@1.2.0-r1
1.2.1-r0
gisaia/aproc-service:0.21.0ec396328a6fd
brotli@1.2.0-r1
1.2.1-r0
gisaia/arlas-fam-wui:0.19.0e6ed7c7e1876
brotli@1.2.0-r0
1.2.1-r0
gisaia/arlas-wui:28.0.3b83b3e067173
brotli@1.2.0-r0
1.2.1-r0
gisaia/arlas-wui-builder:28.0.1a35977a5bb7d
brotli@1.2.0-r0
1.2.1-r0
gisaia/arlas-wui-hub:28.0.21a3cc43d822f
brotli@1.2.0-r0
1.2.1-r0
gisaia/fam:0.21.0eeb6311803d2
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

157,418
arlas-uisarlas-stackVerified publisher28.10.04 of 4See more

arlas-uis arlas-stack 28.10.0

4 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gisaia/arlas-fam-wui:0.19.0e6ed7c7e1876
brotli@1.2.0-r0
1.2.1-r0
gisaia/arlas-wui:28.0.3b83b3e067173
brotli@1.2.0-r0
1.2.1-r0
gisaia/arlas-wui-builder:28.0.1a35977a5bb7d
brotli@1.2.0-r0
1.2.1-r0
gisaia/arlas-wui-hub:28.0.21a3cc43d822f
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,888
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
brotli@1.0.7-6ubuntu0.1
nodejs@16.19.1-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

31,223
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
brotli@1.0.9
1.2.1

Open the chart page →

3,038
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
brotli@1.0.9
1.2.1

Open the chart page →

3,038
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
brotli@1.0.7-6ubuntu0.1
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

25,098
assemblylineassemblylineVerified publisher7.4.243 of 12See more

assemblyline assemblyline 7.4.24

3 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable24ba0f28d759cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
cccs/assemblyline-socketio:4.7.4.stable249a6fe665bd13
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
cccs/assemblyline-ui:4.7.4.stable24cad7e7a4c95d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,896
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,964
locationprocessingassist-iot-location-processing1.0.02 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
assistiot/location_processing:lateste9bae124095f
brotli@1.0.9-2build6
no fix listed
dpage/pgadmin4:6.12781369df9994
brotli@1.0.9
1.2.1

Open the chart page →

12,460
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
brotli@1.0.9-2build6
no fix listed

Open the chart page →

92,195
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/buildpack-deps:curl3dd78c060b4d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,750
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,653
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

278,561
videoaugmentationassist-iot-video-augmentation0.1.03 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
brotli@1.0.7-6ubuntu0.1
no fix listed
bluenviron/mediamtx:latest-ffmpegc0feb4acc548
brotli@1.2.0-r1
1.2.1-r0
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

76,060
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
brotli@1.0.9-2build6
no fix listed
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

103,851
sequencerastria4.0.01 of 3See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cometbft/cometbft:v0.38.1722c2ac018f40
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

8,812
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,224
bamboo-agentatlassian-data-centerVerified publisher2.0.181 of 1See more

bamboo-agent atlassian-data-center 2.0.18

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
atlassian/bamboo-agent-base:12.1.121854c94b99f2
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,147
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
brotli@1.0.9-2build6
no fix listed

Open the chart page →

8,239
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,909
nas-appsawesomeVerified publisher2.0.04 of 8See more

nas-apps awesome 2.0.0

4 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
linuxserver/jackett:latesteb97975ab5bf
brotli@1.2.0-r1
1.2.1-r0
linuxserver/qbittorrent:lateste887804fa9de
brotli@1.2.0-r1
1.2.1-r0
wettyoss/wetty:latest63de370578b5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

7,554
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:latesta30cd4cd57f3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,748
axosyslogaxosyslogVerified publisher0.22.01 of 1See more

axosyslog axosyslog 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.28.03785379a20f8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

211
azerothcoreazerothcoreVerified publisher0.2.01 of 6See more

azerothcore azerothcore 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/christianjacobsen/azerothcore-vanilla-client-data:20261002-51c32b5822ff3a48eab
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,466
azp-agentazp-agent1.2.01 of 1See more

azp-agent azp-agent 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cheveo/azp-agent:1.0.282240f890884
brotli@1.0.9-2build6
no fix listed

