StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.83 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

3 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
brotli@1.0.7-6ubuntu0.1
no fix listed
library/elasticsearch:7.17.1588c2ec10c7f2
brotli@1.0.7-6ubuntu0.1
no fix listed
library/kibana:7.17.150172f1c538e7
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

38,652
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
brotli@1.0.7-6ubuntu0.1
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

20,062
glassflow-etlglassflowVerified publisher0.5.212 of 16See more

glassflow-etl glassflow 0.5.21

2 of the 16 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
alpine/curl:latestba0b29b383a3
brotli@1.2.0-r1
1.2.1-r0
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

17,910
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/phpmyadmin:latest62a50b1419fe
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
vdiogov/glpi-conteiner:latest6945f84f0058
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

80,098
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:latestdc28ed5a9d0f
brotli@1.2.0-3build1
no fix listed

Open the chart page →

24,294
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:latestdc28ed5a9d0f
brotli@1.2.0-3build1
no fix listed

Open the chart page →

26,505
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
brotli@1.0.9-2build6
no fix listed

Open the chart page →

23,515
kube-prometheus-stackgpg-dev84.0.01 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

1 of the 6 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

6,778
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
brotli@1.0.9-2build6
no fix listed

Open the chart page →

9,074
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,015
opentelemetry-demogpg-dev0.33.84 of 27See more

opentelemetry-demo gpg-dev 0.33.8

4 of the 27 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
brotli@1.0.9-2+b6
brotli@1.1.0
1.0.9-2+deb12u1
1.2.1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
brotli@1.1.0-2build2
no fix listed

Open the chart page →

199,455
video-analytics-demogpu-operator0.1.92 of 3See more

video-analytics-demo gpu-operator 0.1.9

2 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
brotli@1.0.7-6ubuntu0.1
no fix listed
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

16,849
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
hive-storagegraphql-hive1.0.01 of 3See more

hive-storage graphql-hive 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

783
hive-storagegraphql-hive-subcharts1.0.01 of 3See more

hive-storage graphql-hive-subcharts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
curlimages/curl:latest11e64e28c5f5
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

783
grapple-installergrapple-installer0.3.231 of 1See more

grapple-installer grapple-installer 0.3.23

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
brotli@1.1.0-2build2
no fix listed

Open the chart page →

90,530
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
brotli@1.0.9-2build6
no fix listed

Open the chart page →

5,341
grayloggraylogVerified publisher1.0.22 of 4See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
brotli@1.0.9-2build6
no fix listed
library/mongo:80e900a3364da
brotli@1.1.0-2build2
no fix listed

Open the chart page →

6,154
routergroundcover1.13.1512 of 7See more

router groundcover 1.13.151

2 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.55-grafana11.3.77d261462727d
brotli@1.0.9-2build6
no fix listed
quay.io/groundcover/tools:20260929e8a79ea4cf39
brotli@1.1.0-2+b7
1.2.0-4+e1

Open the chart page →

9,106
temporalgroundcover1.13.1512 of 2See more

temporal groundcover 1.13.151

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools:1.29.7-20260929-1f21c0eb520a9
brotli@1.1.0-2+b7
1.2.0-4+e1
public.ecr.aws/groundcovercom/temporalio/server:1.29.6-mini-20260702-170f191d0a80e
brotli@1.1.0-2+b7
1.2.0-4+e1

Open the chart page →

2,914
guacamoleguacamole1.0.01 of 4See more

guacamole guacamole 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
brotli@1.1.0-2build2
no fix listed

Open the chart page →

4,754
gwangju_2-3gwangju2-30.1.01 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
fluent/fluent-bit:latest2740f387f6e6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

7,400
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latest1cd3f9599dd5
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

8,462
octoboxhalkeye0.1.11 of 1See more

octobox halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
octoboxio/octobox:latestd909041c46eb
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

3,471
hatchet-hahatchetOfficialVerified publisher0.20.01 of 8See more

hatchet-ha hatchet 0.20.0

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,829
hatchet-stackhatchetOfficialVerified publisher0.20.01 of 8See more

hatchet-stack hatchet 0.20.0

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

9,829
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
brotli@1.0.9-2build6
no fix listed

Open the chart page →

70,426
web-charthcpark-ktcloudlab0.1.01 of 1See more

web-chart hcpark-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,856
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

8,098
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
brotli@1.0.7-6ubuntu0.1
no fix listed
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

157,451
helixhelix1.4.32 of 2See more

helix helix 1.4.3

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
brotli@1.2.0-r0
1.2.1-r0
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,602
test-apphellnet0.1.11 of 1See more

test-app hellnet 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:latest4c41e2d0a3a5
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,712
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,451
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
no fix listed

