StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
dbrepodbrepo1.13.34 of 25See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

64,844
mealiedeimosfr-charts1.0.171 of 1See more

mealie deimosfr-charts 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,362
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
epam/ai-dial-core:latest15cd928861ed
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,759
phpipamdigitalhubVerified publisher0.1.12 of 2See more

phpipam digitalhub 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:latest366543984c63
brotli@1.2.0-r1
1.2.1-r0
phpipam/phpipam-www:latestd9f2b3a168cc
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,428
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

75,694
matomodigitalist-open-cloud-matomo12.0.271 of 3See more

matomo digitalist-open-cloud-matomo 12.0.27

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,766
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
brotli@1.0.9-2build6
no fix listed

Open the chart page →

76,611
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

93,216
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest7b6e87514259
brotli@1.1.0-2build2
no fix listed

Open the chart page →

42,115
nginx-phpfpmdrpsychickVerified publisher0.1.12 of 2See more

nginx-phpfpm drpsychick 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
library/php:8-fpm-alpinefa01fb1645cd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,822
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
brotli@1.1.0-2build2
no fix listed

Open the chart page →

76,129
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,319
glpieftechcombr-glpiVerified publisher2.12.11 of 5See more

glpi eftechcombr-glpi 2.12.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eftechcombr/glpi:php-fpm-12.0.038e06ba814b8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,184
egagenteginnovationsVerified publisher0.11.01 of 1See more

egagent eginnovations 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eginnovations/agent:7.6.005d8d2da700a
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,184
elastalert2elastalert22.31.01 of 1See more

elastalert2 elastalert2 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jertel/elastalert2:2.31.03cbf63f9b7dc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,490
elchi-stackelchi2.0.172 of 10See more

elchi-stack elchi 2.0.17

2 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jhonbrownn/elchi:v1.6.43148d16b8bfa
brotli@1.2.0-r1
1.2.1-r0
library/mongo:6.0.12646902910d6a
brotli@1.0.9-2build6
no fix listed

Open the chart page →

18,406
emqx-eeemqx-operator4.4.381 of 2See more

emqx-ee emqx-operator 4.4.38

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
emqx/emqx-ee:4.4.38d48360ed86f4
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

467
enavenav-service-architectureVerified publisher0.0.78 of 10See more

enav enav-service-architecture 0.0.7

8 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latestb9ba46e9bf03
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-aton-admin-service:lateste37dbcc47435
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-aton-service:latestf4f02868ff0c
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-aton-service-client:latestcb2164664144
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-ckeeper:latest9bf16ff1386c
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-eureka:latestdfe2f27d0149
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-msg-broker:latesta314c29cade8
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gla-rad/enav-vdes-controller:latest2b8007d4df23
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,648
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

78,014
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

7,290
eoapieoapiOfficialVerified publisher0.17.33 of 7See more

eoapi eoapi 0.17.3

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
brotli@1.1.0-r2
1.1.1-r0
ghcr.io/radiantearth/stac-browser:5.1.0e6d92b6ba593
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/stac-utils/stac-fastapi-pgstac:7.1.08d546f480e46
brotli@1.2.0
1.2.1

Open the chart page →

5,915
paraerudikaVerified publisher0.3.01 of 1See more

para erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
erudikaltd/para:latest_stable0f2a7fec2a48
brotli@1.2.0-3build1
no fix listed

Open the chart page →

924
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
brotli@1.0.9-2+b6
nodejs@18.20.4-1nodesource1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

80,348
vulnz-nvd-mirroreugen1.0.01 of 1See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,911
fastapi-microservice-appfast-api-microservice-app1.3.01 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:7.0c53852c00c23
brotli@1.0.9-2build6
no fix listed

Open the chart page →

11,091
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
brotli@1.1.0-r2
1.1.1-r0
featurehub/edge:1.9.198ad426737f6
brotli@1.1.0-r2
1.1.1-r0
featurehub/mr:1.9.1477d8bf771a9
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

11,377
zabbix-server-mysqlfermosit3.0.23 of 4See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
brotli@1.1.0-2build2
no fix listed
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
brotli@1.1.0-2build2
no fix listed
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
brotli@1.1.0-2build2
no fix listed

Open the chart page →

14,593
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest33afb0659d78
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

3,855
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latest6acb4a5903eb
brotli@1.1.0
1.2.1

Open the chart page →

2,913
rss-bridgegabe565Verified publisher0.5.21 of 1See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/rss-bridge/rss-bridge:latestfcd6ac6335ef
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,389
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

19,509
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
nodejs@14.17.0-1nodesource1
no fix listed

Open the chart page →

25,150
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
brotli@1.0.7-6ubuntu0.1
no fix listed
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
brotli@1.0.7-6ubuntu0.1
no fix listed
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

111,920
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/git:latest03228d7ded48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

5,543
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

85,999
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

15,664
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,597
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,336
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

11,990
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
brotli@1.0.9-2build6
no fix listed

Open the chart page →

14,691
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
brotli@1.0.7-6ubuntu0.1
no fix listed
haveagitgat/tdarr_node:2.00.101e3f9328327d
brotli@1.0.7-6ubuntu0.1
nodejs@14.15.3-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

