StackRadar

CVE-2026-111497

Critical

Advisory

Published 22 Oct 2026In the index since 23 Oct 2026
Severity
Critical
worst across findings
CVSS
9.2
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,321
of 18,232 indexed, latest versions
Container images
2,195
deployed by those charts
Fix available
6 of 7
affected packages

Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

Carried by container images the latest versions of 2,321 of 18,232 indexed charts deploy, on 2,195 images.

Affected packageAffected versionsFixed inImages
brotlideb1.0.7-6ubuntu0.1, 1.0.9-2+b2, 1.0.9-2+b6, 1.0.9-2build6+5 more1.0.9-2+deb12u1, 1.1.0-2+deb13u1, 1.2.0-4+e11,478
brotliapk1.0.9-r14, 1.1.0-r2, 1.2.0-r0, 1.2.0-r11.1.1-r0, 1.2.1-r0639
brotlipypi1.0.9, 1.1.0, 1.2.01.2.1107
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+48 moreno fix listed72
nodebitnami18.4.0-0, 18.7.0-1, 18.12.1-0, 18.13.0-0+8 more22.23.424
Node.jsbitnami20.4.0, 20.5.1, 20.8.0, 20.9.0+1 more22.23.47
brotlicffipypi1.2.0.1, 1.2.0.21.2.1.03
OSV records
ALPINE-CVE-2026-111497BIT-node-2026-111497DEBIAN-CVE-2026-111497ECHO-1099-6733-474bPYSEC-2026-4322PYSEC-2026-4323UBUNTU-CVE-2026-111497
Also known as
BIT-node-min-2026-111497
Trending
Rank 1 in indexed charts, since 24 Oct 2026. See the ranking →

Charts affected

2,321 by stars
ChartLatestAffected imagesRadar Score
topology-discoveryfrinx-helm-charts4.0.01 of 2See more

topology-discovery frinx-helm-charts 4.0.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
frinx/topology-discovery:7.0.37832e3589dba
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

6,718
uniresourcefrinx-helm-charts1.1.11 of 3See more

uniresource frinx-helm-charts 1.1.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/postgres:alpine77f585114c32
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

5,394
workflow-managerfrinx-helm-charts3.2.11 of 5See more

workflow-manager frinx-helm-charts 3.2.1

1 of the 5 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
frinx/conductor-server:6.1.0d01264a908c9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,171
borgmaticgabe565Verified publisher0.10.11 of 1See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
brotli@1.1.0-r2
1.1.1-r0

Open the chart page →

3,521
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latest04eaae7915ba
brotli@1.0.9-2+b6
brotli@1.2.0
1.0.9-2+deb12u1
1.2.1

Open the chart page →

3,129
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest776a845d5089
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

4,439
monicagabe565Verified publisher0.10.02 of 2See more

monica gabe565 0.10.0

2 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/monica:4.1.2-fpm-alpine1104023d0636
brotli@1.2.0-r1
1.2.1-r0
library/nginx:stable-alpine970364228b1e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

760
relax-soundsgabe565Verified publisher1.1.01 of 1See more

relax-sounds gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

735
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
brotli@1.0.9-2+b6
nodejs@18.13.0+dfsg1-1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

15,654
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/nginx:stable-alpine47928bf67eb6
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

2,952
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
brotli@1.1.0-2build2
no fix listed
gchq/hdfs:3.3.35ec58edbb2db
brotli@1.1.0-2build2
no fix listed

Open the chart page →

19,781
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
brotli@1.1.0-2build2
no fix listed

Open the chart page →

11,158
garge-apigargeVerified publisher0.1.721 of 1See more

garge-api garge 0.1.72

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
sondresjo/garge-api:v2.20.0532200ce2e3e
brotli@1.1.0-2build2
no fix listed

Open the chart page →

989
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

21,745
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

19,237
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

16,498
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

18,624
common-testgeek-cookbookVerified publisher1.0.41 of 1See more

common-test geek-cookbook 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
b4bz/homer:latestfebc8967c9f7
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

257
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
brotli@1.0.7-6ubuntu0.1
nodejs@16.13.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

86,239
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:latestc3d1bce6c698
brotli@1.1.0-2build2
no fix listed

Open the chart page →

2,013
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

10,180
factoriogeek-cookbookVerified publisher1.2.21 of 2See more

factorio geek-cookbook 1.2.2

1 of the 2 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
factoriotools/factorio:stable312341f29987
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

1,279
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,536
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
brotli@1.0.7-6ubuntu0.1
nodejs@14.17.2-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

12,817
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

11,271
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

11,207
lancachegeek-cookbookVerified publisher0.6.21 of 1See more

lancache geek-cookbook 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
lancachenet/monolithic:latest155817065b13
brotli@1.1.0-2build2
no fix listed

Open the chart page →

1,571
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

16,248
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
brotli@1.0.9-2+b6
nodejs@18.20.8-1nodesource1
1.0.9-2+deb12u1
no fix listed

Open the chart page →

69,783
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
brotli@1.0.9-2build6
no fix listed

Open the chart page →

13,740
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

20,014
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

30,423
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
brotli@1.0.9-2build6
no fix listed

Open the chart page →

22,464
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
brotli@1.0.7-6ubuntu0.1
nodejs@17.5.0-deb-1nodesource1
no fix listed
no fix listed

Open the chart page →

16,778
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,595
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
brotli@1.0.9-2build6
no fix listed

Open the chart page →

11,841
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

9,333
satisfactorygeek-cookbookVerified publisher1.2.21 of 1See more

satisfactory geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:latestac252dba4165
brotli@1.0.9-2build6
no fix listed

Open the chart page →

3,606
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
brotli@1.1.0-2+b7
1.1.0-2+deb13u1

