StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
entrypoint-balancereclipse-aeriosVerified publisher1.3.01 of 1See more

entrypoint-balancer eclipse-aerios 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

2,707
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

17,623
management-portaleclipse-aeriosVerified publisher1.1.02 of 2See more

management-portal eclipse-aerios 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
brotli@1.2.0-r0
1.2.1-r0
eclipseaerios/management-portal-frontend:1.2.23a8e4cf60629
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

4,287
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
brotli@1.0.9-2build6
no fix listed

Open the chart page →

11,204
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
redpandadata/redpanda:latest8b1076e0d61b
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,264
marblerunedgelesssysVerified publisher1.9.21 of 1See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
brotli@1.0.9-2build6
no fix listed

Open the chart page →

2,536
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
brotli@1.0.7-6ubuntu0.1
nodejs@16.20.2-1nodesource1
no fix listed
no fix listed

Open the chart page →

5,718
vaultwardenedudip0.11.01 of 1See more

vaultwarden edudip 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,643
esphomeegebackVerified publisher2.0.271 of 1See more

esphome egeback 2.0.27

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
esphome/esphome:2026.9.14ad55931c018
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

4,439
home-assistantegebackVerified publisher2.0.371 of 1See more

home-assistant egeback 2.0.37

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.10.1130241f28d01
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

3,860
node-redegebackVerified publisher2.0.131 of 1See more

node-red egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
nodered/node-red:5.0.410f40d0a83e7
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,658
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,014
uptime-kumaegebackVerified publisher2.0.131 of 1See more

uptime-kuma egeback 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

42,524
eks-auto-pod-id-assoceks-auto-pod-id-assoc0.6.01 of 1See more

eks-auto-pod-id-assoc eks-auto-pod-id-assoc 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
udhos/eks-auto-pod-id-assoc:0.6.0196ef68af380
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,310
pgadmin4eks-storageclass0.1.01 of 2See more

pgadmin4 eks-storageclass 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dpage/pgadmin4:latestc332c5f6dfba
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1

Open the chart page →

644
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

92,984
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

4,119
elsaelsa0.1.01 of 4See more

elsa elsa 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
geldata/gel:6b3a2815a3956
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,607
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

12,143
kube-ecp-stackemqx-operator2.5.12 of 16See more

kube-ecp-stack emqx-operator 2.5.1

2 of the 16 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
library/telegraf:1.27507a3eecf809
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

32,240
enderdash-agentenderdashVerified publisher0.1.61 of 1See more

enderdash-agent enderdash 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/enderdash-com/enderdash-agent:latest98bea4f2a240
brotli@1.1.0-2build2
no fix listed

Open the chart page →

536
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,916
frontendeoc-chartsVerified publisher0.1.01 of 1See more

frontend eoc-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpine892bb2152464
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

86
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest8632b3314d74
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
umbrella-appeoc-chartsVerified publisher0.1.01 of 3See more

umbrella-app eoc-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:alpinea3554c0d0b48
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,822
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

9,056
eoloPlanteolo-plannerVerified publisher0.1.02 of 7See more

eoloPlant eolo-planner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
brotli@1.0.7-6ubuntu0.1
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
brotli@1.0.9-2build6
no fix listed

Open the chart page →

30,507
eoloplannereoloplannerVerified publisher0.1.02 of 7See more

eoloplanner eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
brotli@1.0.9-2build6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

38,091
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.02 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
brotli@1.0.7-6ubuntu0.1
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
brotli@1.0.9-2build6
no fix listed

Open the chart page →

31,879
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

33,645
eoloplanteoloplant1.0.02 of 7See more

eoloplant eoloplant 1.0.0

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
brotli@1.0.7-6ubuntu0.1
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
brotli@1.0.9-2build6
no fix listed

Open the chart page →

31,879
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

33,481
servereoloserverVerified publisher0.1.02 of 7See more

server eoloserver 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
brotli@1.0.9-2build6
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

