StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
waldurwaldur-chartsVerified publisher8.1.32 of 3See more

waldur waldur-charts 8.1.3

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opennode/waldur-homeport:8.1.39be2c1623637
brotli@1.2.0-r1
1.2.1-r0
opennode/waldur-mastermind:8.1.382e8f276c5ed
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,065
ingress-nginxwenerme4.15.11 of 2See more

ingress-nginx wenerme 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,437
natswenerme2.15.11 of 3See more

nats wenerme 2.15.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
natsio/nats-box:0.20.0d2f04223f40e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,155
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,699
spark-operatorwikimedia2.2.91 of 1See more

spark-operator wikimedia 2.2.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

55,406
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,964
wordpress-helmwordpress-helm0.2.111 of 4See more

wordpress-helm wordpress-helm 0.2.11

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.3.19c09a3563ca3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,702
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.121 of 1See more

workflows-aggregator workflows-aggregator 0.16.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,225
workloadworkloadVerified publisher2.1.01 of 1See more

workload workload 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stable-alpinef5116ed4606f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

28
discord-botxxczakiVerified publisher0.34.501 of 2See more

discord-bot xxczaki 0.34.50

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xxczaki/discord-bot:e42042cb15e6a5e0d1d28a340335888f1a88eb3c322aeb531022
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

743
aeneabotygdrassilOfficialVerified publisher0.2.01 of 2See more

aeneabot ygdrassil 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
elautoestopista/aeneabot:4.2.1125ba620d528
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,022
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
brotli@1.0.9-2build6
nodejs@16.14.2-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

10,910
fusekizazukoVerified publisher0.2.31 of 1See more

fuseki zazuko 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/zazuko/fuseki-geosparql:v5.2.06fbd8983f750
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

312
qleverzazukoVerified publisher0.7.22 of 2See more

qlever zazuko 0.7.2

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-server:v0.10.39f553deb16a5
brotli@1.1.0-2build2
no fix listed
ghcr.io/zazukoians/qlever-ui:v0.10.3c27e20f7a2ca
brotli@1.2.0
1.2.1

Open the chart page →

2,816
healthcheckszekker6Verified publisher1.24.01 of 1See more

healthchecks zekker6 1.24.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/healthchecks:5.0.20261020941ef825ead3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
opencode-serveraardbol-opencode-serverVerified publisher1.5.01 of 1See more

opencode-server aardbol-opencode-server 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

946
abstract-nodeabstract-nodeVerified publisher0.1.501 of 2See more

abstract-node abstract-node 0.1.50

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matterlabs/external-node:v33.1.0480edbd9257a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,784
active-mqactivemq-helm-chartVerified publisher1.8.21 of 3See more

active-mq activemq-helm-chart 1.8.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.44.00305c26f19ed
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,707
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

103,139
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,760
gotenbergadnoctemVerified publisher0.6.01 of 1See more

gotenberg adnoctem 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.38.1aa552cc115db
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,305
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,364
uptime-kumaadnoctemVerified publisher0.4.31 of 1See more

uptime-kuma adnoctem 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

42,372
vaultwardenadnoctemVerified publisher0.6.01 of 1See more

vaultwarden adnoctem 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.4-alpine19ea2b669945
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

28
bootaerokube1.0.11 of 4See more

boot aerokube 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/aerokube/keygen:1.0.1578934444f04
brotli@1.0.9-2build6
no fix listed

Open the chart page →

10,506
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

755
ahnlich-dbahnlich-dbVerified publisher0.1.11 of 1See more

ahnlich-db ahnlich-db 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/deven96/ahnlich-db:latest075301b4cfe1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,304
ai-k8s-agentai-k8s-agent0.1.11 of 2See more

ai-k8s-agent ai-k8s-agent 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jdilsham/ai-k8s-agent-frontend:0.1.162cbd2ed8f59
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,065
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,948
airbyteairbyte-v2Verified publisher2.4.02 of 10See more

airbyte airbyte-v2 2.4.0

2 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
temporalio/auto-setup:1.27.2b44cbfeb43db
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

