StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
waldurwaldur-chartsVerified publisher8.1.32 of 3See more

waldur waldur-charts 8.1.3

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
opennode/waldur-homeport:8.1.39be2c1623637
brotli@1.2.0-r1
1.2.1-r0
opennode/waldur-mastermind:8.1.382e8f276c5ed
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

5,065
ingress-nginxwenerme4.15.11 of 2See more

ingress-nginx wenerme 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,437
natswenerme2.15.11 of 3See more

nats wenerme 2.15.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
natsio/nats-box:0.20.0d2f04223f40e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,155
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,699
spark-operatorwikimedia2.2.91 of 1See more

spark-operator wikimedia 2.2.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

55,406
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,964
wordpress-helmwordpress-helm0.2.111 of 4See more

wordpress-helm wordpress-helm 0.2.11

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.3.19c09a3563ca3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,702
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.121 of 1See more

workflows-aggregator workflows-aggregator 0.16.12

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.12ce790a4023b6
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,225
workloadworkloadVerified publisher2.1.01 of 1See more

workload workload 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:stable-alpinef5116ed4606f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

28
discord-botxxczakiVerified publisher0.34.501 of 2See more

discord-bot xxczaki 0.34.50

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
xxczaki/discord-bot:e42042cb15e6a5e0d1d28a340335888f1a88eb3c322aeb531022
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

743
aeneabotygdrassilOfficialVerified publisher0.2.01 of 2See more

aeneabot ygdrassil 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
elautoestopista/aeneabot:4.2.1125ba620d528
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,022
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
brotli@1.0.9-2build6
nodejs@16.14.2-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

10,910
fusekizazukoVerified publisher0.2.31 of 1See more

fuseki zazuko 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/zazuko/fuseki-geosparql:v5.2.06fbd8983f750
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

312
qleverzazukoVerified publisher0.7.22 of 2See more

qlever zazuko 0.7.2

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/zazukoians/qlever-server:v0.10.39f553deb16a5
brotli@1.1.0-2build2
no fix listed
ghcr.io/zazukoians/qlever-ui:v0.10.3c27e20f7a2ca
brotli@1.2.0
1.2.1

Open the chart page →

2,816
healthcheckszekker6Verified publisher1.24.01 of 1See more

healthchecks zekker6 1.24.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/healthchecks:5.0.20261020941ef825ead3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16
opencode-serveraardbol-opencode-serverVerified publisher1.5.01 of 1See more

opencode-server aardbol-opencode-server 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

946
abstract-nodeabstract-nodeVerified publisher0.1.501 of 2See more

abstract-node abstract-node 0.1.50

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matterlabs/external-node:v33.1.0480edbd9257a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,784
active-mqactivemq-helm-chartVerified publisher1.8.21 of 3See more

active-mq activemq-helm-chart 1.8.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.44.00305c26f19ed
brotli@1.1.0-2build2
no fix listed

Open the chart page →

3,707
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

103,139
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,760
gotenbergadnoctemVerified publisher0.6.01 of 1See more

gotenberg adnoctem 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.38.1aa552cc115db
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,305
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,364
uptime-kumaadnoctemVerified publisher0.4.31 of 1See more

uptime-kuma adnoctem 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

42,372
vaultwardenadnoctemVerified publisher0.6.01 of 1See more

vaultwarden adnoctem 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.4-alpine19ea2b669945
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

28
bootaerokube1.0.11 of 4See more

boot aerokube 1.0.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/aerokube/keygen:1.0.1578934444f04
brotli@1.0.9-2build6
no fix listed

Open the chart page →

10,506
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

755
ahnlich-dbahnlich-dbVerified publisher0.1.11 of 1See more

ahnlich-db ahnlich-db 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/deven96/ahnlich-db:latest075301b4cfe1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,304
ai-k8s-agentai-k8s-agent0.1.11 of 2See more

ai-k8s-agent ai-k8s-agent 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jdilsham/ai-k8s-agent-frontend:0.1.162cbd2ed8f59
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,065
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,948
airbyteairbyte-v2Verified publisher2.4.02 of 10See more

airbyte airbyte-v2 2.4.0

2 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
temporalio/auto-setup:1.27.2b44cbfeb43db
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

