StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
topology-discoveryfrinx-helm-charts4.0.01 of 2See more

topology-discovery frinx-helm-charts 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
frinx/topology-discovery:7.0.37832e3589dba
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,718
uniresourcefrinx-helm-charts1.1.11 of 3See more

uniresource frinx-helm-charts 1.1.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/postgres:alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

5,394
workflow-managerfrinx-helm-charts3.2.11 of 5See more

workflow-manager frinx-helm-charts 3.2.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
frinx/conductor-server:6.1.0d01264a908c9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,171
borgmaticgabe565Verified publisher0.10.11 of 1See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,521
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latest04eaae7915ba
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

3,129
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest776a845d5089
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

4,439
monicagabe565Verified publisher0.10.02 of 2See more

monica gabe565 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/monica:4.1.2-fpm-alpine1104023d0636
brotli@1.2.0-r1
1.2.1-r0
library/nginx:stable-alpine970364228b1e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

760
relax-soundsgabe565Verified publisher1.1.01 of 1See more

relax-sounds gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

735
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
brotli@1.0.9-2+b6
nodejs@18.13.0+dfsg1-1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

15,654
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stable-alpine47928bf67eb6
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,952
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
brotli@1.1.0-2build2
no fix listed
gchq/hdfs:3.3.35ec58edbb2db
brotli@1.1.0-2build2
no fix listed

Open the chart page →

19,781
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
brotli@1.1.0-2build2
no fix listed

Open the chart page →

11,158
garge-apigargeVerified publisher0.1.721 of 1See more

garge-api garge 0.1.72

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sondresjo/garge-api:v2.20.0532200ce2e3e
brotli@1.1.0-2build2
no fix listed

Open the chart page →

989
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

19,237
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

16,498
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

18,624
common-testgeek-cookbookVerified publisher1.0.41 of 1See more

common-test geek-cookbook 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
b4bz/homer:latestfebc8967c9f7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

257
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
brotli@1.0.7-6ubuntu0.1
nodejs@16.13.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

86,239
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:latestc3d1bce6c698
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,013
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,180
factoriogeek-cookbookVerified publisher1.2.21 of 2See more

factorio geek-cookbook 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
factoriotools/factorio:stable312341f29987
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,279
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,536
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
brotli@1.0.7-6ubuntu0.1
nodejs@14.17.2-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

12,817
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,271
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

11,207
lancachegeek-cookbookVerified publisher0.6.21 of 1See more

lancache geek-cookbook 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lancachenet/monolithic:latest155817065b13
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,571
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

16,248
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
brotli@1.0.9-2+b6
nodejs@18.20.8-1nodesource1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

69,783
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
brotli@1.0.9-2build6
no fix listed

Open the chart page →

13,740
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

20,014
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

30,423
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
brotli@1.0.9-2build6
no fix listed

Open the chart page →

22,464
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
brotli@1.0.7-6ubuntu0.1
nodejs@17.5.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

16,778
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,595
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
brotli@1.0.9-2build6
no fix listed

Open the chart page →

11,841
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,333
satisfactorygeek-cookbookVerified publisher1.2.21 of 1See more

satisfactory geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:latestac252dba4165
brotli@1.0.9-2build6
no fix listed

Open the chart page →

3,606
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,970
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

100,279
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
searx/searx:1.0.0-211-968b28993dbb3a6d9419
brotli@1.0.9
1.2.1

Open the chart page →

10,846
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

12,596
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,450
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

20,179
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,676
dispatchoor-uigeneral-helm-chartsVerified publisher0.1.01 of 1See more

dispatchoor-ui general-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,526
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,173
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

4,899
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,326
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed

