StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
topology-discoveryfrinx-helm-charts4.0.01 of 2See more

topology-discovery frinx-helm-charts 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
frinx/topology-discovery:7.0.37832e3589dba
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,718
uniresourcefrinx-helm-charts1.1.11 of 3See more

uniresource frinx-helm-charts 1.1.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/postgres:alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

5,394
workflow-managerfrinx-helm-charts3.2.11 of 5See more

workflow-manager frinx-helm-charts 3.2.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
frinx/conductor-server:6.1.0d01264a908c9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,171
borgmaticgabe565Verified publisher0.10.11 of 1See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,521
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latest04eaae7915ba
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

3,129
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest776a845d5089
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

4,439
monicagabe565Verified publisher0.10.02 of 2See more

monica gabe565 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/monica:4.1.2-fpm-alpine1104023d0636
brotli@1.2.0-r1
1.2.1-r0
library/nginx:stable-alpine970364228b1e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

760
relax-soundsgabe565Verified publisher1.1.01 of 1See more

relax-sounds gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

735
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
brotli@1.0.9-2+b6
nodejs@18.13.0+dfsg1-1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

15,654
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stable-alpine47928bf67eb6
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,952
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
brotli@1.1.0-2build2
no fix listed
gchq/hdfs:3.3.35ec58edbb2db
brotli@1.1.0-2build2
no fix listed

Open the chart page →

19,781
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
brotli@1.1.0-2build2
no fix listed

Open the chart page →

11,158
garge-apigargeVerified publisher0.1.721 of 1See more

garge-api garge 0.1.72

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sondresjo/garge-api:v2.20.0532200ce2e3e
brotli@1.1.0-2build2
no fix listed

Open the chart page →

989
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

19,237
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

16,498
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

18,624
common-testgeek-cookbookVerified publisher1.0.41 of 1See more

common-test geek-cookbook 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
b4bz/homer:latestfebc8967c9f7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

257
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
brotli@1.0.7-6ubuntu0.1
nodejs@16.13.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

86,239
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:latestc3d1bce6c698
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,013
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,180
factoriogeek-cookbookVerified publisher1.2.21 of 2See more

factorio geek-cookbook 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
factoriotools/factorio:stable312341f29987
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,279
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,536
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
brotli@1.0.7-6ubuntu0.1
nodejs@14.17.2-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

12,817
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,271
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

11,207
lancachegeek-cookbookVerified publisher0.6.21 of 1See more

lancache geek-cookbook 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lancachenet/monolithic:latest155817065b13
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,571
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

16,248
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
brotli@1.0.9-2+b6
nodejs@18.20.8-1nodesource1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

69,783
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
brotli@1.0.9-2build6
no fix listed

Open the chart page →

13,740
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

20,014
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

30,423
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
brotli@1.0.9-2build6
no fix listed

Open the chart page →

22,464
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
brotli@1.0.7-6ubuntu0.1
nodejs@17.5.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

16,778
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,595
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
brotli@1.0.9-2build6
no fix listed

Open the chart page →

11,841
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,333
satisfactorygeek-cookbookVerified publisher1.2.21 of 1See more

satisfactory geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:latestac252dba4165
brotli@1.0.9-2build6
no fix listed

Open the chart page →

3,606
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,970
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

100,279
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
searx/searx:1.0.0-211-968b28993dbb3a6d9419
brotli@1.0.9
1.2.1

Open the chart page →

10,846
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

12,596
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,450
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

20,179
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,676
dispatchoor-uigeneral-helm-chartsVerified publisher0.1.01 of 1See more

dispatchoor-ui general-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,526
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,173
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

4,899
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,326
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed

Open the chart page →

8,072

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
brotli@1.0.9-2build6
no fix listed
2
syncthing/syncthing:2.1.1775c4aac4862
brotli@1.2.0-r0
1.2.1-r0
2
technitium/dns-server:15.6.2eb48ac5c135f
brotli@1.1.0-2build2
no fix listed
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
brotli@1.0.9-2build6
nodejs@16.14.2-deb-1nodesource1
no fix listed
no fix listed
2
uffizzi/controller:latest0344805f267b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
uselagoon/docker-host:v3.6.12c89ed939b8b
brotli@1.1.0-r2
1.1.1-r0
2
vaultwarden/server:1.37.2:latest094b5689ed81
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
vaultwarden/server:1.37.4-alpine19ea2b669945
brotli@1.2.0-r1
1.2.1-r0
2
vdiogov/glpi-conteiner:latest6945f84f0058
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
wso2/wso2am:2.6.0fbe0f4059b74
brotli@1.0.7-6ubuntu0.1
no fix listed
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
brotli@1.1.0-2build2
no fix listed
2
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
brotli@1.1.0-2build2
nodejs@22.16.0-1nodesource1
no fix listed
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
brotli@1.0.9-2build6
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/home-assistant/home-assistant:2026.10.2:latest33afb0659d78
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1
2
ghcr.io/home-operations/prowlarr:2.6.5:2.6.5.56236152751c3ea2
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/home-operations/radarr:6.4.4:6.4.4.10685be53998a2d39
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightlya1e82488e141
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/casa:0.0.0-nightly2928a069e765
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly71dac4d5d55f
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly62bd0cf3b8dc
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/configurator:0.0.0-nightlya63c560869f6
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightlyf8946f24c96e
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/scim:0.0.0-nightly528e8b045647
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/opencost/opencost-ui:1.121.2:1.121.399ee2db766a0
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.1533fbac79f442
brotli@1.1.0-2build2
no fix listed
2
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/umami-software/umami:3.4.085909afc45bd
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/unionai-oss/flyteconsole-v2:latest7e19bbdd2e7d
brotli@1.2.0-r1
1.2.1-r0
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
brotli@1.0.7-6ubuntu0.1
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.70.3:latest142caa08d1f0
brotli@1.1.0-2build2
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.6_local:latest62d30add38b5
brotli@1.2.0-3build1
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
brotli@1.1.0-2build2
no fix listed
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
brotli@1.2.0-r0
1.2.1-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
brotli@1.2.0-r0
1.2.1-r0
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
brotli@1.1.0-r2
1.1.1-r0
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.