StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
openclawcabrera-evil-chartsVerified publisher0.1.11 of 1See more

openclaw cabrera-evil-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:latestf40d1e66fd14
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,496
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,251
calibre-web-automatedcalibre-web-automatedVerified publisher1.2.31 of 1See more

calibre-web-automated calibre-web-automated 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
brotli@1.2.0
brotli@1.1.0-2build2
1.2.1
no fix listed

Open the chart page →

9,152
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,852
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpinea3554c0d0b48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,572
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

93,724
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,750
lamphttpdcamptocamp31.0.111 of 1See more

lamphttpd camptocamp3 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine759a1d9178d3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

113
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,651
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,968
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

70,383
apachecamptocamp-apache0.4.01 of 2See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/mapserver:latest9964d73d5223
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,189
mapservercamptocamp-apache0.1.101 of 2See more

mapserver camptocamp-apache 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/mapserver:master18959d939a66
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,725
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latest70d5fa5a3fd8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

84,960
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,129
catalyst-agentscatalyst-agents0.1.354 of 18See more

catalyst-agents catalyst-agents 0.1.35

4 of the 18 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
brotli@1.1.0-r2
1.1.1-r0
grafana/grafana:13.1.3ab5cb380e3ff
brotli@1.2.0-r1
1.2.1-r0
library/nginx:alpine892bb2152464
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

26,429
certmatecertmateVerified publisher2.52.11 of 1See more

certmate certmate 2.52.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fabriziosalmi/certmate:2.52.12a91ed5946fa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,270
opencvecfi20170.1.22 of 7See more

opencve cfi2017 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:trixie4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

18,779
paperless-ngxcfi20170.1.01 of 3See more

paperless-ngx cfi2017 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

8,896
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
charon-relaycharonOfficialVerified publisher0.9.01 of 2See more

charon-relay charon 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,088
helioscharonVerified publisher0.1.51 of 1See more

helios charon 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
obolnetwork/helios:e10e753cb7e97d39d46
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,450
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

65,636
ghostchart-ghost0.1.71 of 2See more

ghost chart-ghost 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb62a3399d60f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,377
kitchenowlchart-kitchenowl0.1.132 of 2See more

kitchenowl chart-kitchenowl 0.1.13

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
tombursch/kitchenowl-web:v0.7.10ed0e5903b6cb
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,101
audiobookshelfcharts-derwitt-devVerified publisher1.1.31 of 1See more

audiobookshelf charts-derwitt-dev 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,575
calibre-webcharts-derwitt-devVerified publisher1.1.51 of 1See more

calibre-web charts-derwitt-dev 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.4378f1d4adbfa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,569
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.61 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,096
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openthread/otbr:latest08a8f8bfb5c5
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed

Open the chart page →

63,840
paperless-ngxcharts-derwitt-devVerified publisher2.1.101 of 1See more

paperless-ngx charts-derwitt-dev 2.1.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.49bc6e8248891
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

5,588
radicalecharts-derwitt-devVerified publisher0.1.0-1.0.01 of 1See more

radicale charts-derwitt-dev 0.1.0-1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kozea/radicale:3.7.600a3d8e1f04b
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

647
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

89,866
pathling-serverchglVerified publisher0.10.171 of 3See more

pathling-server chgl 0.10.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:8.23.011e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,813
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,661
arbitrumchronicleVerified publisher0.3.51 of 1See more

arbitrum chronicle 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
brotli@1.0.9-2+b6
nodejs@18.20.4+dfsg-1~deb12u1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

8,445
basechronicleVerified publisher0.0.91 of 1See more

base chronicle 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,993
rpc-routerchronicleVerified publisher0.2.101 of 1See more

rpc-router chronicle 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
brotli@1.0.9-2build6
no fix listed

Open the chart page →

7,152
zksyncchronicleVerified publisher0.1.21 of 2See more

zksync chronicle 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,264
cidrappcidrappVerified publisher0.1.01 of 1See more

cidrapp cidrapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
svcosti/cidrapp:latest8428d87bc5d0
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,385
cinnycinnyVerified publisher0.2.251 of 1See more

cinny cinny 0.2.25

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cinnyapp/cinny:v4.12.783de4bd62b06
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

193
chekrckotzbauerVerified publisher0.5.31 of 2See more

chekr ckotzbauer 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,799
kamaji-etcdclastixVerified publisher0.18.11 of 4See more

kamaji-etcd clastix 0.18.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cfssl/cfssl:latesta32a90480788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,869
helmchartclouddrove1.4.11 of 1See more

helmchart clouddrove 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kube-acp-stackcloudentity2.29.11 of 7See more

kube-acp-stack cloudentity 2.29.1

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
brotli@1.0.9-2build6
no fix listed