16,214
airports-postgresairports-postgres0.1.01 of 1See more

airports-postgres airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,223
airsonic-advancedairsonic-advancedVerified publisher0.3.11 of 1See more

airsonic-advanced airsonic-advanced 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/airsonic-advanced:11.1.4bae6dde843d7
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

2,327
akeyless-gatewayakeyless-services-helmVerified publisher3.8.51 of 2See more

akeyless-gateway akeyless-services-helm 3.8.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
akeyless/gateway:5.5.30f582fc294a0
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,589
aktoakto0.2.03 of 7See more

akto akto 0.2.0

3 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/aktosecurity/akto-api-security-dashboard:latest142caa08d1f0
brotli@1.1.0-2build2
no fix listed
public.ecr.aws/aktosecurity/akto-api-testing:latest6695d8edd8d4
brotli@1.1.0-2build2
no fix listed

Open the chart page →

14,725
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
brotli@1.2.0-3build1
no fix listed

Open the chart page →

53,517
akto-central-setupakto1.2.44 of 5See more

akto-central-setup akto 1.2.4

4 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.18.75a0c66e59678
brotli@1.2.0-3build1
no fix listed
library/eclipse-temurin:2123cc5734ff46
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.70.3142caa08d1f0
brotli@1.1.0-2build2
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.70.366b0ec8b3de3
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,088
akto-dashboardakto0.1.71 of 1See more

akto-dashboard akto 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-api-security-dashboard:latest9ef5e8cb6a43
brotli@1.1.0-2build2
no fix listed

Open the chart page →

951
akto-dbabsakto0.1.91 of 1See more

akto-dbabs akto 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestb5a1c2601c12
brotli@1.1.0-2build2
no fix listed

Open the chart page →

913
akto-hybrid-redactakto1.44.123 of 5See more

akto-hybrid-redact akto 1.44.12

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.6_local62d30add38b5
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.74.7_local500745200425
brotli@1.2.0-3build1
no fix listed

Open the chart page →

6,582
akto-mini-runtimeakto0.7.232 of 5See more

akto-mini-runtime akto 0.7.23

2 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latesteeff3738d708
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-threat-detection:latesta1fe1ef75a55
brotli@1.2.0-3build1
no fix listed

Open the chart page →

6,780
akto-mini-testingakto1.47.03 of 5See more

akto-mini-testing akto 1.47.0

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest3fde5f4a0c1d
brotli@1.2.0
1.2.1
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.75.1_local8eff42336169
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.51.1_lateste1cdfb400faf
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

5,663
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest1888519dad4f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

7,716
akto-regional-setupakto1.4.123 of 9See more

akto-regional-setup akto 1.4.12

3 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.6.6dc4b05df83f7
brotli@1.2.0-3build1
no fix listed
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
brotli@1.2.0-3build1
no fix listed
public.ecr.aws/aktosecurity/akto-threat-detection:1.18.755b1bd20ef02
brotli@1.2.0-3build1
no fix listed

Open the chart page →

35,113
akto-runtimeakto0.1.81 of 2See more

akto-runtime akto 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:latest62d30add38b5
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,318
akto-testing-db-layerakto1.42.171 of 2See more

akto-testing-db-layer akto 1.42.17

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
brotli@1.1.0-2build2
no fix listed

Open the chart page →

41,812
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:latestbdf060b0c11b
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,071
akto-threat-clientakto0.2.01 of 2See more

akto-threat-client akto 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-threat-detection:latest581eacdcd559
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,109
data-ingestion-serviceakto0.1.61 of 1See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-servicedigest-pinned213aded7adc5
brotli@1.1.0-2build2
no fix listed

Open the chart page →

64,046
browserlessalekcVerified publisher1.3.31 of 1See more

browserless alekc 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/browserless/chrome:v2.57.3b38bf292db41
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,348

