StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
waldurwaldur-chartsVerified publisher8.1.32 of 3See more

waldur waldur-charts 8.1.3

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opennode/waldur-homeport:8.1.39be2c1623637
brotli@1.2.0-r1
1.2.1-r0
opennode/waldur-mastermind:8.1.382e8f276c5ed
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,065
ingress-nginxwenerme4.15.11 of 2See more

ingress-nginx wenerme 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,437
natswenerme2.15.11 of 3See more

nats wenerme 2.15.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
natsio/nats-box:0.20.0d2f04223f40e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,155
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,699
spark-operatorwikimedia2.2.91 of 1See more

spark-operator wikimedia 2.2.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

55,406
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,964
wordpress-helmwordpress-helm0.2.111 of 4See more

wordpress-helm wordpress-helm 0.2.11

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.3.19c09a3563ca3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,702
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.121 of 1See more

workflows-aggregator workflows-aggregator 0.16.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,225
workloadworkloadVerified publisher2.1.01 of 1See more

workload workload 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stable-alpinef5116ed4606f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

28
discord-botxxczakiVerified publisher0.34.501 of 2See more

discord-bot xxczaki 0.34.50

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xxczaki/discord-bot:e42042cb15e6a5e0d1d28a340335888f1a88eb3c322aeb531022
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

743
aeneabotygdrassilOfficialVerified publisher0.2.01 of 2See more

aeneabot ygdrassil 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
elautoestopista/aeneabot:4.2.1125ba620d528
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,022
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
brotli@1.0.9-2build6
nodejs@16.14.2-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

10,910
fusekizazukoVerified publisher0.2.31 of 1See more

fuseki zazuko 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/zazuko/fuseki-geosparql:v5.2.06fbd8983f750
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

312
qleverzazukoVerified publisher0.7.22 of 2See more

qlever zazuko 0.7.2

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-server:v0.10.39f553deb16a5
brotli@1.1.0-2build2
no fix listed
ghcr.io/zazukoians/qlever-ui:v0.10.3c27e20f7a2ca
brotli@1.2.0
1.2.1

Open the chart page →

2,816
healthcheckszekker6Verified publisher1.24.01 of 1See more

healthchecks zekker6 1.24.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/healthchecks:5.0.20261020941ef825ead3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
opencode-serveraardbol-opencode-serverVerified publisher1.5.01 of 1See more

opencode-server aardbol-opencode-server 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

946
abstract-nodeabstract-nodeVerified publisher0.1.501 of 2See more

abstract-node abstract-node 0.1.50

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matterlabs/external-node:v33.1.0480edbd9257a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,784
active-mqactivemq-helm-chartVerified publisher1.8.21 of 3See more

active-mq activemq-helm-chart 1.8.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.44.00305c26f19ed
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,707
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

103,139
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,760
gotenbergadnoctemVerified publisher0.6.01 of 1See more

gotenberg adnoctem 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.38.1aa552cc115db
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,305
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,364
uptime-kumaadnoctemVerified publisher0.4.31 of 1See more

uptime-kuma adnoctem 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

42,372
vaultwardenadnoctemVerified publisher0.6.01 of 1See more

vaultwarden adnoctem 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.4-alpine19ea2b669945
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

28
bootaerokube1.0.11 of 4See more

boot aerokube 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/aerokube/keygen:1.0.1578934444f04
brotli@1.0.9-2build6
no fix listed

Open the chart page →

10,506
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

755
ahnlich-dbahnlich-dbVerified publisher0.1.11 of 1See more

ahnlich-db ahnlich-db 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/deven96/ahnlich-db:latest075301b4cfe1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,304
ai-k8s-agentai-k8s-agent0.1.11 of 2See more

ai-k8s-agent ai-k8s-agent 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jdilsham/ai-k8s-agent-frontend:0.1.162cbd2ed8f59
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,065
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,948
airbyteairbyte-v2Verified publisher2.4.02 of 10See more

airbyte airbyte-v2 2.4.0

2 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
temporalio/auto-setup:1.27.2b44cbfeb43db
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

