StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
openclawcabrera-evil-chartsVerified publisher0.1.11 of 1See more

openclaw cabrera-evil-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:latestf40d1e66fd14
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,496
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,251
calibre-web-automatedcalibre-web-automatedVerified publisher1.2.31 of 1See more

calibre-web-automated calibre-web-automated 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
brotli@1.2.0
brotli@1.1.0-2build2
1.2.1
no fix listed

Open the chart page →

9,152
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,852
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpinea3554c0d0b48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,572
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

93,724
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,750
lamphttpdcamptocamp31.0.111 of 1See more

lamphttpd camptocamp3 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine759a1d9178d3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

113
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,651
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,968
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

70,383
apachecamptocamp-apache0.4.01 of 2See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/mapserver:latest9964d73d5223
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,189
mapservercamptocamp-apache0.1.101 of 2See more

mapserver camptocamp-apache 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/mapserver:master18959d939a66
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,725
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latest70d5fa5a3fd8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

84,960
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,129
catalyst-agentscatalyst-agents0.1.354 of 18See more

catalyst-agents catalyst-agents 0.1.35

4 of the 18 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
brotli@1.1.0-r2
1.1.1-r0
grafana/grafana:13.1.3ab5cb380e3ff
brotli@1.2.0-r1
1.2.1-r0
library/nginx:alpine892bb2152464
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

26,429
certmatecertmateVerified publisher2.52.11 of 1See more

certmate certmate 2.52.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fabriziosalmi/certmate:2.52.12a91ed5946fa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,270
opencvecfi20170.1.22 of 7See more

opencve cfi2017 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:trixie4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

18,779
paperless-ngxcfi20170.1.01 of 3See more

paperless-ngx cfi2017 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

8,896
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
charon-relaycharonOfficialVerified publisher0.9.01 of 2See more

charon-relay charon 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,088
helioscharonVerified publisher0.1.51 of 1See more

helios charon 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
obolnetwork/helios:e10e753cb7e97d39d46
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,450
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

65,636
ghostchart-ghost0.1.71 of 2See more

ghost chart-ghost 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb62a3399d60f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,377
kitchenowlchart-kitchenowl0.1.132 of 2See more

kitchenowl chart-kitchenowl 0.1.13

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
tombursch/kitchenowl-web:v0.7.10ed0e5903b6cb
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,101
audiobookshelfcharts-derwitt-devVerified publisher1.1.31 of 1See more

audiobookshelf charts-derwitt-dev 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,575
calibre-webcharts-derwitt-devVerified publisher1.1.51 of 1See more

calibre-web charts-derwitt-dev 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.4378f1d4adbfa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,569
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.61 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,096
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openthread/otbr:latest08a8f8bfb5c5
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed

Open the chart page →

63,840
paperless-ngxcharts-derwitt-devVerified publisher2.1.101 of 1See more

paperless-ngx charts-derwitt-dev 2.1.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.49bc6e8248891
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

5,588
radicalecharts-derwitt-devVerified publisher0.1.0-1.0.01 of 1See more

radicale charts-derwitt-dev 0.1.0-1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kozea/radicale:3.7.600a3d8e1f04b
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

647
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

89,866
pathling-serverchglVerified publisher0.10.171 of 3See more

pathling-server chgl 0.10.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:8.23.011e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,813
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,661
arbitrumchronicleVerified publisher0.3.51 of 1See more

arbitrum chronicle 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
brotli@1.0.9-2+b6
nodejs@18.20.4+dfsg-1~deb12u1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

8,445
basechronicleVerified publisher0.0.91 of 1See more

base chronicle 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,993
rpc-routerchronicleVerified publisher0.2.101 of 1See more

rpc-router chronicle 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
brotli@1.0.9-2build6
no fix listed

Open the chart page →

7,152
zksyncchronicleVerified publisher0.1.21 of 2See more

zksync chronicle 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,264
cidrappcidrappVerified publisher0.1.01 of 1See more

cidrapp cidrapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
svcosti/cidrapp:latest8428d87bc5d0
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,385
cinnycinnyVerified publisher0.2.251 of 1See more

cinny cinny 0.2.25

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cinnyapp/cinny:v4.12.783de4bd62b06
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