Open the chart page →

64,154
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

17,864
airports-postgreshelm-airports-dan0.1.01 of 1See more

airports-postgres helm-airports-dan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,223
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

10,410
airports-postgreshelm-airports-postgres0.1.01 of 1See more

airports-postgres helm-airports-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
postgis/postgis:lateste84455a058f6
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

4,223
my_web1helm-chart-by-piyush0.1.01 of 1See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/httpd:latesta30cd4cd57f3
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,386
jenkinshelm-chart-for-jenkinsVerified publisher1.0.01 of 1See more

jenkins helm-chart-for-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,306
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

7,126
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
brotli@1.1.0-r2
brotli@1.1.0
1.1.1-r0
1.2.1

Open the chart page →

6,874
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,339
streamsheetshelm-chartsVerified publisher0.2.31 of 8See more

streamsheets helm-charts 0.2.3

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:238c0da4f2ef8
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

92,071
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
grafana/grafana:latestdbbc38ea2110
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

16,394
nginx-charthelm-chart-sample-app0.1.01 of 1See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
rraahul/test:latestbfe2c1183bc0
brotli@1.0.9-2build6
no fix listed

Open the chart page →

4,979
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
brotli@1.1.0
1.2.1

Open the chart page →

3,166
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

31,616

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
brotli@1.0.9-2build6
no fix listed
2
syncthing/syncthing:2.1.1775c4aac4862
brotli@1.2.0-r0
1.2.1-r0
2
technitium/dns-server:15.6.2eb48ac5c135f
brotli@1.1.0-2build2
no fix listed
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
brotli@1.0.9-2build6
nodejs@16.14.2-deb-1nodesource1
no fix listed
no fix listed
2
uffizzi/controller:latest0344805f267b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
uselagoon/docker-host:v3.6.12c89ed939b8b
brotli@1.1.0-r2
1.1.1-r0
2
vaultwarden/server:1.37.2:latest094b5689ed81
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
vaultwarden/server:1.37.4-alpine19ea2b669945
brotli@1.2.0-r1
1.2.1-r0
2
vdiogov/glpi-conteiner:latest6945f84f0058
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
wso2/wso2am:2.6.0fbe0f4059b74
brotli@1.0.7-6ubuntu0.1
no fix listed
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
brotli@1.1.0-2build2
no fix listed
2
ghcr.io/advplyr/audiobookshelf:2.37.1581d68b2a6fc
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
brotli@1.1.0-2build2
nodejs@22.16.0-1nodesource1
no fix listed
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
brotli@1.0.9-2build6
nodejs@16.18.0-deb-1nodesource1
no fix listed
no fix listed
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
brotli@1.0.7-6ubuntu0.1
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/home-assistant/home-assistant:2026.10.2:latest33afb0659d78
brotli@1.2.0-r1
brotli@1.2.0
1.2.1-r0
1.2.1
2
ghcr.io/home-operations/prowlarr:2.6.5:2.6.5.56236152751c3ea2
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/home-operations/radarr:6.4.4:6.4.4.10685be53998a2d39
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightlya1e82488e141
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/casa:0.0.0-nightly2928a069e765
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/cloudtools:0.0.0-nightly71dac4d5d55f
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly62bd0cf3b8dc
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/configurator:0.0.0-nightlya63c560869f6
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightlyf8946f24c96e
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/janssenproject/jans/scim:0.0.0-nightly528e8b045647
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/mealie-recipes/mealie:v3.29.078eb28b8776d
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
2
ghcr.io/music-assistant/server:2.10.7dce482dc3bf4
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/openclaw/openclaw:2026.10.6:main7dbff0fe5f53
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/opencost/opencost-ui:1.121.2:1.121.399ee2db766a0
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.1533fbac79f442
brotli@1.1.0-2build2
no fix listed
2
ghcr.io/paperless-ngx/paperless-ngx:3.3.3dba0242c1df1
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
brotli@1.0.9-2build6
no fix listed
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
2
ghcr.io/umami-software/umami:3.4.085909afc45bd
brotli@1.2.0-r1
1.2.1-r0
2
ghcr.io/unionai-oss/flyteconsole-v2:latest7e19bbdd2e7d
brotli@1.2.0-r1
1.2.1-r0
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
brotli@1.0.7-6ubuntu0.1
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.70.3:latest142caa08d1f0
brotli@1.1.0-2build2
no fix listed
2
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime:1.75.6_local:latest62d30add38b5
brotli@1.2.0-3build1
no fix listed
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
brotli@1.1.0-2build2
no fix listed
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
brotli@1.2.0-r0
1.2.1-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
brotli@1.2.0-r0
1.2.1-r0
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
brotli@1.1.0-r2
1.1.1-r0
2

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.