16,214
airports-postgresairports-postgres0.1.01 of 1See more

airports-postgres airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,223
airsonic-advancedairsonic-advancedVerified publisher0.3.11 of 1See more

airsonic-advanced airsonic-advanced 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/airsonic-advanced:11.1.4bae6dde843d7
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,327
akeyless-gatewayakeyless-services-helmVerified publisher3.8.51 of 2See more

akeyless-gateway akeyless-services-helm 3.8.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
akeyless/gateway:5.5.30f582fc294a0
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,589
aktoakto0.2.03 of 7See more

akto akto 0.2.0

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/aktosecurity/akto-api-security-dashboard:latest142caa08d1f0
brotli@1.1.0-2build2
no fix listed
public.ecr.aws/aktosecurity/akto-api-testing:latest6695d8edd8d4
brotli@1.1.0-2build2
no fix listed

Open the chart page →

14,725
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
brotli@1.2.0-3build1
no fix listed

Open the chart page →

53,517
akto-central-setupakto1.2.44 of 5See more

akto-central-setup akto 1.2.4

4 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.18.75a0c66e59678
brotli@1.2.0-3build1
no fix listed
library/eclipse-temurin:2123cc5734ff46
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.70.3142caa08d1f0
brotli@1.1.0-2build2
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.70.366b0ec8b3de3
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,088
akto-dashboardakto0.1.71 of 1See more

akto-dashboard akto 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-api-security-dashboard:latest9ef5e8cb6a43
brotli@1.1.0-2build2
no fix listed

Open the chart page →

951
akto-dbabsakto0.1.91 of 1See more

akto-dbabs akto 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestb5a1c2601c12
brotli@1.1.0-2build2
no fix listed

Open the chart page →

913
akto-hybrid-redactakto1.44.123 of 5See more

akto-hybrid-redact akto 1.44.12

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.6_local62d30add38b5
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.7_local500745200425
brotli@1.2.0-3build1
no fix listed

Open the chart page →

6,582
akto-mini-runtimeakto0.7.232 of 5See more

akto-mini-runtime akto 0.7.23

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latesteeff3738d708
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-threat-detection:latesta1fe1ef75a55
brotli@1.2.0-3build1
no fix listed

Open the chart page →

6,780
akto-mini-testingakto1.47.03 of 5See more

akto-mini-testing akto 1.47.0

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest3fde5f4a0c1d
brotli@1.2.0
1.2.1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.75.1_local8eff42336169
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

5,663
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

7,716
akto-regional-setupakto1.4.123 of 9See more

akto-regional-setup akto 1.4.12

3 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.6.6dc4b05df83f7
brotli@1.2.0-3build1
no fix listed
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-threat-detection:1.18.755b1bd20ef02
brotli@1.2.0-3build1
no fix listed

Open the chart page →

35,113
akto-runtimeakto0.1.81 of 2See more

akto-runtime akto 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest62d30add38b5
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,318
akto-testing-db-layerakto1.42.171 of 2See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
brotli@1.1.0-2build2
no fix listed

Open the chart page →

41,812
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:latestbdf060b0c11b
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,071
akto-threat-clientakto0.2.01 of 2See more

akto-threat-client akto 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-threat-detection:latest581eacdcd559
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,109
data-ingestion-serviceakto0.1.61 of 1See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-servicedigest-pinned213aded7adc5
brotli@1.1.0-2build2
no fix listed

