StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,938
kyoorubxkubeVerified publisher0.1.103 of 9See more

kyoo rubxkube 0.1.10

3 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

157,255
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

50,958
nexusscalified-nexusVerified publisher3.97.01 of 1See more

nexus scalified-nexus 3.97.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sonatype/nexus3:3.97.0772ad5badde0
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

145
sceptresceptreai0.1.122 of 5See more

sceptre sceptreai 0.1.12

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
brotli@1.2.0-r0
1.2.1-r0
maponyacharles/sceptreai:ui-0.1.127cd0f11c5e55
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

7,183
securosecuroVerified publisher0.16.51 of 4See more

securo securo 0.16.5

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/securo-finance/securo-frontend:0.16.5f219eb542db8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,488
immichsecustorVerified publisher2.0.121 of 1See more

immich secustor 2.0.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.3.5485d546a2e31
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,170
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
brotli@1.1.0
1.2.1

Open the chart page →

6,484
sentry-k8ssentry-k8sVerified publisher1.4.14 of 11See more

sentry-k8s sentry-k8s 1.4.1

4 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.31.0-alpine2f07d83bf561
brotli@1.2.0-r0
1.2.1-r0
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
brotli@1.2.0
1.2.1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

55,145
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
dserio83/velero-watchdog:0.1.8d5deae589229
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

14,037
querysiakhooiVerified publisher1.0.01 of 1See more

query siakhooi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
siakhooi/query:1.0.0f1f4b5b1b870
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,053
sigscale-csesigscale-cseOfficialVerified publisher1.4.221 of 1See more

sigscale-cse sigscale-cse 1.4.22

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sigscale/cse:latestdfa75c395b95
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,631
sigscale-ocssigscale-ocsOfficialVerified publisher1.1.171 of 1See more

sigscale-ocs sigscale-ocs 1.1.17

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sigscale/ocs:latest3b8ec91d359d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,573
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,713
postgresql-singlesinextraVerified publisher1.15.21 of 1See more

postgresql-single sinextra 1.15.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,521
kube-resource-reportslamdev0.1.31 of 2See more

kube-resource-report slamdev 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpine892bb2152464
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,049
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latesta134550be58a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,902
wireguardslybase-wireguardVerified publisher2.0.111 of 1See more

wireguard slybase-wireguard 2.0.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/wireguard:1.0.20260223-r0-ls127e2f655e1956a
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

638
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
brotli@1.0.9
brotli@1.0.7-6ubuntu0.1
1.2.1
no fix listed
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
brotli@1.0.7-6ubuntu0.1
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
brotli@1.0.9
brotli@1.0.7-6ubuntu0.1
1.2.1
no fix listed

Open the chart page →

248,275
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,202
postgresql-ha-chartsoldevelo-postgresql-ha-chart16.3.41 of 2See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,552
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
brotli@1.0.9
1.2.1

Open the chart page →

4,490
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,288
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,864
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

103,022
silverbulletstone0.12.11 of 1See more

silverbullet stone 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/silverbulletmd/silverbullet:2.12.1370a3bf2daa3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

201
stornxstornxVerified publisher1.1.12 of 9See more

stornx stornx 1.1.1

2 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alazidis/stornx:1.1.1602d4f7f090c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
istio/pilot:1.29.1f8b0e412ac4a
brotli@1.1.0-2build2
no fix listed

Open the chart page →

17,213
streamvisorstreamvisorVerified publisher4.1.61 of 1See more

streamvisor streamvisor 4.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,443
supabasesupabse0.8.03 of 11See more

supabase supabse 0.8.0

3 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
supabase/postgres:17.6.1.136f371b5f3f2ac
brotli@1.2.0-r0
1.2.1-r0
supabase/realtime:v2.102.3aa1c92c0cf32
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

56,496
syncerdsyncerdVerified publisher0.2.21 of 1See more

syncerd syncerd 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/clouddrove/syncerd:latest73a1bb038de3
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

761
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,935
mumblesyntaxerror404Verified publisher1.0.51 of 1See more

mumble syntaxerror404 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.8703da59810c075
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,227
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
ipsec-vpn-servertaskmediaVerified publisher2.2.11 of 2See more

ipsec-vpn-server taskmedia 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
hwdsl2/ipsec-vpn-server:latestc5d8675b7468
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

403
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestbc4cad49969a
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

10,540
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

10,540
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,059
espocrmtwenty20-helm-chartsVerified publisher2.0.71 of 2See more

espocrm twenty20-helm-charts 2.0.7

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
espocrm/espocrm:10.0.10-fpm-alpine1ce111bbfdae
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

