StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
openclawcabrera-evil-chartsVerified publisher0.1.11 of 1See more

openclaw cabrera-evil-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:latestf40d1e66fd14
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,496
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,251
calibre-web-automatedcalibre-web-automatedVerified publisher1.2.31 of 1See more

calibre-web-automated calibre-web-automated 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
brotli@1.2.0
brotli@1.1.0-2build2
1.2.1
no fix listed

Open the chart page →

9,152
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,852
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpinea3554c0d0b48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,572
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

93,724
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,750
lamphttpdcamptocamp31.0.111 of 1See more

lamphttpd camptocamp3 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine759a1d9178d3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

113
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,651
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,968
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

70,383
apachecamptocamp-apache0.4.01 of 2See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/mapserver:latest9964d73d5223
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,189
mapservercamptocamp-apache0.1.101 of 2See more

mapserver camptocamp-apache 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/mapserver:master18959d939a66
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,725
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latest70d5fa5a3fd8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

84,960
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,129
catalyst-agentscatalyst-agents0.1.354 of 18See more

catalyst-agents catalyst-agents 0.1.35

4 of the 18 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
brotli@1.1.0-r2
1.1.1-r0
grafana/grafana:13.1.3ab5cb380e3ff
brotli@1.2.0-r1
1.2.1-r0
library/nginx:alpine892bb2152464
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

26,429
certmatecertmateVerified publisher2.52.11 of 1See more

certmate certmate 2.52.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fabriziosalmi/certmate:2.52.12a91ed5946fa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,270
opencvecfi20170.1.22 of 7See more

opencve cfi2017 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:trixie4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

18,779
paperless-ngxcfi20170.1.01 of 3See more

paperless-ngx cfi2017 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

8,896
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
charon-relaycharonOfficialVerified publisher0.9.01 of 2See more

charon-relay charon 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,088
helioscharonVerified publisher0.1.51 of 1See more

helios charon 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
obolnetwork/helios:e10e753cb7e97d39d46
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,450
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

65,636
ghostchart-ghost0.1.71 of 2See more

ghost chart-ghost 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb62a3399d60f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,377
kitchenowlchart-kitchenowl0.1.132 of 2See more

kitchenowl chart-kitchenowl 0.1.13

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
tombursch/kitchenowl-web:v0.7.10ed0e5903b6cb
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,101
audiobookshelfcharts-derwitt-devVerified publisher1.1.31 of 1See more

audiobookshelf charts-derwitt-dev 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,575
calibre-webcharts-derwitt-devVerified publisher1.1.51 of 1See more

calibre-web charts-derwitt-dev 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.4378f1d4adbfa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,569
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.61 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,096
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openthread/otbr:latest08a8f8bfb5c5
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed

Open the chart page →

63,840
paperless-ngxcharts-derwitt-devVerified publisher2.1.101 of 1See more

paperless-ngx charts-derwitt-dev 2.1.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.49bc6e8248891
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

5,588
radicalecharts-derwitt-devVerified publisher0.1.0-1.0.01 of 1See more

radicale charts-derwitt-dev 0.1.0-1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kozea/radicale:3.7.600a3d8e1f04b
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

647
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

89,866
pathling-serverchglVerified publisher0.10.171 of 3See more

pathling-server chgl 0.10.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:8.23.011e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,813
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,661
arbitrumchronicleVerified publisher0.3.51 of 1See more

arbitrum chronicle 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
brotli@1.0.9-2+b6
nodejs@18.20.4+dfsg-1~deb12u1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

8,445
basechronicleVerified publisher0.0.91 of 1See more

base chronicle 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,993
rpc-routerchronicleVerified publisher0.2.101 of 1See more

rpc-router chronicle 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
brotli@1.0.9-2build6
no fix listed

Open the chart page →

7,152
zksyncchronicleVerified publisher0.1.21 of 2See more

zksync chronicle 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,264
cidrappcidrappVerified publisher0.1.01 of 1See more

cidrapp cidrapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
svcosti/cidrapp:latest8428d87bc5d0
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,385
cinnycinnyVerified publisher0.2.251 of 1See more

cinny cinny 0.2.25

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cinnyapp/cinny:v4.12.783de4bd62b06
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