Open the chart page →

8,072

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
library/phpmyadmin:5.2.16e75aa8f767c
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
library/postgres:18.3-alpine:18.3-alpine3.2354451ecb8ab3
brotli@1.2.0-r0
1.2.1-r0
2
library/postgres:18.6-alpine3.24:18-alpine:alpine83148c0bc09e
brotli@1.2.0-r1
1.2.1-r0
2
library/python:3.7eedf63967cdb
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
library/redmine:6.1.3-trixief474a901faec
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
library/wordpress:7.1.3-apache:latest81a34254acaa
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
library/wordpress:latestd42f63cb89ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
library/zookeeper:3.9.65bad433c7170
brotli@1.0.9-2build6
no fix listed
2
linuxserver/jackett:latest078c3f6d78c4
brotli@1.2.0-r1
1.2.1-r0
2
linuxserver/prowlarr:2.6.5:latestf9151e5bc102
brotli@1.2.0-r1
1.2.1-r0
2
linuxserver/qbittorrent:5.2.4:latest97333cc1ccf9
brotli@1.2.0-r1
1.2.1-r0
2
linuxserver/radarr:6.4.4:latestcfbc4fa09dc9
brotli@1.2.0-r1
1.2.1-r0
2
linuxserver/radarr:latestfc0ae3c50f81
brotli@1.2.0-r1
1.2.1-r0
2
locustio/locust:2.32.2a0d4b88e42c1
brotli@1.1.0
1.2.1
2
longhornio/longhorn-manager:v1.2.3dca34321452c
brotli@1.0.7-6ubuntu0.1
no fix listed
2
louislam/uptime-kuma:2.5.69912da7d7d9b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
louislam/uptime-kuma:2.3.29aeb4e51d038
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
memgraph/memgraph:3.14.0a73242121795
brotli@1.1.0-2build2
no fix listed
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
brotli@1.0.7-6ubuntu0.1
no fix listed
2
metabase/metabase:v0.61.1.x9491ed11c901
brotli@1.2.0-r0
1.2.1-r0
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
n8nio/n8n:2.36.714c4285bc303
brotli@1.2.0-r1
1.2.1-r0
2
nacos/nacos-server:latest1c191c30c8cd
brotli@1.2.0-3build1
no fix listed
2
netbirdio/dashboard:latest:v2.95.03d6adfee19dd
brotli@1.2.0-r1
1.2.1-r0
2
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
brotli@1.1.0-r2
1.1.1-r0
2
nodered/node-red:5.0.9e085d4a06591
brotli@1.2.0-r1
1.2.1-r0
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
brotli@1.0.7-6ubuntu0.1
no fix listed
2
openbas/caldera-server:5.1.0a277796d9724
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
opencloudeu/opencloud-rolling:8.1.08fc64ca86173
brotli@1.2.0-r1
1.2.1-r0
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
opencsghq/label-studio:v2.6.0-llm-back03da7327c91e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
opencsghq/label-studio:v2.6.01f6764097129
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
brotli@1.2.0-r0
1.2.1-r0
2
owncloud/server:10.16.6:10.16.6-20261022879638cd818b
brotli@1.0.9-2build6
no fix listed
2
pihole/pihole:2026.10.0:latestd34134716fc3
brotli@1.2.0-r1
1.2.1-r0
2
pihole/pihole:2026.07.2:latestf7d1be836e3b
brotli@1.2.0-r1
1.2.1-r0
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
brotli@1.0.9-2build6
no fix listed
2
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
brotli@1.1.0-2build2
no fix listed
2
polyaxon/polyaxon-agent:2.18.068dc11cd6f8e
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
polyaxon/polyaxon-cli:2.18.09cf0955704ee
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
quickwit/quickwit:v0.8.2363ff56ce456
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
requarks/wiki:2:latestfffff288a52f
brotli@1.2.0-r1
1.2.1-r0
2
rustfs/rustfs:1.0.0:latest8cc980175544
brotli@1.2.0-r1
1.2.1-r0
2
seafileltd/seafile-mc:11.0.12d0c66e4621bd
brotli@1.0.9-2build6
no fix listed
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
brotli@1.0.7-6ubuntu0.1
no fix listed
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.