103,481
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latestfde7829b12d3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,004
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,216
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latesta134550be58a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

17,247
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,863
gluugluu-flexOfficial0.0.0-nightly9 of 9See more

gluu gluu-flex 0.0.0-nightly

9 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gluufederation/flex/admin-ui:0.0.0-nightly18fa568c0ceb
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/gluufederation/flex/persistence-loader:0.0.0-nightly6989516e4943
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightlya1e82488e141
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/casa:0.0.0-nightly2928a069e765
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly71dac4d5d55f
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly62bd0cf3b8dc
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/configurator:0.0.0-nightlya63c560869f6
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/fido2:0.0.0-nightlyf8946f24c96e
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/janssenproject/jans/scim:0.0.0-nightly528e8b045647
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

272
greenkubegreenkubeVerified publisher0.3.01 of 3See more

greenkube greenkube 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/postgres:18-alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,270
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

77,092
bazarrhalkeye0.2.01 of 1See more

bazarr halkeye 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/bazarr:latestfb0437897eaa
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

688
haproxy-unified-gatewayhaproxytechVerified publisher1.2.11 of 1See more

haproxy-unified-gateway haproxytech 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
haproxytech/haproxy-unified-gateway:1.0.808f293b32638
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

256

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
linuxserver/sonarr:latestdffc730adcb8
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/sonarr:latestf247545d23ba
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/tautulli:latestd3c53deb09f6
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/unifi-controller:8.0.240ae315a3a456
brotli@1.0.7-6ubuntu0.1
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
brotli@1.0.7-6ubuntu0.1
no fix listed
1
linuxserver/unifi-network-application:10.6.106-ls151392031f6300b
brotli@1.2.0-3build1
no fix listed
1
linuxserver/wireguard:1.0.20260223-r0-ls126:latest6bcf5d2f5a26
brotli@1.2.0-r1
1.2.1-r0
1
linuxserver/wireguard:1.0.20260223-r0-ls127e2f655e1956a
brotli@1.2.0-r1
1.2.1-r0
1
lis314/project-zomboid-docker:latestaa2089c37920
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lissy93/web-check:latest5e4feb4acbd5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
livekit/ingress:v1.2.21ab01641b366
brotli@1.0.9-2build6
no fix listed
1
localstack/localstack:3.19d278167f2b7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
locustio/locust:2.24.151d866285170
brotli@1.1.0
1.2.1
1
loeken/home-assistant:2026.9.2b1dff5b4c593
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1
1
loeken/jellyfin:10.11.87efbc24e47b0
brotli@1.2.0-r0
1.2.1-r0
1
loeken/radarr:5.27.0-nightlya24409d3846d
brotli@1.1.0-r2
1.1.1-r0
1
loeken/sonarr:4.0.19d5f29c8b9fad
brotli@1.2.0-r1
1.2.1-r0
1
log10x/filebeat-10x:1.1.39-native7d6a79dacd58
brotli@1.0.7-6ubuntu0.1
no fix listed
1
logiqai/flash:v3.10.265b996bc7bdc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.24c364ef96aad
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.4917318f9d7be
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.4.091e963bfda56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.0a8610b3b4c38
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.5c74379ac4509
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
brotli@1.0.7-6ubuntu0.1
nodejs@10.19.0~dfsg-3ubuntu1
no fix listed
no fix listed
1
luligu/matterbridge:3.0.28f97884bebc2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
m11s/decap-cms:0.2.11-s318bf5dd04f1c
brotli@1.2.0-r1
1.2.1-r0
1
machines/filestash:latest12bd8c30da4d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makeplane/admin-commercial:v3.3.35bac92edd8dc
brotli@1.2.0-r1
1.2.1-r0
1
makeplane/backend-commercial:v3.3.39f650887385e
brotli@1.2.0-r0
1.2.1-r0
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
makeplane/space-commercial:v3.3.3c4a6236c4080
brotli@1.2.0-r1
1.2.1-r0
1
makeplane/web-commercial:v3.3.30773d0414fd0
brotli@1.2.0-r1
1.2.1-r0
1
makersquad/harp-proxy:0.8.1a40dd258c527
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.2-1nodesource1
no fix listed
no fix listed
1
manyfold3d/manyfold-solo:0.150.0f171f544b81a
brotli@1.2.0-r1
1.2.1-r0
1
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
brotli@1.2.0-r0
1.2.1-r0
1
maponyacharles/sceptreai:ui-0.1.127cd0f11c5e55
brotli@1.2.0-r0
1.2.1-r0
1
mariusm/vingress:0.5.0b3db186c3d72
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
mathesar/mathesar:0.12.0091757cb01fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mathnao/certs:2.1.3b900e6b64684
brotli@1.1.0-r2
1.1.1-r0
1
matrixdotorg/synapse:v1.163.141d8a4edfdc6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v33.1.0480edbd9257a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
matterlabs/external-node:v24.0.06cbfea4c694a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
mautic/mautic:7-apacheeb8cc73d97e1
brotli@1.0.9-2+b6
nodejs@24.15.0-1nodesource1
1.0.9-2+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.