193
chekrckotzbauerVerified publisher0.5.31 of 2See more

chekr ckotzbauer 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,799
kamaji-etcdclastixVerified publisher0.18.11 of 4See more

kamaji-etcd clastix 0.18.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cfssl/cfssl:latesta32a90480788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,869
helmchartclouddrove1.4.11 of 1See more

helmchart clouddrove 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kube-acp-stackcloudentity2.29.11 of 7See more

kube-acp-stack cloudentity 2.29.1

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
brotli@1.0.9-2build6
no fix listed

Open the chart page →

25,854
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed

Open the chart page →

82,484
lampcloudnativeapp1.1.01 of 3See more

lamp cloudnativeapp 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine435f992d5616
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

998

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
onyxdotapp/onyx-backend:latestf76bfd1f3c18
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
1
opea/chatqna:1.038c51b791efa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codegen:1.058f91683892d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codegen-ui:1.02bee4eb66f3e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codetrans:1.0e2436483b73d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/codetrans-ui:1.03ef121f34610
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/docsum:1.03eaa91849512
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/docsum-ui:1.07f854e9bffaf
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opea/speecht5:1.0249afad3d268
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
openaev/platform:3.261022.0a8d4597d5ca5
brotli@1.1.0-2build2
no fix listed
1
openbas/platform:2.0.5d986d80b0a75
brotli@1.1.0-2build2
no fix listed
1
opencloudeu/opencloud:7.2.46d992ccc5f1c
brotli@1.2.0-r1
1.2.1-r0
1
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
opencsghq/csghub-server:v2.6.1-eed999ce4eb640
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencsghq/csghub-xnet:v2.6.0-ee2aefb4393ddf
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencsghq/csgship-portal:v1.2.1865814dc87a1
brotli@1.1.0-r2
1.1.1-r0
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
opendatacube/ows:latest668cbb41473c
brotli@1.1.0-2build2
no fix listed
1
opendatacube/wps:latest80df355a660b
brotli@1.0.9-2build6
no fix listed
1
opendronemap/nodeodm:3.6.2fcd99eb23d8d
brotli@1.1.0-2build2
no fix listed
1
openelevation/open-elevation:latest82fb21612e86
brotli@1.0.7-6ubuntu0.1
no fix listed
1
openhab/openhab:5.2.3fa50a6934dfd
brotli@1.1.0-2+b7
nodejs@20.19.2+dfsg-1+deb13u3
1.1.0-2+deb13u1
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
brotli@1.0.7-6ubuntu0.1
no fix listed
1
opennode/waldur-homeport:8.1.39be2c1623637
brotli@1.2.0-r1
1.2.1-r0
1
opennode/waldur-mastermind:8.1.382e8f276c5ed
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
openproject/hocuspocus:release-338001b288dc1359dfb5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
openproject/openproject:17.9.2-slim7b50be7ff67d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
openresty/openresty:1.31.1.1-1-alpine-fatacd832254d9c
brotli@1.2.0-r0
1.2.1-r0
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
brotli@1.0.7-6ubuntu0.1
no fix listed
1
opensign/opensign0ebc230eed21
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
brotli@1.0.7-6ubuntu0.1
no fix listed
1
openthread/otbr:latest08a8f8bfb5c5
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed
1
openvino/model_server:2025.2.11e7cd1d70cc1
brotli@1.1.0-2build2
no fix listed
1
openvpn/openvpn-as:latest921b38fb12d2
brotli@1.2.0-3build1
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed
1
orbitalreg/orbitalreg-frontend:0.4.2d18ab6b3b33d
brotli@1.1.0-r2
1.1.1-r0
1
organizr/organizr:latesta3451b1ef949
brotli@1.2.0-r1
1.2.1-r0
1
owncloud/ocis:8.0.1b38fd8fdd58f
brotli@1.2.0-r0
1.2.1-r0
1
owncloud/server:10.15.051d9b74fc2a8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
oxfordsemantic/rdfox:5.6db17910eb855
brotli@1.0.7-6ubuntu0.1
no fix listed
1
oxfordsemantic/rdfox-init:5.6baf570ff968d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
pangeo/base-notebook:2024.01.155fbe688a4f80
brotli@1.1.0
1.2.1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.