Open the chart page →

25,854
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed

Open the chart page →

82,484
lampcloudnativeapp1.1.01 of 3See more

lamp cloudnativeapp 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine435f992d5616
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

998

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
passbolt/passbolt:5.17.0-1-cecced3dab8de3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
brotli@1.0.9-2build6
no fix listed
1
penpotapp/backend:2.2.147853d9bb9dd
brotli@1.0.9-2build6
no fix listed
1
penpotapp/backend:1.16.0-betae978e871be07
brotli@1.0.9-2build6
no fix listed
1
penpotapp/exporter:2.2.15c835ffd87ab
brotli@1.0.9-2build6
no fix listed
1
penpotapp/exporter:1.16.0-betafa7086ad92b1
brotli@1.0.9-2build6
no fix listed
1
peterdavehello/tor-socks-proxy:latest0cc12d36d312
brotli@1.2.0-r0
1.2.1-r0
1
pgautoupgrade/pgautoupgrade:18-alpine063f895a8ade
brotli@1.2.0-r1
1.2.1-r0
1
pgautoupgrade/pgautoupgrade:18-alpine516a55460258
brotli@1.2.0-r1
1.2.1-r0
1
phan2410/dummy-service:0.0.89c6ed6de26ca
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
brotli@1.0.9-2build6
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
brotli@1.0.9-2build6
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
brotli@1.2.0-3build1
no fix listed
1
photoprism/photoprism:260728958642220223
brotli@1.2.0-3build1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
brotli@1.1.0-2build2
no fix listed
1
phpipam/phpipam-cron:latest366543984c63
brotli@1.2.0-r1
1.2.1-r0
1
phpipam/phpipam-www:latestd9f2b3a168cc
brotli@1.2.0-r1
1.2.1-r0
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
pinpointdocker/pinpoint-collector:3.1.1-metric54707b3d7186
brotli@1.2.0-3build1
no fix listed
1
pinpointdocker/pinpoint-quickstart:2.5.4382424391b89
brotli@1.0.9-2build6
no fix listed
1
pinpointdocker/pinpoint-web:3.1.1-metric96eacf9fe45f
brotli@1.2.0-3build1
no fix listed
1
pk910/powfaucet:v2-stable75e1ac729c2a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
brotli@1.0.7-6ubuntu0.1
no fix listed
1
plexinc/pms-docker:1.43.3.10896-cb3ebc72d83a425ae9e13
brotli@1.1.0-2build2
no fix listed
1
plexinc/pms-docker:1.23.6.4881-e2e58f321cf4e864d8bc0
brotli@1.0.7-6ubuntu0.1
no fix listed
1
pockost/matomo:5.14.0134c35415788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
polyaxon/polyaxon-api:2.18.0b795f2b224d2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
posit/package-manager:2026.10.0-ubuntu-24.04574ed7ec955f
brotli@1.1.0-2build2
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
powerdns/pdns-auth-51:5.1.4bb5b1c133bcc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
powerdns/pdns-recursor-54:5.4.8347edcd144e0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
praravind1801/helmimages:3.0.0f29d637b9ce1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
prefecthq/prefect:3.9.0-python3.11e5f851d68db9
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
pretix/standalone:2026.8.0ec17c2f761f7
brotli@1.1.0-2+b7
nodejs@22.23.3-1nodesource1
1.1.0-2+deb13u1
no fix listed
1
privatebin/nginx-fpm-alpine:2.1.00f80fb240c3c
brotli@1.2.0-r1
1.2.1-r0
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
project2team4/react:latest3ff031a08887
brotli@1.0.7-6ubuntu0.1
no fix listed
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
brotli@1.1.0-2build2
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
pschichtel/mindustry-server:v145.1b543e9c2d371
brotli@1.0.9-2build6
no fix listed
1
psorab/elibrary:latest53b68896c4ce
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.0-deb-1nodesource1
no fix listed
no fix listed
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
brotli@1.0.7-6ubuntu0.1
no fix listed
1
purestream711/nostalgiatv-server:0.10.33-20261023-1717bde77b9d0152
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
qjoly/kubernetes-coffee-image:simple9647009e12e7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
qonstrukt/php:8.4-v8-apache089af7925aa1
brotli@1.1.0-2build2
no fix listed
1
quickwit/quickwit:v0.8.1d29332bdadcc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
qumine/minecraft-server:v0.1.15c0b650d51132
brotli@1.0.9-2build6
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.