StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

7,941
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
brotli@1.0.7-6ubuntu0.1
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

8,852
deployhubdeployhubVerified publisher10.0.4153 of 11See more

deployhub deployhub 10.0.415

3 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
brotli@1.2.0-r0
1.2.1-r0
quay.io/deployhub/ms-ui:svccat-v11.0.815-g717581f5dedbc31e6f
brotli@1.2.0-r0
1.2.1-r0
quay.io/ortelius/ms-sbom-export:main-v10.0.933-g2e222ef43bdaa51598
brotli@1.2.0
1.2.1

Open the chart page →

14,133
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

76,682
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,394
frontend-servicedev-krishan-dhaka-charts1.0.21 of 1See more

frontend-service dev-krishan-dhaka-charts 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
devkrishan001/frontend:latesta0ad60836e6b
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,224
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
brotli@1.0.9-2build6
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

120,611
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
brotli@1.0.9-2build6
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

119,596
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,500
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
brotli@1.0.9-2build6
no fix listed

Open the chart page →

14,954
caddy-reverse-proxydevtron0.10.11 of 1See more

caddy-reverse-proxy devtron 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/caddy:latestf2a1290d0463
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

265
devtron-enterprisedevtron48.0.06 of 28See more

devtron-enterprise devtron 48.0.0

6 of the 28 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/dashboard:0d8f6cf4-60e17132-931-39393aa61fffb8ae8
brotli@1.2.0-r1
1.2.1-r0
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
brotli@1.1.0-2build2
no fix listed
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
brotli@1.1.0-r2
1.1.1-r0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
brotli@1.1.0-r2
1.1.1-r0
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

219,746
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,080
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
brotli@1.0.7-6ubuntu0.1
nodejs@14.17.5-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

13,798
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,500
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
brotli@1.0.9-2build6
no fix listed

Open the chart page →

14,954
caddy-reverse-proxydevtron-labs0.10.11 of 1See more

caddy-reverse-proxy devtron-labs 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/caddy:latest504a44d7d74b
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

252
devtron-enterprisedevtron-labs48.0.06 of 28See more

devtron-enterprise devtron-labs 48.0.0

6 of the 28 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/dashboard:0d8f6cf4-60e17132-931-39393aa61fffb8ae8
brotli@1.2.0-r1
1.2.1-r0
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
brotli@1.1.0-2build2
no fix listed
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
brotli@1.1.0-r2
1.1.1-r0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
brotli@1.1.0-r2
1.1.1-r0
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

219,746
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
brotli@1.0.9-2build6
no fix listed

Open the chart page →

6,080
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/devtron/dashboard:c7b89667-690-39290c63823af3835
brotli@1.2.0-r1
1.2.1-r0
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
brotli@1.1.0-2build2
no fix listed

Open the chart page →

120,970
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
brotli@1.0.7-6ubuntu0.1
nodejs@14.17.5-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

13,798
dial-admindialVerified publisher0.20.01 of 3See more

dial-admin dial 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
epam/ai-dial-admin-backend:0.22.160bf578531ef
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

3,857
difydify1.0.02 of 4See more

dify dify 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
brotli@1.0.9-2+b6
brotli@1.1.0
nodejs@18.19.0+dfsg-6~deb12u2
1.0.9-2+deb12u1
1.2.1
no fix listed
langgenius/dify-plugin-daemon:main-localf37071eaf645
brotli@1.1.0-2build2
no fix listed

Open the chart page →

46,852
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

6,263
node-reddjdl-charts0.33.01 of 1See more

node-red djdl-charts 0.33.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nodered/node-red:latestb5adb6c9dd29
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

342
adventurelogdjjudas21Verified publisher0.1.21 of 3See more

adventurelog djjudas21 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

11,016
domainmoddjjudas21Verified publisher1.0.11 of 1See more

domainmod djjudas21 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.09d50d450ad4d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,219
ownclouddjjudas21Verified publisher0.3.261 of 3See more

owncloud djjudas21 0.3.26

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
owncloud/server:10.16.6-20261022879638cd818b
brotli@1.0.9-2build6
no fix listed

Open the chart page →

11,204
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
brotli@1.1.0-2build2
no fix listed

