StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
mercurecloudnativeapp1.0.21 of 1See more

mercure cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dunglas/mercure:v0916834e49961
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,535
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

24,842
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,009
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
nodejs@7.10.1-2nodesource1~xenial1
no fix listed

Open the chart page →

134,088
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
robotshop/rs-mongodb:latest119b545823cd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

40,005
swaggereditor-dashboardcloud-native-toolkit1.0.01 of 2See more

swaggereditor-dashboard cloud-native-toolkit 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
swaggerapi/swagger-editor:latest2fcd27e4f8e3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

145
phpmyadmincloudpirates-phpmyadmin0.1.01 of 1See more

phpmyadmin cloudpirates-phpmyadmin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apacheda3c72f9886f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,810
fail-whalecloudposse0.1.11 of 1See more

fail-whale cloudposse 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpinea3554c0d0b48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
nginx-default-backendcloudposse0.5.01 of 1See more

nginx-default-backend cloudposse 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpine060849a17466
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
nginx-ingresscloudposse0.1.81 of 2See more

nginx-ingress cloudposse 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpinea3554c0d0b48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
brotli@1.0.9-2build6
no fix listed

Open the chart page →

23,504
cloudrevecloudreve0.2.01 of 2See more

cloudreve cloudreve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cloudreve/cloudreve:4.18.0f7a464100bf6
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,721
cloudvaultcloudvaultOfficialVerified publisher1.0.21 of 3See more

cloudvault cloudvault 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/postgres:18.3-alpine54451ecb8ab3
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,797
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
brotli@1.0.9
brotli@1.0.7-6ubuntu0.1
1.2.1
no fix listed

Open the chart page →

13,416
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
brotli@1.0.9
brotli@1.0.7-6ubuntu0.1
1.2.1
no fix listed

Open the chart page →

12,925
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
brotli@1.0.9
brotli@1.0.7-6ubuntu0.1
1.2.1
no fix listed

Open the chart page →

12,552
galaxycloudve6.8.91 of 3See more

galaxy cloudve 6.8.9

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

8,297
galaxy-depscloudve1.2.01 of 7See more

galaxy-deps cloudve 1.2.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

15,383
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
brotli@1.0.9
brotli@1.0.7-6ubuntu0.1
1.2.1
no fix listed

Open the chart page →

20,886
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
nodejs@9.11.1-1nodesource1
no fix listed

Open the chart page →

160,787
pulsarcloudve0.2.02 of 2See more

pulsar cloudve 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
library/docker:dind9e79b879b177
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

8,183
argo-cdcluster-deploy0.3.32 of 3See more

argo-cd cluster-deploy 0.3.3

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
brotli@1.2.0-3build1
no fix listed
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,100
authentikcluster-deploy0.3.01 of 1See more

authentik cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.3ab9b4e8cc4ab
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,668
chowdacluster-deploy0.2.01 of 1See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/chowda:maina63dadf119be
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,027
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

71,783
monitoringcluster-deploy0.3.01 of 11See more

monitoring cluster-deploy 0.3.0

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

12,817
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

58,470
rustfscluster-deploy0.0.61 of 2See more

rustfs cluster-deploy 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-rc.3800cf3f352a0
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

320
clusterfactoryclusterfactory0.2.02 of 5See more

clusterfactory clusterfactory 0.2.0

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.1c2a169c5e998
brotli@1.2.0-r0
1.2.1-r0
jenkins/jenkins:2.541.3-jdk21c4098086090c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

8,284
gitea-jenkinsclusterfactory0.1.12 of 5See more

gitea-jenkins clusterfactory 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gitea/act_runner:latestb5c35d6bdbb9
brotli@1.2.0-r0
1.2.1-r0
jenkins/jenkins:2.541.3-jdk21c4098086090c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

8,026
clusterplexclusterplexVerified publisher1.1.102 of 3See more

clusterplex clusterplex 1.1.10

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/plex:latest8f655bad7dcb
brotli@1.2.0-3build1
no fix listed
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,365
web-chartcms-ktcloudlab0.1.01 of 1See more

web-chart cms-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
appcnapVerified publisher1.2.01 of 1See more

app cnap 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest956eac231bb3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,785
door-agentcnoVerified publisher3.0.162 of 15See more

door-agent cno 3.0.16

2 of the 15 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/docker:27-cli851f91d24121
brotli@1.1.0-r2
1.1.1-r0
library/docker:27-dindaa3df78ecf32
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

29,001
cobbler-webcobbler0.2.11 of 1See more

cobbler-web cobbler 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cobbler/cobbler-web:v1.1.0c17978fb13dd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

587
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:latestd391acd6d490
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,650
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latest347a7e96228c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,650
codehubcodehubVerified publisher6.2.183 of 5See more

codehub codehub 6.2.18

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
jupyterhub/jupyterhub:5.4.63974ba945e65
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

15,588
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.12 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/adminer:latest49a7d30e71de
brotli@1.2.0-r1
1.2.1-r0
library/postgres:alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

6,230
docker-composecoderstudio-strapi-devVerified publisher0.0.12 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/adminer:latest49a7d30e71de
brotli@1.2.0-r1
1.2.1-r0
library/postgres:alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

6,230
strapi-devcoderstudio-strapi-devVerified publisher0.0.12 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/adminer:latest4e3a6514c26c
brotli@1.2.0-r1
1.2.1-r0
library/postgres:alpine83148c0bc09e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