38,091
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

72,132
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

66,912
postgresql-backupeosc-lot-1Verified publisher0.4.41 of 3See more

postgresql-backup eosc-lot-1 0.4.4

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/eosc-lot-1/s3cmd:2-alpine01c3f7c8f20e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,385
postgresql-verify-backupeosc-lot-1Verified publisher0.2.01 of 3See more

postgresql-verify-backup eosc-lot-1 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/eosc-lot-1/s3cmd:2-alpine01c3f7c8f20e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,407
s3cmdeosc-lot-1Verified publisher0.3.21 of 1See more

s3cmd eosc-lot-1 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/eosc-lot-1/s3cmd:2-alpine01c3f7c8f20e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

39
gerrit-operatorepmdedpVerified publisher2.25.01 of 2See more

gerrit-operator epmdedp 2.25.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
epamedp/edp-gerrit:3.14.249e8fe9c4855
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,749
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

8,410
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
brotli@1.1.0-2+b7
nodejs@24.18.0-1nodesource1
1.1.0-2+deb13u1
no fix listed

Open the chart page →

3,813
benchmarkoor-apiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-api ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

1,804
benchmarkoor-uiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-ui ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,526
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

17,122
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable75e1ac729c2a
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

5,064
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:masterb63af9919a4e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,112
syncoor-webethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-web ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor-web:master94ac065d447e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

86
tekuethereum-helm-chartsVerified publisher1.2.11 of 2See more

teku ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
consensys/teku:latest19049d6a1e09
brotli@1.1.0-2build2
no fix listed

Open the chart page →

564
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
consensys/web3signer:latest6d5e92aa95c7
brotli@1.2.0-3build1
no fix listed

Open the chart page →

771

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
brotli@1.0.9-2build6
no fix listed
2
syncthing/syncthing:2.1.1775c4aac4862
brotli@1.2.0-r0
1.2.1-r0
2
technitium/dns-server:15.6.2eb48ac5c135f
brotli@1.1.0-2build2
no fix listed
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
brotli@1.0.9-2build6
nodejs@16.14.2-deb-1nodesource1
no fix listed
no fix listed
2
uffizzi/controller:latest0344805f267b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
uselagoon/docker-host:v3.6.12c89ed939b8b
brotli@1.1.0-r2
1.1.1-r0
2
vaultwarden/server:1.37.2:latest094b5689ed81
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
vaultwarden/server:1.37.4-alpine19ea2b669945
brotli@1.2.0-r1
1.2.1-r0
2
vdiogov/glpi-conteiner:latest6945f84f0058
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
wso2/wso2am:2.6.0fbe0f4059b74
brotli@1.0.7-6ubuntu0.1
no fix listed
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
brotli@1.1.0-2build2
no fix listed
2
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
brotli@1.1.0-2build2
nodejs@22.16.0-1nodesource1
no fix listed
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
brotli@1.0.9-2build6
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/home-assistant/home-assistant:2026.10.2:latest33afb0659d78
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1
2
ghcr.io/home-operations/prowlarr:2.6.5:2.6.5.56236152751c3ea2
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/home-operations/radarr:6.4.4:6.4.4.10685be53998a2d39
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightlya1e82488e141
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/casa:0.0.0-nightly2928a069e765
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly71dac4d5d55f
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly62bd0cf3b8dc
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/configurator:0.0.0-nightlya63c560869f6
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightlyf8946f24c96e
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/scim:0.0.0-nightly528e8b045647
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/opencost/opencost-ui:1.121.2:1.121.399ee2db766a0
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.1533fbac79f442
brotli@1.1.0-2build2
no fix listed
2
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/umami-software/umami:3.4.085909afc45bd
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/unionai-oss/flyteconsole-v2:latest7e19bbdd2e7d
brotli@1.2.0-r1
1.2.1-r0
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
brotli@1.0.7-6ubuntu0.1
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.70.3:latest142caa08d1f0
brotli@1.1.0-2build2
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.6_local:latest62d30add38b5
brotli@1.2.0-3build1
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
brotli@1.1.0-2build2
no fix listed
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
brotli@1.2.0-r0
1.2.1-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
brotli@1.2.0-r0
1.2.1-r0
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
brotli@1.1.0-r2
1.1.1-r0
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.