StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
openclawcabrera-evil-chartsVerified publisher0.1.11 of 1See more

openclaw cabrera-evil-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:latestf40d1e66fd14
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,496
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,251
calibre-web-automatedcalibre-web-automatedVerified publisher1.2.31 of 1See more

calibre-web-automated calibre-web-automated 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
brotli@1.2.0
brotli@1.1.0-2build2
1.2.1
no fix listed

Open the chart page →

9,152
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,852
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpinea3554c0d0b48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,572
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
brotli@1.0.7-6ubuntu0.1
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

93,724
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

3,750
lamphttpdcamptocamp31.0.111 of 1See more

lamphttpd camptocamp3 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine759a1d9178d3
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

113
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,651
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,968
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

70,383
apachecamptocamp-apache0.4.01 of 2See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/mapserver:latest9964d73d5223
brotli@1.2.0-3build1
no fix listed

Open the chart page →

2,189
mapservercamptocamp-apache0.1.101 of 2See more

mapserver camptocamp-apache 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/mapserver:master18959d939a66
brotli@1.2.0-3build1
no fix listed

Open the chart page →

1,725
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latest70d5fa5a3fd8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

84,960
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,129
catalyst-agentscatalyst-agents0.1.354 of 18See more

catalyst-agents catalyst-agents 0.1.35

4 of the 18 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
brotli@1.1.0-r2
1.1.1-r0
grafana/grafana:13.1.3ab5cb380e3ff
brotli@1.2.0-r1
1.2.1-r0
library/nginx:alpine892bb2152464
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

26,429
certmatecertmateVerified publisher2.52.11 of 1See more

certmate certmate 2.52.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fabriziosalmi/certmate:2.52.12a91ed5946fa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,270
opencvecfi20170.1.22 of 7See more

opencve cfi2017 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:trixie4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

18,779
paperless-ngxcfi20170.1.01 of 3See more

paperless-ngx cfi2017 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

8,896
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
charon-relaycharonOfficialVerified publisher0.9.01 of 2See more

charon-relay charon 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,088
helioscharonVerified publisher0.1.51 of 1See more

helios charon 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
obolnetwork/helios:e10e753cb7e97d39d46
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,450
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

65,636
ghostchart-ghost0.1.71 of 2See more

ghost chart-ghost 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb62a3399d60f
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,377
kitchenowlchart-kitchenowl0.1.132 of 2See more

kitchenowl chart-kitchenowl 0.1.13

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
tombursch/kitchenowl-web:v0.7.10ed0e5903b6cb
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,101
audiobookshelfcharts-derwitt-devVerified publisher1.1.31 of 1See more

audiobookshelf charts-derwitt-dev 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,575
calibre-webcharts-derwitt-devVerified publisher1.1.51 of 1See more

calibre-web charts-derwitt-dev 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.4378f1d4adbfa
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,569
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.61 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,096
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openthread/otbr:latest08a8f8bfb5c5
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed

Open the chart page →

63,840
paperless-ngxcharts-derwitt-devVerified publisher2.1.101 of 1See more

paperless-ngx charts-derwitt-dev 2.1.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.49bc6e8248891
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

5,588
radicalecharts-derwitt-devVerified publisher0.1.0-1.0.01 of 1See more

radicale charts-derwitt-dev 0.1.0-1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/kozea/radicale:3.7.600a3d8e1f04b
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

647
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

89,866
pathling-serverchglVerified publisher0.10.171 of 3See more

pathling-server chgl 0.10.17

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:8.23.011e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,813
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stablea7675fcee220
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,661
arbitrumchronicleVerified publisher0.3.51 of 1See more

arbitrum chronicle 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
brotli@1.0.9-2+b6
nodejs@18.20.4+dfsg-1~deb12u1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

8,445
basechronicleVerified publisher0.0.91 of 1See more

base chronicle 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,993
rpc-routerchronicleVerified publisher0.2.101 of 1See more

rpc-router chronicle 0.2.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
brotli@1.0.9-2build6
no fix listed

Open the chart page →

7,152
zksyncchronicleVerified publisher0.1.21 of 2See more

zksync chronicle 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,264
cidrappcidrappVerified publisher0.1.01 of 1See more

cidrapp cidrapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
svcosti/cidrapp:latest8428d87bc5d0
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,385
cinnycinnyVerified publisher0.2.251 of 1See more

cinny cinny 0.2.25

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/cinnyapp/cinny:v4.12.783de4bd62b06
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

193
chekrckotzbauerVerified publisher0.5.31 of 2See more

chekr ckotzbauer 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,799
kamaji-etcdclastixVerified publisher0.18.11 of 4See more

kamaji-etcd clastix 0.18.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
cfssl/cfssl:latesta32a90480788
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,869
helmchartclouddrove1.4.11 of 1See more

helmchart clouddrove 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
kube-acp-stackcloudentity2.29.11 of 7See more

kube-acp-stack cloudentity 2.29.1

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
brotli@1.0.9-2build6
no fix listed

Open the chart page →

25,854
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed

Open the chart page →

82,484
lampcloudnativeapp1.1.01 of 3See more

lamp cloudnativeapp 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine435f992d5616
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

998

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
sondresjo/altinnendata-api:v1.13.051fc4bde3f8d
brotli@1.1.0-2build2
no fix listed
1
sondresjo/garge-api:v2.20.0532200ce2e3e
brotli@1.1.0-2build2
no fix listed
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
soulteary/cronicle:0.9.80ac2512fa6e39
brotli@1.1.0-r2
1.1.1-r0
1
speckle/speckle-preview-service:2.26.3092384dba45d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
sslhep/servicex_app:v1.8.6c935e123030d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
sslhep/servicex_code_gen_python:v1.8.696805be717ff
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
stackstorm/st2actionrunner:3.888235ba70cad
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2api:3.86f56d239d280
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2auth:3.833ecfda16608
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2notifier:3.8f190a6212195
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2rulesengine:3.8259503496ff9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2scheduler:3.8b1de2055c362
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2web:3.809989a26c8b7
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
stalwartlabs/stalwart:v0.16.26-alpine3f6cfcd6ddae
brotli@1.2.0-r1
1.2.1-r0
1
stashapp/stash:v0.31.1df744af5a0c9
brotli@1.2.0-r0
1.2.1-r0
1
stashapp/stash-box:latesta534c8afdf39
brotli@1.1.0-2build2
no fix listed
1
statcan/ckan:2.93921305425b8
brotli@1.0.7-6ubuntu0.1
no fix listed
1
strangebee/thehive:6.0.0-14f6db02bb2b8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
brotli@1.0.7-6ubuntu0.1
no fix listed
1
structurizr/onpremises:2025.11.094b5ffb5119c8
brotli@1.1.0-2build2
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
supabase/logflare:latest9d9c8f8c4626
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
supabase/postgres:17.6.1.136f371b5f3f2ac
brotli@1.2.0-r0
1.2.1-r0
1
supabase/realtime:latest768b559241dd
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
supabase/realtime:v2.102.3aa1c92c0cf32
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
supabase/realtime:v2.33.8d207e6e23ad3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
supabase/studio:20241021-9f9b08326d8070c55e9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
supabase/studio:latestd878dcd9dba7
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.