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
rabeh/apibootspring:1.0941007b6946e
brotli@1.0.9-2build6
no fix listed
1
radarbase/radar-push-endpoint:0.4.0e1758508e033
brotli@1.1.0-2build2
no fix listed
1
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
brotli@1.1.0-2build2
no fix listed
1
rajnandan1/kener:3.2.1930407afca731
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
rajnandan1/kener:4.1.7-alpined920a2b71c20
brotli@1.2.0-r1
1.2.1-r0
1
razorbladex401/dayz:latest6a4d79248e7d
brotli@1.0.9-2build6
no fix listed
1
readysettech/sqp:latest588f3507280e
brotli@1.1.0-2build2
no fix listed
1
readysettech/sqp-duckdb:latest67a83203ce60
brotli@1.1.0-2build2
no fix listed
1
reallibrephotos/librephotos-proxy:1.4.0ffd5bfbf0ad8
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
reaper99/recipya:v1.2.27f7ec3aeb88c
brotli@1.1.0-r2
1.1.1-r0
1
redash/redash:25.8.000d813437db5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
redash/redash:26.3.0c5c9148f5c38
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
redimp/otterwiki:2b7ece5b8d7cc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
redocly/redoc:latest265ecca9adb2
brotli@1.2.0-r1
1.2.1-r0
1
redpandadata/redpanda:latest8b1076e0d61b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
releaseargus/argus:0.29.0e07088252d03
brotli@1.2.0-r0
1.2.1-r0
1
reportportal/k8s-wait-for:latestbd5cb2bd57f3
brotli@1.2.0-r1
1.2.1-r0
1
reportportal/service-ui:5.15.67f604771ce24
brotli@1.2.0-r1
1.2.1-r0
1
resurfaceio/resurface:3.7.84d5cda2f64109
brotli@1.0.9-2build6
no fix listed
1
rezachalak/bzen-mongo:1.0.034f694325191
brotli@1.0.7-6ubuntu0.1
no fix listed
1
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
brotli@1.0.7-6ubuntu0.1
no fix listed
1
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
brotli@1.2.0-r0
1.2.1-r0
1
robotshop/rs-mongodb:latest119b545823cd
brotli@1.0.7-6ubuntu0.1
no fix listed
1
rocketadmin/rocketadmin:1.23.70bd1abb0bfd1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
rocketchat/freeswitch:stablecfba5c20a5cc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
rommapp/romm:5.2.03512f2ca4557
brotli@1.2.0-r0
1.2.1-r0
1
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
rraahul/test:latestbfe2c1183bc0
brotli@1.0.9-2build6
no fix listed
1
rrobetti/ojp:0.1.0-beta1141bd88232b
brotli@1.1.0-2build2
no fix listed
1
rtuszik/photon-docker:2.4.021549c60f9e6
brotli@1.1.0-2build2
no fix listed
1
rustfs/rustfs:1.0.0-beta.12:latest41fe89380f41
brotli@1.2.0-r1
1.2.1-r0
1
rustfs/rustfs:1.0.0-alpha.947d49faa88c04
brotli@1.2.0-r0
1.2.1-r0
1
rustfs/rustfs:1.0.0-rc.3800cf3f352a0
brotli@1.2.0-r1
1.2.1-r0
1
ryshe/terraria:latest8a4f775d02ad
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
brotli@1.0.9-2build6
no fix listed
1
saidsef/scapy-containerised:v2025.02f17f7c435891
brotli@1.1.0-r2
1.1.1-r0
1
santisbon/evwatcher:latestc4e994ca4540
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
santisbon/evworker:lateste807283f8d69
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
santisbon/speedtest:latest8ee3a1697227
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sashastudent/uptime-platform-frontend:latestfa0c4044a73d
brotli@1.2.0-r1
1.2.1-r0
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
brotli@1.0.9-2+b6
nodejs@18.13.0+dfsg1-1
1.0.9-2+deb12u1
no fix listed
1
schmitzis/monorepo:seafile-13.0-latestc583f1be2af2
brotli@1.1.0-2build2
no fix listed
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
brotli@1.0.9-2build6
no fix listed
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
brotli@1.0.9-2build6
no fix listed
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
brotli@1.0.9-2build6
no fix listed
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
brotli@1.1.0-2build2
no fix listed
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
brotli@1.1.0-2build2
no fix listed
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
brotli@1.1.0-2build2
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.