6,188
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,426
genericcolearendt0.2.71 of 1See more

generic colearendt 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
collabora-code-aoscollabora-code-aos0.2.01 of 1See more

collabora-code-aos collabora-code-aos 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
collabora/code:23.05.6.3.198c77406cbe0
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,801
loki-stackcommon-chartsVerified publisher1.0.31 of 12See more

loki-stack common-charts 1.0.3

1 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

9,472
opencloudcommunity-opencloud3.2.03 of 13See more

opencloud community-opencloud 3.2.0

3 of the 13 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/tika:latest-fulld69fab827fa0
brotli@1.2.0-3build1
no fix listed
opencloudeu/opencloud-rolling:8.1.08fc64ca86173
brotli@1.2.0-r1
1.2.1-r0
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,459
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest58adaa4e8dca
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

9,175
cortezacorteza1.1.02 of 3See more

corteza corteza 1.1.0

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
brotli@1.0.9-2build6
no fix listed
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

10,587
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

5,848
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
brotli@1.1.0-2build2
no fix listed

Open the chart page →

63,651

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
passbolt/passbolt:5.17.0-1-cecced3dab8de3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
brotli@1.0.9-2build6
no fix listed
1
penpotapp/backend:2.2.147853d9bb9dd
brotli@1.0.9-2build6
no fix listed
1
penpotapp/backend:1.16.0-betae978e871be07
brotli@1.0.9-2build6
no fix listed
1
penpotapp/exporter:2.2.15c835ffd87ab
brotli@1.0.9-2build6
no fix listed
1
penpotapp/exporter:1.16.0-betafa7086ad92b1
brotli@1.0.9-2build6
no fix listed
1
peterdavehello/tor-socks-proxy:latest0cc12d36d312
brotli@1.2.0-r0
1.2.1-r0
1
pgautoupgrade/pgautoupgrade:18-alpine063f895a8ade
brotli@1.2.0-r1
1.2.1-r0
1
pgautoupgrade/pgautoupgrade:18-alpine516a55460258
brotli@1.2.0-r1
1.2.1-r0
1
phan2410/dummy-service:0.0.89c6ed6de26ca
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
brotli@1.0.9-2build6
no fix listed
1
photoprism/photoprism:220629-jammy2954334adbda
brotli@1.0.9-2build6
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
brotli@1.2.0-3build1
no fix listed
1
photoprism/photoprism:260728958642220223
brotli@1.2.0-3build1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
brotli@1.1.0-2build2
no fix listed
1
phpipam/phpipam-cron:latest366543984c63
brotli@1.2.0-r1
1.2.1-r0
1
phpipam/phpipam-www:latestd9f2b3a168cc
brotli@1.2.0-r1
1.2.1-r0
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
pinpointdocker/pinpoint-collector:3.1.1-metric54707b3d7186
brotli@1.2.0-3build1
no fix listed
1
pinpointdocker/pinpoint-quickstart:2.5.4382424391b89
brotli@1.0.9-2build6
no fix listed
1
pinpointdocker/pinpoint-web:3.1.1-metric96eacf9fe45f
brotli@1.2.0-3build1
no fix listed
1
pk910/powfaucet:v2-stable75e1ac729c2a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
brotli@1.0.7-6ubuntu0.1
no fix listed
1
plexinc/pms-docker:1.43.3.10896-cb3ebc72d83a425ae9e13
brotli@1.1.0-2build2
no fix listed
1
plexinc/pms-docker:1.23.6.4881-e2e58f321cf4e864d8bc0
brotli@1.0.7-6ubuntu0.1
no fix listed
1
pockost/matomo:5.14.0134c35415788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
polyaxon/polyaxon-api:2.18.0b795f2b224d2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
polyaxon/polyaxon-streams:2.18.0a382a21aaf88
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
posit/package-manager:2026.10.0-ubuntu-24.04574ed7ec955f
brotli@1.1.0-2build2
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
powerdns/pdns-auth-51:5.1.4bb5b1c133bcc
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
powerdns/pdns-recursor-54:5.4.8347edcd144e0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
praravind1801/helmimages:3.0.0f29d637b9ce1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
prefecthq/prefect:3.9.0-python3.11e5f851d68db9
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
pretix/standalone:2026.8.0ec17c2f761f7
brotli@1.1.0-2+b7
nodejs@22.23.3-1nodesource1
1.1.0-2+deb13u1
no fix listed
1
privatebin/nginx-fpm-alpine:2.1.00f80fb240c3c
brotli@1.2.0-r1
1.2.1-r0
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
project2team4/react:latest3ff031a08887
brotli@1.0.7-6ubuntu0.1
no fix listed
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
brotli@1.1.0-2build2
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
pschichtel/mindustry-server:v145.1b543e9c2d371
brotli@1.0.9-2build6
no fix listed
1
psorab/elibrary:latest53b68896c4ce
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.0-deb-1nodesource1
no fix listed
no fix listed
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
brotli@1.0.7-6ubuntu0.1
no fix listed
1
purestream711/nostalgiatv-server:0.10.33-20261023-1717bde77b9d0152
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
qjoly/kubernetes-coffee-image:simple9647009e12e7
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
qonstrukt/php:8.4-v8-apache089af7925aa1
brotli@1.1.0-2build2
no fix listed
1
quickwit/quickwit:v0.8.1d29332bdadcc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
qumine/minecraft-server:v0.1.15c0b650d51132
brotli@1.0.9-2build6
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.