Open the chart page →

3,771
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
infiniflow/infinity:v0.7.0992c87a68612
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,172
backrestbackrest0.2.01 of 1See more

backrest backrest 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
garethgeorge/backrest:latestb85297975428
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,385
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,345
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,909
bookinfobasictechno0.1.03 of 6See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
brotli@1.0.7-6ubuntu0.1
no fix listed
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
brotli@1.0.7-6ubuntu0.1
no fix listed
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

23,530
my-nginx-appbassant-nginx-app0.1.01 of 1See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
linuxserver/sonarr:latestdffc730adcb8
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/sonarr:latestf247545d23ba
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/tautulli:latestd3c53deb09f6
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/unifi-controller:8.0.240ae315a3a456
brotli@1.0.7-6ubuntu0.1
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
brotli@1.0.7-6ubuntu0.1
no fix listed
1
linuxserver/unifi-network-application:10.6.106-ls151392031f6300b
brotli@1.2.0-3build1
no fix listed
1
linuxserver/wireguard:1.0.20260223-r0-ls126:latest6bcf5d2f5a26
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/wireguard:1.0.20260223-r0-ls127e2f655e1956a
brotli@1.2.0-r1
1.2.1-r0
1
lis314/project-zomboid-docker:latestaa2089c37920
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lissy93/web-check:latest5e4feb4acbd5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
livekit/ingress:v1.2.21ab01641b366
brotli@1.0.9-2build6
no fix listed
1
localstack/localstack:3.19d278167f2b7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
locustio/locust:2.24.151d866285170
brotli@1.1.0
1.2.1
1
loeken/home-assistant:2026.9.2b1dff5b4c593
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1
1
loeken/jellyfin:10.11.87efbc24e47b0
brotli@1.2.0-r0
1.2.1-r0
1
loeken/radarr:5.27.0-nightlya24409d3846d
brotli@1.1.0-r2
1.1.1-r0
1
loeken/sonarr:4.0.19d5f29c8b9fad
brotli@1.2.0-r1
1.2.1-r0
1
log10x/filebeat-10x:1.1.39-native7d6a79dacd58
brotli@1.0.7-6ubuntu0.1
no fix listed
1
logiqai/flash:v3.10.265b996bc7bdc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.24c364ef96aad
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.4917318f9d7be
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.4.091e963bfda56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.0a8610b3b4c38
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.5c74379ac4509
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
brotli@1.0.7-6ubuntu0.1
nodejs@10.19.0~dfsg-3ubuntu1
no fix listed
no fix listed
1
luligu/matterbridge:3.0.28f97884bebc2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
m11s/decap-cms:0.2.11-s318bf5dd04f1c
brotli@1.2.0-r1
1.2.1-r0
1
machines/filestash:latest12bd8c30da4d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makeplane/admin-commercial:v3.3.35bac92edd8dc
brotli@1.2.0-r1
1.2.1-r0
1
makeplane/backend-commercial:v3.3.39f650887385e
brotli@1.2.0-r0
1.2.1-r0
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makeplane/space-commercial:v3.3.3c4a6236c4080
brotli@1.2.0-r1
1.2.1-r0
1
makeplane/web-commercial:v3.3.30773d0414fd0
brotli@1.2.0-r1
1.2.1-r0
1
makersquad/harp-proxy:0.8.1a40dd258c527
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.2-1nodesource1
no fix listed
no fix listed
1
manyfold3d/manyfold-solo:0.150.0f171f544b81a
brotli@1.2.0-r1
1.2.1-r0
1
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
brotli@1.2.0-r0
1.2.1-r0
1
maponyacharles/sceptreai:ui-0.1.127cd0f11c5e55
brotli@1.2.0-r0
1.2.1-r0
1
mariusm/vingress:0.5.0b3db186c3d72
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
mathesar/mathesar:0.12.0091757cb01fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mathnao/certs:2.1.3b900e6b64684
brotli@1.1.0-r2
1.1.1-r0
1
matrixdotorg/synapse:v1.163.141d8a4edfdc6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v33.1.0480edbd9257a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v24.0.06cbfea4c694a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mautic/mautic:7-apacheeb8cc73d97e1
brotli@1.0.9-2+b6
nodejs@24.15.0-1nodesource1
1.0.9-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.