16,214
airports-postgresairports-postgres0.1.01 of 1See more

airports-postgres airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,223
airsonic-advancedairsonic-advancedVerified publisher0.3.11 of 1See more

airsonic-advanced airsonic-advanced 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/airsonic-advanced:11.1.4bae6dde843d7
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,327
akeyless-gatewayakeyless-services-helmVerified publisher3.8.51 of 2See more

akeyless-gateway akeyless-services-helm 3.8.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
akeyless/gateway:5.5.30f582fc294a0
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,589
aktoakto0.2.03 of 7See more

akto akto 0.2.0

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/aktosecurity/akto-api-security-dashboard:latest142caa08d1f0
brotli@1.1.0-2build2
no fix listed
public.ecr.aws/aktosecurity/akto-api-testing:latest6695d8edd8d4
brotli@1.1.0-2build2
no fix listed

Open the chart page →

14,725
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
brotli@1.2.0-3build1
no fix listed

Open the chart page →

53,517
akto-central-setupakto1.2.44 of 5See more

akto-central-setup akto 1.2.4

4 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.18.75a0c66e59678
brotli@1.2.0-3build1
no fix listed
library/eclipse-temurin:2123cc5734ff46
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.70.3142caa08d1f0
brotli@1.1.0-2build2
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.70.366b0ec8b3de3
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,088
akto-dashboardakto0.1.71 of 1See more

akto-dashboard akto 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-api-security-dashboard:latest9ef5e8cb6a43
brotli@1.1.0-2build2
no fix listed

Open the chart page →

951
akto-dbabsakto0.1.91 of 1See more

akto-dbabs akto 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestb5a1c2601c12
brotli@1.1.0-2build2
no fix listed

Open the chart page →

913
akto-hybrid-redactakto1.44.123 of 5See more

akto-hybrid-redact akto 1.44.12

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.6_local62d30add38b5
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.7_local500745200425
brotli@1.2.0-3build1
no fix listed

Open the chart page →

6,582
akto-mini-runtimeakto0.7.232 of 5See more

akto-mini-runtime akto 0.7.23

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latesteeff3738d708
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-threat-detection:latesta1fe1ef75a55
brotli@1.2.0-3build1
no fix listed

Open the chart page →

6,780
akto-mini-testingakto1.47.03 of 5See more

akto-mini-testing akto 1.47.0

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest3fde5f4a0c1d
brotli@1.2.0
1.2.1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.75.1_local8eff42336169
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

5,663
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

7,716
akto-regional-setupakto1.4.123 of 9See more

akto-regional-setup akto 1.4.12

3 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.6.6dc4b05df83f7
brotli@1.2.0-3build1
no fix listed
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-threat-detection:1.18.755b1bd20ef02
brotli@1.2.0-3build1
no fix listed

Open the chart page →

35,113
akto-runtimeakto0.1.81 of 2See more

akto-runtime akto 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest62d30add38b5
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,318
akto-testing-db-layerakto1.42.171 of 2See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
brotli@1.1.0-2build2
no fix listed

Open the chart page →

41,812
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:latestbdf060b0c11b
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,071
akto-threat-clientakto0.2.01 of 2See more

akto-threat-client akto 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-threat-detection:latest581eacdcd559
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,109
data-ingestion-serviceakto0.1.61 of 1See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-servicedigest-pinned213aded7adc5
brotli@1.1.0-2build2
no fix listed