138
typemilltypemill-helm-chart2.3.12 of 2See more

typemill typemill-helm-chart 2.3.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned628f79a08cc7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
kixote/typemilldigest-pinneda1982fcfdde1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,188
ueransim-gnbueransim-gnbVerified publisher0.2.61 of 1See more

ueransim-gnb ueransim-gnb 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,409
ueransim-uesueransim-uesVerified publisher0.1.21 of 1See more

ueransim-ues ueransim-ues 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,409
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

87,695
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

73,241
cloudreveunxwaresVerified publisher2026.10.11 of 1See more

cloudreve unxwares 2026.10.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cloudreve/cloudreve:4.19.15c6c5baf7fa5
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,370
varnish-ingress-controllervarnish-ingress-controllerVerified publisher0.5.01 of 1See more

varnish-ingress-controller varnish-ingress-controller 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mariusm/vingress:0.5.0b3db186c3d72
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,782
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
brotli@1.1.0-2build2
nodejs@20.20.0-1nodesource1
no fix listed
no fix listed

Open the chart page →

4,877
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,397
verbacapverbacapVerified publisher1.0.71 of 1See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
brotli@1.1.0
1.2.1

Open the chart page →

3,054
vite-react-app-helm-chartsvite-react-app-helm-charts1.0.01 of 1See more

vite-react-app-helm-charts vite-react-app-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,276

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
onyxdotapp/onyx-backend:latestf76bfd1f3c18
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
1
opea/chatqna:1.038c51b791efa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codegen:1.058f91683892d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codegen-ui:1.02bee4eb66f3e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codetrans:1.0e2436483b73d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codetrans-ui:1.03ef121f34610
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/docsum:1.03eaa91849512
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/docsum-ui:1.07f854e9bffaf
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/speecht5:1.0249afad3d268
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
openaev/platform:3.261022.0a8d4597d5ca5
brotli@1.1.0-2build2
no fix listed
1
openbas/platform:2.0.5d986d80b0a75
brotli@1.1.0-2build2
no fix listed
1
opencloudeu/opencloud:7.2.46d992ccc5f1c
brotli@1.2.0-r1
1.2.1-r0
1
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
opencsghq/csghub-server:v2.6.1-eed999ce4eb640
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencsghq/csghub-xnet:v2.6.0-ee2aefb4393ddf
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencsghq/csgship-portal:v1.2.1865814dc87a1
brotli@1.1.0-r2
1.1.1-r0
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opendatacube/ows:latest668cbb41473c
brotli@1.1.0-2build2
no fix listed
1
opendatacube/wps:latest80df355a660b
brotli@1.0.9-2build6
no fix listed
1
opendronemap/nodeodm:3.6.2fcd99eb23d8d
brotli@1.1.0-2build2
no fix listed
1
openelevation/open-elevation:latest82fb21612e86
brotli@1.0.7-6ubuntu0.1
no fix listed
1
openhab/openhab:5.2.3fa50a6934dfd
brotli@1.1.0-2+b7
nodejs@20.19.2+dfsg-1+deb13u3
1.1.0-2+deb13u1
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
brotli@1.0.7-6ubuntu0.1
no fix listed
1
opennode/waldur-homeport:8.1.39be2c1623637
brotli@1.2.0-r1
1.2.1-r0
1
opennode/waldur-mastermind:8.1.382e8f276c5ed
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
openproject/hocuspocus:release-338001b288dc1359dfb5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
openproject/openproject:17.9.2-slim7b50be7ff67d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
openresty/openresty:1.31.1.1-1-alpine-fatacd832254d9c
brotli@1.2.0-r0
1.2.1-r0
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
brotli@1.0.7-6ubuntu0.1
no fix listed
1
opensign/opensign0ebc230eed21
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
brotli@1.0.7-6ubuntu0.1
no fix listed
1
openthread/otbr:latest08a8f8bfb5c5
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed
1
openvino/model_server:2025.2.11e7cd1d70cc1
brotli@1.1.0-2build2
no fix listed
1
openvpn/openvpn-as:latest921b38fb12d2
brotli@1.2.0-3build1
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed
1
orbitalreg/orbitalreg-frontend:0.4.2d18ab6b3b33d
brotli@1.1.0-r2
1.1.1-r0
1
organizr/organizr:latesta3451b1ef949
brotli@1.2.0-r1
1.2.1-r0
1
owncloud/ocis:8.0.1b38fd8fdd58f
brotli@1.2.0-r0
1.2.1-r0
1
owncloud/server:10.15.051d9b74fc2a8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
oxfordsemantic/rdfox:5.6db17910eb855
brotli@1.0.7-6ubuntu0.1
no fix listed
1
oxfordsemantic/rdfox-init:5.6baf570ff968d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
pangeo/base-notebook:2024.01.155fbe688a4f80
brotli@1.1.0
1.2.1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.