StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
beeport-uiethersphereVerified publisher0.76.22 of 3See more

beeport-ui ethersphere 0.76.2

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest956eac231bb3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
library/node:lts14078204b6bb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

30,628
multichain-uiethersphereVerified publisher0.73.12 of 3See more

multichain-ui ethersphere 0.73.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
library/node:lts14078204b6bb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

30,555
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
brotli@1.0.9-2build6
no fix listed

Open the chart page →

90,444
static-siteethersphereVerified publisher0.73.12 of 2See more

static-site ethersphere 0.73.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest7be37bf763b4
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
library/node:latesta98e6fda54fd
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,881
tokenexporterethersphereVerified publisher0.3.01 of 1See more

tokenexporter ethersphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
darkobas/tokenexporter:latestf26e016a9d7e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

3,489
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

23,236
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,568
eximeebpmseximeebpms-k8sOfficialVerified publisher0.4.11 of 1See more

eximeebpms eximeebpms-k8s 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/eximeebpms/eximeebpms-bpm-platform:run-1.4.00f4a5c0eea07
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

308
perliteextrim-helm-chartsVerified publisher0.1.01 of 1See more

perlite extrim-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
extrim/perlite:1.5.99cb7eb5598b6
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,866
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:latest742481d1b118
brotli@1.1.0-2build2
no fix listed

Open the chart page →

10,261
factorio-headless-serverfactorio-headless-server2.5.61 of 1See more

factorio-headless-server factorio-headless-server 2.5.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
factoriotools/factorio:stablee157a3d8289f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,340
factorio-server-chartsfactorio-headless-server2.5.41 of 1See more

factorio-server-charts factorio-headless-server 2.5.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
factoriotools/factorio:latest0be9e1d30572
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,340
fairwinds-insightsfairwinds-stableVerified publisher10.7.23 of 13See more

fairwinds-insights fairwinds-stable 10.7.2

3 of the 13 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.49ccd82364762
brotli@1.2.0-r0
1.2.1-r0
rustfs/rustfs:1.0.0-beta.1241fe89380f41
brotli@1.2.0-r1
1.2.1-r0
swaggerapi/swagger-ui:v5.33.0f9b8432be04e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,207
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,685
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.21 of 18See more

farm-observability farm-observability 0.27.2

1 of the 18 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:13.0.1-security-012d1f9ae67c17
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

20,759
jenkinsfatihtepe-jenkins1.0.01 of 1See more

jenkins fatihtepe-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
fddb-exporterfddb-exporterVerified publisher2.6.11 of 1See more

fddb-exporter fddb-exporter 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/itobey/fddb-exporter:2.6.185842fd99d10
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

109
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
brotli@1.0.9-2build6
no fix listed

Open the chart page →

16,400
rospoferama0.4.31 of 1See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,301
vipienferama0.2.81 of 1See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,019
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

76,422
infrafibonacci-cluster-infraVerified publisher1.0.02 of 4See more

infra fibonacci-cluster-infra 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
brotli@1.1.0-2build2
no fix listed
dpage/pgadmin4:8.418cd5711fc9a
brotli@1.1.0
1.2.1

Open the chart page →

15,471
filebrowserfilebrowser-rr0.1.01 of 1See more

filebrowser filebrowser-rr 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2-s6ee4ac79e5296
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,179
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

10,331
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,169
firefly-iiifirefly-iii1.10.21 of 1See more

firefly-iii firefly-iii 1.10.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.7.94409f9f0f873
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,188
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
fireflyiii/data-importer:version-2.2.3ab52bf932546
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

12,229
importerfirefly-iii1.6.11 of 1See more

importer firefly-iii 1.6.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.3.559f2f26ddf6e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,188
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,782
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:latest62a50b1419fe
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,392
business-api-ecosystemfiware1.2.02 of 4See more

business-api-ecosystem fiware 1.2.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
brotli@1.0.7-6ubuntu0.1
no fix listed
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

173,007
facetflanksourceVerified publisher0.1.731 of 1See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

32,835
mission-controlflanksourceVerified publisher0.1.3391 of 8See more

mission-control flanksource 0.1.339

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

12,093
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:latest62a50b1419fe
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,392
flinkflink0.5.11 of 1See more

flink flink 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/flink:1.14.6-scala_2.122461f02672b3
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,164
fluent-bit-aggregatorfluent-bit-aggregatorOfficialVerified publisher1.1.31 of 1See more

fluent-bit-aggregator fluent-bit-aggregator 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:5.1.3c5542543523c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,040
fluent-bit-collectorfluent-bit-collectorOfficialVerified publisher1.1.31 of 1See more

fluent-bit-collector fluent-bit-collector 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluent-bit:5.1.3c5542543523c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,040
fluentd-aggregatorfluentd-aggregatorOfficialVerified publisher1.1.01 of 2See more

fluentd-aggregator fluentd-aggregator 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluentd-aggregator-docker-image:2.2.0f6ae79dfc5f9
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,597
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,418
fluxer-helmfluxer-helm0.3.05 of 18See more

fluxer-helm fluxer-helm 0.3.0

5 of the 18 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:4.346620371e8af8
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/fluxerapp/fluxer-app-proxy-self-hosted:2026.820.1549337d59465eb5ab
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/fluxerapp/fluxer-gateway:2026.818.14094351d6f973843f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

34,763
flyte-devboxflyte0.1.01 of 13See more

flyte-devbox flyte 0.1.0

1 of the 13 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-alpha.947d49faa88c04
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