Open the chart page →

64,046
browserlessalekcVerified publisher1.3.31 of 1See more

browserless alekc 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,348

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:2.36.8cfe2704ff858
brotli@1.2.0-r1
1.2.1-r0
1
nacos/nacos-server:v3.0.130a39cb0c54d
brotli@1.1.0-r2
1.1.1-r0
1
natsio/nats-box:0.19.55d513bf0bb82
brotli@1.2.0-r0
1.2.1-r0
1
natsio/nats-box:0.19.7ffce8bd10338
brotli@1.2.0-r0
1.2.1-r0
1
netapp/trident-protect-utils:v3.0.0cad26cd945d1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
netboxcommunity/netbox:v3.2.83d652dca5351
brotli@1.0.9-2build6
no fix listed
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
brotli@1.2.0-3build1
no fix listed
1
netdata/netdata:v2.12.15cfa05a5fa56
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
nethermind/nethermind:1.14.615517708c3b6
brotli@1.0.9-2build6
no fix listed
1
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
brotli@1.2.0-r0
1.2.1-r0
1
netskopeprivateaccess/publisher_u22:latest46519c818f44
brotli@1.0.9-2build6
no fix listed
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
nextcloud/aio-imaginary:20260929_1054350e32abf8b219
brotli@1.2.0-r1
1.2.1-r0
1
nginxinc/nginx-unprivileged:latest09b0d3eda2aa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
nginxinc/nginx-unprivileged:1.30.4-alpine442753882674
brotli@1.2.0-r1
1.2.1-r0
1
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
brotli@1.1.0-r2
1.1.1-r0
1
nginxinc/nginx-unprivileged:1.31.2-alpine3.236320020c7da8
brotli@1.2.0-r0
1.2.1-r0
1
nginxinc/nginx-unprivileged:1-alpine884e0b7f42f3
brotli@1.2.0-r1
1.2.1-r0
1
nginxinc/nginx-unprivileged:1.31.4-alpine-otelb37d9945be77
brotli@1.2.0-r1
1.2.1-r0
1
nginxinc/nginx-unprivileged:1.31.7-alpine3.24b5047b9b7684
brotli@1.2.0-r1
1.2.1-r0
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
nginxinc/nginx-unprivileged:stabled715f7a85cdf
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
brotli@1.2.0-r0
1.2.1-r0
1
nginxinc/nginx-unprivileged:stableec0f7ecb1fbd
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
nginxinc/nginx-unprivileged:stable-alpinef5116ed4606f
brotli@1.2.0-r1
1.2.1-r0
1
nginxinc/nginx-unprivileged:1.31.3-alpinef972e5322b97
brotli@1.2.0-r1
1.2.1-r0
1
nginx/nginx-ingress:edge9b13f0b831ab
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
nginx/nginx-ingress:5.7.0c603a5cbac85
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
nirmalnaveen/supermario:latest8541a39162f3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
nocodb/nocodb:0.301.5d9516f0bf546
brotli@1.1.0-r2
1.1.1-r0
1
nodered/node-red:5.0.410f40d0a83e7
brotli@1.2.0-r1
1.2.1-r0
1
nodered/node-red:5.0.8:latestb5adb6c9dd29
brotli@1.2.0-r1
1.2.1-r0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
brotli@1.2.0-r0
1.2.1-r0
1
nomansadiq11/connectivitytest:v1.0.0eb14ccf304a7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
nousresearch/hermes-agent:v0.22.59c5561579f3f
brotli@1.1.0-2+b7
brotlicffi@1.2.0.2
1.1.0-2+deb13u1
1.2.1.0
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
brotli@1.1.0-2+b7
brotlicffi@1.2.0.1
1.1.0-2+deb13u1
1.2.1.0
1
nousresearch/hermes-agent:v2026.9.24fca358f12efd
brotli@1.1.0-2+b7
brotlicffi@1.2.0.2
1.1.0-2+deb13u1
1.2.1.0
1
obeoneorg/cyberchef:v11.5.01290632ca8b9
brotli@1.2.0-r1
1.2.1-r0
1
obolnetwork/helios:e10e753cb7e97d39d46
brotli@1.1.0-2build2
no fix listed
1
octoboxio/octobox:latestd909041c46eb
brotli@1.2.0-r0
1.2.1-r0
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
brotli@1.0.9-2+b6
nodejs@18.20.4+dfsg-1~deb12u1
1.0.9-2+deb12u1
no fix listed
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
brotli@1.0.9-2+b6
nodejs@18.19.0+dfsg-6~deb12u2
1.0.9-2+deb12u1
no fix listed
1
oled01/automx2:2025.1.105d3e398e675
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
oled01/db-backup:0.1.06302fd2b5333
brotli@1.0.9-2build6
no fix listed
1
olvid/bot-daemon:2.0.1e0e6b165d879
brotli@1.1.0-2build2
no fix listed
1
omecproject/c3po-hssdb:master-latest28a90cc26716
brotli@1.0.7-6ubuntu0.1
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
nodejs@8.9.4-1nodesource1
no fix listed
1
oneuptime/probe:releasedd75b4631455
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
oneuptime/runner:releasea99da95a0490
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.