Open the chart page →

64,046
browserlessalekcVerified publisher1.3.31 of 1See more

browserless alekc 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,348

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
passbolt/passbolt:5.17.0-1-cecced3dab8de3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
brotli@1.0.9-2build6
no fix listed
1
penpotapp/backend:2.2.147853d9bb9dd
brotli@1.0.9-2build6
no fix listed
1
penpotapp/backend:1.16.0-betae978e871be07
brotli@1.0.9-2build6
no fix listed
1
penpotapp/exporter:2.2.15c835ffd87ab
brotli@1.0.9-2build6
no fix listed
1
penpotapp/exporter:1.16.0-betafa7086ad92b1
brotli@1.0.9-2build6
no fix listed
1
peterdavehello/tor-socks-proxy:latest0cc12d36d312
brotli@1.2.0-r0
1.2.1-r0
1
pgautoupgrade/pgautoupgrade:18-alpine063f895a8ade
brotli@1.2.0-r1
1.2.1-r0
1
pgautoupgrade/pgautoupgrade:18-alpine516a55460258
brotli@1.2.0-r1
1.2.1-r0
1
phan2410/dummy-service:0.0.89c6ed6de26ca
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
brotli@1.0.9-2build6
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
brotli@1.0.9-2build6
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
brotli@1.2.0-3build1
no fix listed
1
photoprism/photoprism:260728958642220223
brotli@1.2.0-3build1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
brotli@1.1.0-2build2
no fix listed
1
phpipam/phpipam-cron:latest366543984c63
brotli@1.2.0-r1
1.2.1-r0
1
phpipam/phpipam-www:latestd9f2b3a168cc
brotli@1.2.0-r1
1.2.1-r0
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
pinpointdocker/pinpoint-collector:3.1.1-metric54707b3d7186
brotli@1.2.0-3build1
no fix listed
1
pinpointdocker/pinpoint-quickstart:2.5.4382424391b89
brotli@1.0.9-2build6
no fix listed
1
pinpointdocker/pinpoint-web:3.1.1-metric96eacf9fe45f
brotli@1.2.0-3build1
no fix listed
1
pk910/powfaucet:v2-stable75e1ac729c2a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
brotli@1.0.7-6ubuntu0.1
no fix listed
1
plexinc/pms-docker:1.43.3.10896-cb3ebc72d83a425ae9e13
brotli@1.1.0-2build2
no fix listed
1
plexinc/pms-docker:1.23.6.4881-e2e58f321cf4e864d8bc0
brotli@1.0.7-6ubuntu0.1
no fix listed
1
pockost/matomo:5.14.0134c35415788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
polyaxon/polyaxon-api:2.18.0b795f2b224d2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
posit/package-manager:2026.10.0-ubuntu-24.04574ed7ec955f
brotli@1.1.0-2build2
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
powerdns/pdns-auth-51:5.1.4bb5b1c133bcc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
powerdns/pdns-recursor-54:5.4.8347edcd144e0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
praravind1801/helmimages:3.0.0f29d637b9ce1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
prefecthq/prefect:3.9.0-python3.11e5f851d68db9
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
pretix/standalone:2026.8.0ec17c2f761f7
brotli@1.1.0-2+b7
nodejs@22.23.3-1nodesource1
1.1.0-2+deb13u1
no fix listed
1
privatebin/nginx-fpm-alpine:2.1.00f80fb240c3c
brotli@1.2.0-r1
1.2.1-r0
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
project2team4/react:latest3ff031a08887
brotli@1.0.7-6ubuntu0.1
no fix listed
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
brotli@1.1.0-2build2
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
pschichtel/mindustry-server:v145.1b543e9c2d371
brotli@1.0.9-2build6
no fix listed
1
psorab/elibrary:latest53b68896c4ce
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.0-deb-1nodesource1
no fix listed
no fix listed
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
brotli@1.0.7-6ubuntu0.1
no fix listed
1
purestream711/nostalgiatv-server:0.10.33-20261023-1717bde77b9d0152
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
qjoly/kubernetes-coffee-image:simple9647009e12e7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
qonstrukt/php:8.4-v8-apache089af7925aa1
brotli@1.1.0-2build2
no fix listed
1
quickwit/quickwit:v0.8.1d29332bdadcc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
qumine/minecraft-server:v0.1.15c0b650d51132
brotli@1.0.9-2build6
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.