Open the chart page →

100,739
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

6,562
webtreesdjjudas21Verified publisher3.0.11 of 1See more

webtrees djjudas21 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.627597e9f4664
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,263
wizarrdjjudas21Verified publisher0.1.61 of 1See more

wizarr djjudas21 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

93,963
netbirddmdhrumilmistryVerified publisher0.1.01 of 6See more

netbird dmdhrumilmistry 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
netbirdio/dashboard:latest3d6adfee19dd
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,755
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,547
dnation-kubernetes-monitoringdnationcloud3.0.51 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,547
dnation-kubernetes-monitoring-stackdnationcloud5.0.43 of 18See more

dnation-kubernetes-monitoring-stack dnationcloud 5.0.4

3 of the 18 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
grafana/grafana:13.1.0121a7a9ece6d
brotli@1.2.0-r1
1.2.1-r0
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

21,030
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
brotli@1.0.9-2+b6
nodejs@18.20.4+dfsg-1~deb12u1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

12,396
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
brotli@1.0.9-2build6
no fix listed

Open the chart page →

28,581
healthchecksdoubanVerified publisher1.0.101 of 2See more

healthchecks douban 1.0.10

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
healthchecks/healthchecks:latestba6276c008de
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,572
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,009
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
brotli@1.0.9-2build6
no fix listed

Open the chart page →

35,591
duckdb-uiduckdb-ui0.5.21 of 1See more

duckdb-ui duckdb-ui 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,188
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,393
clickhouse-monitoringduyet0.1.32 of 2See more

clickhouse-monitoring duyet 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/curl:8.21.0a1c44bab54d8
brotli@1.2.0-r1
1.2.1-r0
ghcr.io/duyet/clickhouse-monitoring:latest84edfe8a67a8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,273
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stable9bf97bd7714f
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

20,990
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
brotli@1.0.9-2+b6
nodejs@18.19.0+dfsg-6~deb12u2
1.0.9-2+deb12u1
no fix listed

Open the chart page →

10,807
base-consensusdysnixVerified publisher0.2.01 of 1See more

base-consensus dysnix 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,150
openclaweasy-openclaw0.1.01 of 1See more

openclaw easy-openclaw 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:main7dbff0fe5f53
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

2,448

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
brotli@1.0.9-2build6
no fix listed
2
syncthing/syncthing:2.1.1775c4aac4862
brotli@1.2.0-r0
1.2.1-r0
2
technitium/dns-server:15.6.2eb48ac5c135f
brotli@1.1.0-2build2
no fix listed
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
brotli@1.0.9-2build6
nodejs@16.14.2-deb-1nodesource1
no fix listed
no fix listed
2
uffizzi/controller:latest0344805f267b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
uselagoon/docker-host:v3.6.12c89ed939b8b
brotli@1.1.0-r2
1.1.1-r0
2
vaultwarden/server:1.37.2:latest094b5689ed81
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
vaultwarden/server:1.37.4-alpine19ea2b669945
brotli@1.2.0-r1
1.2.1-r0
2
vdiogov/glpi-conteiner:latest6945f84f0058
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
wso2/wso2am:2.6.0fbe0f4059b74
brotli@1.0.7-6ubuntu0.1
no fix listed
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
brotli@1.1.0-2build2
no fix listed
2
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
brotli@1.1.0-2build2
nodejs@22.16.0-1nodesource1
no fix listed
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
brotli@1.0.9-2build6
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/home-assistant/home-assistant:2026.10.2:latest33afb0659d78
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1
2
ghcr.io/home-operations/prowlarr:2.6.5:2.6.5.56236152751c3ea2
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/home-operations/radarr:6.4.4:6.4.4.10685be53998a2d39
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightlya1e82488e141
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/casa:0.0.0-nightly2928a069e765
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly71dac4d5d55f
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly62bd0cf3b8dc
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/configurator:0.0.0-nightlya63c560869f6
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightlyf8946f24c96e
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/scim:0.0.0-nightly528e8b045647
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/opencost/opencost-ui:1.121.2:1.121.399ee2db766a0
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.1533fbac79f442
brotli@1.1.0-2build2
no fix listed
2
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/umami-software/umami:3.4.085909afc45bd
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/unionai-oss/flyteconsole-v2:latest7e19bbdd2e7d
brotli@1.2.0-r1
1.2.1-r0
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
brotli@1.0.7-6ubuntu0.1
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.70.3:latest142caa08d1f0
brotli@1.1.0-2build2
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.6_local:latest62d30add38b5
brotli@1.2.0-3build1
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
brotli@1.1.0-2build2
no fix listed
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
brotli@1.2.0-r0
1.2.1-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
brotli@1.2.0-r0
1.2.1-r0
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
brotli@1.1.0-r2
1.1.1-r0
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.