193
chekrckotzbauerVerified publisher0.5.31 of 2See more

chekr ckotzbauer 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,799
kamaji-etcdclastixVerified publisher0.18.11 of 4See more

kamaji-etcd clastix 0.18.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cfssl/cfssl:latesta32a90480788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,869
helmchartclouddrove1.4.11 of 1See more

helmchart clouddrove 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kube-acp-stackcloudentity2.29.11 of 7See more

kube-acp-stack cloudentity 2.29.1

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
brotli@1.0.9-2build6
no fix listed

Open the chart page →

25,854
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed

Open the chart page →

82,484
lampcloudnativeapp1.1.01 of 3See more

lamp cloudnativeapp 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine435f992d5616
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

998

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
linuxserver/sonarr:latestdffc730adcb8
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/sonarr:latestf247545d23ba
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/tautulli:latestd3c53deb09f6
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/unifi-controller:8.0.240ae315a3a456
brotli@1.0.7-6ubuntu0.1
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
brotli@1.0.7-6ubuntu0.1
no fix listed
1
linuxserver/unifi-network-application:10.6.106-ls151392031f6300b
brotli@1.2.0-3build1
no fix listed
1
linuxserver/wireguard:1.0.20260223-r0-ls126:latest6bcf5d2f5a26
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/wireguard:1.0.20260223-r0-ls127e2f655e1956a
brotli@1.2.0-r1
1.2.1-r0
1
lis314/project-zomboid-docker:latestaa2089c37920
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lissy93/web-check:latest5e4feb4acbd5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
livekit/ingress:v1.2.21ab01641b366
brotli@1.0.9-2build6
no fix listed
1
localstack/localstack:3.19d278167f2b7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
locustio/locust:2.24.151d866285170
brotli@1.1.0
1.2.1
1
loeken/home-assistant:2026.9.2b1dff5b4c593
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1
1
loeken/jellyfin:10.11.87efbc24e47b0
brotli@1.2.0-r0
1.2.1-r0
1
loeken/radarr:5.27.0-nightlya24409d3846d
brotli@1.1.0-r2
1.1.1-r0
1
loeken/sonarr:4.0.19d5f29c8b9fad
brotli@1.2.0-r1
1.2.1-r0
1
log10x/filebeat-10x:1.1.39-native7d6a79dacd58
brotli@1.0.7-6ubuntu0.1
no fix listed
1
logiqai/flash:v3.10.265b996bc7bdc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.24c364ef96aad
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.4917318f9d7be
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.4.091e963bfda56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.0a8610b3b4c38
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.5c74379ac4509
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
brotli@1.0.7-6ubuntu0.1
nodejs@10.19.0~dfsg-3ubuntu1
no fix listed
no fix listed
1
luligu/matterbridge:3.0.28f97884bebc2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
m11s/decap-cms:0.2.11-s318bf5dd04f1c
brotli@1.2.0-r1
1.2.1-r0
1
machines/filestash:latest12bd8c30da4d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makeplane/admin-commercial:v3.3.35bac92edd8dc
brotli@1.2.0-r1
1.2.1-r0
1
makeplane/backend-commercial:v3.3.39f650887385e
brotli@1.2.0-r0
1.2.1-r0
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makeplane/space-commercial:v3.3.3c4a6236c4080
brotli@1.2.0-r1
1.2.1-r0
1
makeplane/web-commercial:v3.3.30773d0414fd0
brotli@1.2.0-r1
1.2.1-r0
1
makersquad/harp-proxy:0.8.1a40dd258c527
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.2-1nodesource1
no fix listed
no fix listed
1
manyfold3d/manyfold-solo:0.150.0f171f544b81a
brotli@1.2.0-r1
1.2.1-r0
1
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
brotli@1.2.0-r0
1.2.1-r0
1
maponyacharles/sceptreai:ui-0.1.127cd0f11c5e55
brotli@1.2.0-r0
1.2.1-r0
1
mariusm/vingress:0.5.0b3db186c3d72
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
mathesar/mathesar:0.12.0091757cb01fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mathnao/certs:2.1.3b900e6b64684
brotli@1.1.0-r2
1.1.1-r0
1
matrixdotorg/synapse:v1.163.141d8a4edfdc6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v33.1.0480edbd9257a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v24.0.06cbfea4c694a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mautic/mautic:7-apacheeb8cc73d97e1
brotli@1.0.9-2+b6
nodejs@24.15.0-1nodesource1
1.0.9-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.