8,497
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,515
dump1090fnzv0.2.81 of 1See more

dump1090 fnzv 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fnzv/dump1090:latestb3079b95c336
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,500
fr24feederfnzv0.1.21 of 1See more

fr24feeder fnzv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/sdr-enthusiasts/docker-flightradar24:latestb0b6b96adaa3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,342
mod-graphqlfolio-org0.1.301 of 1See more

mod-graphql folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
folioci/mod-graphql:latestf0655a6a08fd
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,088
mod-z3950folio-org0.1.31 of 1See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
folioci/mod-z3950:latest2493041ce880
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,618
demo-workflowsfrinx-helm-charts2.0.01 of 3See more

demo-workflows frinx-helm-charts 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,868
frinx-frontendfrinx-helm-charts4.1.01 of 2See more

frinx-frontend frinx-helm-charts 4.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
frinx/frinx-graphql-proxy:6.1.05f1368ef47b8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,314
frinx-machinefrinx-helm-charts11.0.04 of 26See more

frinx-machine frinx-helm-charts 11.0.0

4 of the 26 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
frinx/conductor-server:6.1.159aa36c359f2
brotli@1.0.7-6ubuntu0.1
no fix listed
frinx/frinx-graphql-proxy:7.0.017a139608024
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
frinx/resource-manager:6.1.09cd0147a09bd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
frinx/topology-discovery:7.0.37832e3589dba
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

127,767
resource-managerfrinx-helm-charts2.3.11 of 4See more

resource-manager frinx-helm-charts 2.3.1

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

85,191

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
library/phpmyadmin:5.2.16e75aa8f767c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
library/postgres:18.3-alpine:18.3-alpine3.2354451ecb8ab3
brotli@1.2.0-r0
1.2.1-r0
2
library/postgres:18.6-alpine3.24:18-alpine:alpine83148c0bc09e
brotli@1.2.0-r1
1.2.1-r0
2
library/python:3.7eedf63967cdb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
library/redmine:6.1.3-trixief474a901faec
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
library/wordpress:7.1.3-apache:latest81a34254acaa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
library/wordpress:latestd42f63cb89ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
library/zookeeper:3.9.65bad433c7170
brotli@1.0.9-2build6
no fix listed
2
linuxserver/jackett:latest078c3f6d78c4
brotli@1.2.0-r1
1.2.1-r0
2
linuxserver/prowlarr:2.6.5:latestf9151e5bc102
brotli@1.2.0-r1
1.2.1-r0
2
linuxserver/qbittorrent:5.2.4:latest97333cc1ccf9
brotli@1.2.0-r1
1.2.1-r0
2
linuxserver/radarr:6.4.4:latestcfbc4fa09dc9
brotli@1.2.0-r1
1.2.1-r0
2
linuxserver/radarr:latestfc0ae3c50f81
brotli@1.2.0-r1
1.2.1-r0
2
locustio/locust:2.32.2a0d4b88e42c1
brotli@1.1.0
1.2.1
2
longhornio/longhorn-manager:v1.2.3dca34321452c
brotli@1.0.7-6ubuntu0.1
no fix listed
2
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
louislam/uptime-kuma:2.3.29aeb4e51d038
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
memgraph/memgraph:3.14.0a73242121795
brotli@1.1.0-2build2
no fix listed
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
brotli@1.0.7-6ubuntu0.1
no fix listed
2
metabase/metabase:v0.61.1.x9491ed11c901
brotli@1.2.0-r0
1.2.1-r0
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
n8nio/n8n:2.36.714c4285bc303
brotli@1.2.0-r1
1.2.1-r0
2
nacos/nacos-server:latest1c191c30c8cd
brotli@1.2.0-3build1
no fix listed
2
netbirdio/dashboard:latest:v2.95.03d6adfee19dd
brotli@1.2.0-r1
1.2.1-r0
2
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
brotli@1.1.0-r2
1.1.1-r0
2
nodered/node-red:5.0.9e085d4a06591
brotli@1.2.0-r1
1.2.1-r0
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
brotli@1.0.7-6ubuntu0.1
no fix listed
2
openbas/caldera-server:5.1.0a277796d9724
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
opencloudeu/opencloud-rolling:8.1.08fc64ca86173
brotli@1.2.0-r1
1.2.1-r0
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
opencsghq/label-studio:v2.6.0-llm-back03da7327c91e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
opencsghq/label-studio:v2.6.01f6764097129
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
brotli@1.2.0-r0
1.2.1-r0
2
owncloud/server:10.16.6:10.16.6-20261022879638cd818b
brotli@1.0.9-2build6
no fix listed
2
pihole/pihole:2026.10.0:latestd34134716fc3
brotli@1.2.0-r1
1.2.1-r0
2
pihole/pihole:2026.07.2:latestf7d1be836e3b
brotli@1.2.0-r1
1.2.1-r0
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
brotli@1.0.9-2build6
no fix listed
2
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
brotli@1.1.0-2build2
no fix listed
2
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
polyaxon/polyaxon-cli:2.18.09cf0955704ee
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
quickwit/quickwit:v0.8.2363ff56ce456
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
requarks/wiki:2:latestfffff288a52f
brotli@1.2.0-r1
1.2.1-r0
2
rustfs/rustfs:1.0.0:latest8cc980175544
brotli@1.2.0-r1
1.2.1-r0
2
seafileltd/seafile-mc:11.0.12d0c66e4621bd
brotli@1.0.9-2build6
no fix listed
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
brotli@1.0.7-6ubuntu0.1
no fix listed
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.