Open the chart page →

2,970
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

100,279
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
searx/searx:1.0.0-211-968b28993dbb3a6d9419
brotli@1.0.9
1.2.1

Open the chart page →

10,846
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1

Open the chart page →

12,596
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

13,450
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

20,179
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
brotli@1.0.9-2+b6
1.0.9-2+deb12u1

Open the chart page →

4,676
dispatchoor-uigeneral-helm-chartsVerified publisher0.1.01 of 1See more

dispatchoor-ui general-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
brotli@1.2.0-r0
1.2.1-r0

Open the chart page →

1,526
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
brotli@1.2.0-r1
1.2.1-r0

Open the chart page →

1,173
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
brotli@1.0.7-6ubuntu0.1
no fix listed

Open the chart page →

4,899
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
brotli@1.1.0-2build2
no fix listed

Open the chart page →

5,326
geomapfishgeomapfish0.8.01 of 3See more

geomapfish geomapfish 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-111497.

Container imageDigestPackageFixed in
camptocamp/geomapfishapp-geoportal:latest3f916d5d2f62
brotli@1.1.0-2build2
nodejs@18.19.1+dfsg-6ubuntu5
no fix listed
no fix listed

Open the chart page →

8,072

Container images carrying it

2,195 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
antiantiops/vscode-browser-docker:1.143.1cc26f69360f9
brotli@1.1.0-2build2
no fix listed
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
anujdatar/cups:25.07.01685df04a643b
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/activemq-artemis:2.44.00305c26f19ed
brotli@1.1.0-2build2
no fix listed
1
apache/activemq-artemis:2.37.0bae523439ee3
brotli@1.1.0-2build2
no fix listed
1
apache/airflow:2.8.4-python3.964e58748b6b9
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/airflow:2.8.1e5560ad0b86e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/answer:2.0.30863470d8293
brotli@1.2.0-r1
1.2.1-r0
1
apache/camel-k:2.11.0d173e7efe258
brotli@1.2.0-3build1
no fix listed
1
apache/druid:37.0.00116fb802786
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/druid:29.0.10cef139b6bf1
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/druid:38.0.04156a8ca87b8
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
brotli@1.0.9-2build6
no fix listed
1
apache/hertzbeat:1.8.075d48a62748f
brotli@1.1.0-2build2
no fix listed
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
brotli@1.1.0-2build2
no fix listed
1
apache/james:distributed-3.7.2660c0fa12ec2
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apache/kafka:4.3.2852a0d49fc4e
brotli@1.2.0-r1
1.2.1-r0
1
apache/nifi-registry:1.27.063b8e3e40742
brotli@1.0.9-2build6
no fix listed
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
brotli@1.0.9-2build6
no fix listed
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apachepulsar/pulsar:5.0.07222f3199a0b
brotli@1.2.0-r1
1.2.1-r0
1
apachepulsar/pulsar:3.0.79c9947de139d
brotli@1.0.9-2build6
no fix listed
1
apachepulsar/pulsar:2.9.0d056c89b7131
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apachepulsar/pulsar:2.8.2d538416d5afe
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apache/ranger:2.7.076c176e8a0e4
brotli@1.0.9-2build6
no fix listed
1
apache/rocketmq:5.3.0434d8398f996
brotli@1.1.0-2build2
no fix listed
1
apache/rocketmq-exporter:0.0.2c8fb51195444
brotli@1.0.9-2build6
no fix listed
1
apache/skywalking-oap-server:9.2.0133d35d2c263
brotli@1.0.9-2build6
no fix listed
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apache/skywalking-ui:9.2.0295f1dc87d98
brotli@1.0.9-2build6
no fix listed
1
apache/skywalking-ui:8.9.180530f0308a5
brotli@1.0.7-6ubuntu0.1
no fix listed
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
brotli@1.0.9
1.2.1
1
apache/superset:4.0.1ab9467fd712c
brotli@1.0.9-2+b6
brotli@1.0.9
1.0.9-2+deb12u1
1.2.1
1
apache/tika:2.9.2.1-fullae0b86d3c4d0
brotli@1.1.0-2build2
no fix listed
1
apache/tika:latest-fulld69fab827fa0
brotli@1.2.0-3build1
no fix listed
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
brotli@1.1.0-2+b7
brotli@1.1.0
1.1.0-2+deb13u1
1.2.1
1
appwrite/appwrite:2.5.000bf6b9a0be8
brotli@1.2.0-r1
1.2.1-r0
1
appwrite/appwrite:1.9.01aaa70127114
brotli@1.2.0-r0
1.2.1-r0
1
appwrite/new:1.2.74-self-hostedb16ee4e5c19c
brotli@1.1.0-2+b7
1.1.0-2+deb13u1
1
aquasec/tracee:0.24.1cfbbfee972e6
brotli@1.1.0-r2
1.1.1-r0
1
aquasec/trivy:0.74.062b1e65e8869
brotli@1.2.0-r1
1.2.1-r0
1
aquasec/trivy:0.76.1790fd66d1697
brotli@1.2.0-r1
1.2.1-r0
1
aquasec/trivy:0.69.3bcc376de8d77
brotli@1.2.0-r0
1.2.1-r0
1
arbuzov/claude-code-api:0.1.02d7dd8070610
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
arcadedata/arcadedb:26.10.27a498ebbbb9a
brotli@1.2.0-r1
1.2.1-r0
1
archivebox/archivebox:0.9.73d4720d86c0e9
brotli@1.1.0-2+b7
brotli@1.2.0
1.1.0-2+deb13u1
1.2.1
1
aristidetm/basic-notebook:3.6.5469dbc951224
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
brotli@1.0.9-2+b6
1.0.9-2+deb12u1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.