StackRadar

CVE-2026-13149

High

Advisory

Published 30 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
923
of 17,787 indexed, latest versions
Container images
966
deployed by those charts
Fix available
1 of 2
affected packages

brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

Carried by container images the latest versions of 923 of 17,787 indexed charts deploy, on 966 images.

Affected packageAffected versionsFixed inImages
node-brace-expansiondeb1.1.8-1, 1.1.11-1, 2.0.1+~1.1.0-1, 2.0.1+~1.1.0-2no fix listed7
brace-expansionnpm1.1.1, 1.1.2, 1.1.4, 1.1.6+17 more1.1.16, 2.1.2, 5.0.7966
OSV records
DEBIAN-CVE-2026-13149UBUNTU-CVE-2026-13149GHSA-3jxr-9vmj-r5cp

Charts affected

923 by stars
ChartLatestAffected imagesRadar Score
blockscoutparadeum-teamVerified publisher0.1.51 of 1See more

blockscout paradeum-team 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
quay.io/netwarps/blockscoutdigest-pinnedbecd3e39360a
brace-expansion@1.1.11
1.1.16

Open the chart page →

3,448
walletconnect-relayparadeum-teamVerified publisher0.1.21 of 1See more

walletconnect-relay paradeum-team 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
quay.io/netwarps/walletconnect-relay:v2.1.3-rc.15d90b9c193e0
brace-expansion@2.0.1
2.1.2

Open the chart page →

1,243
pairdroppascaliskeVerified publisher2.0.01 of 1See more

pairdrop pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pairdrop:version-v1.11.23279d2d986c0
brace-expansion@2.0.2
2.1.2

Open the chart page →

664
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
brace-expansion@1.1.11
1.1.16

Open the chart page →

6,524
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
library/node:208f693eaa7e0a
brace-expansion@2.0.1
2.1.2

Open the chart page →

25,626
podscopepodscope0.2.31 of 1See more

podscope podscope 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
brace-expansion@2.0.1
2.1.2

Open the chart page →

1,485
practica-helmpractica-helm0.1.02 of 7See more

practica-helm practica-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
brace-expansion@1.1.11
1.1.16
slagattollas/weatherservice-practica:latest68e7f56393fc
brace-expansion@1.1.11
1.1.16

Open the chart page →

28,495
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
brace-expansion@2.0.1
2.1.2

Open the chart page →

4,614
pumperlypumperlyVerified publisher0.1.21 of 3See more

pumperly pumperly 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
drumsergio/pumperly:1.4.885bbc3915e9e
brace-expansion@2.0.2
2.1.2

Open the chart page →

2,853
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
brace-expansion@1.1.11
1.1.16

Open the chart page →

2,969
radar-self-enrolment-uiradar-baseVerified publisher0.4.21 of 1See more

radar-self-enrolment-ui radar-base 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-self-enrolment-ui:0.1.0b9a7cd3cc099
brace-expansion@2.0.2
2.1.2

Open the chart page →

1,506
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
brace-expansion@1.1.11
1.1.16

Open the chart page →

15,583
readability-js-serverreadability-js-server0.1.01 of 1See more

readability-js-server readability-js-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
phpdockerio/readability-js-server:1.8.0ea8354b42600
brace-expansion@2.0.2
2.1.2

Open the chart page →

1,859
recipe-apprecipe-app0.1.02 of 2See more

recipe-app recipe-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
brace-expansion@2.0.1
2.1.2
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
brace-expansion@2.0.1
2.1.2

Open the chart page →

3,271
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
sharanalwar/redchef-frontend:latest5e82950b16b7
brace-expansion@1.1.11
1.1.16

Open the chart page →

4,658
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
brace-expansion@1.1.8
1.1.16

Open the chart page →

29,226
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
brace-expansion@2.0.2
2.1.2

Open the chart page →

1,039
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
brace-expansion@1.1.11
1.1.16

Open the chart page →

1,884
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
brace-expansion@1.1.11
1.1.16

Open the chart page →

5,928
laravel-workerrenoki-co1.1.01 of 1See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
brace-expansion@1.1.11
1.1.16

Open the chart page →

5,687
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
brace-expansion@1.1.11
1.1.16

Open the chart page →

6,794
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
brace-expansion@2.0.2
2.1.2

Open the chart page →

4,546
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
brace-expansion@1.1.11
1.1.16

Open the chart page →

20,480
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.14.0eb0f1a725ca8
brace-expansion@1.1.11
1.1.16

Open the chart page →

20,480
jsonplaceholderrgnu1.0.01 of 1See more

jsonplaceholder rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
svenwal/jsonplaceholder:latestba2f285af432
brace-expansion@1.1.11
1.1.16

Open the chart page →

1,547
rhbk-neurofacerhbk-neurofaceVerified publisher1.0.01 of 4See more

rhbk-neuroface rhbk-neuroface 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
brace-expansion@2.0.2
2.1.2

Open the chart page →

3,837
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
brace-expansion@2.0.1
2.1.2

Open the chart page →

6,026
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
brace-expansion@1.1.11
1.1.16

Open the chart page →

5,215
jsonvisiorlex0.1.01 of 1See more

jsonvisio rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
rlex/jsonvisio:1.9.5cd50ff65118e
brace-expansion@1.1.11
1.1.16

Open the chart page →

2,100
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
brace-expansion@2.0.1
2.1.2

Open the chart page →

15,623
networking-toolboxrm3lVerified publisher0.1.01 of 1See more

networking-toolbox rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
lissy93/networking-toolbox:latest700862839553
brace-expansion@2.0.2
2.1.2

Open the chart page →

823
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
brace-expansion@2.0.2
2.1.2

Open the chart page →

8,798
wg-easyrm3lVerified publisher0.2.01 of 1See more

wg-easy rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
brace-expansion@2.0.1
2.1.2

Open the chart page →

1,158
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
brace-expansion@1.1.12
1.1.16

Open the chart page →

66,542
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
brace-expansion@1.1.11
1.1.16

Open the chart page →

11,957
routr-connectroutr0.4.31 of 10See more

routr-connect routr 0.4.3

1 of the 10 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
fonoster/routr-pgdata-migrations:2.13.6c7b1dba81eb3
brace-expansion@2.0.1
2.1.2

Open the chart page →

11,021
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
brace-expansion@2.0.1
2.1.2

Open the chart page →

5,338
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
brace-expansion@2.0.1
2.1.2

Open the chart page →

4,537
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
brace-expansion@2.0.1
2.1.2

Open the chart page →

1,722
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
brace-expansion@1.1.11
1.1.16

Open the chart page →

7,429
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
brace-expansion@1.1.15
1.1.16

Open the chart page →

29,870
your-spotifyrubxkubeVerified publisher1.0.12 of 3See more

your-spotify rubxkube 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
yooooomi/your_spotify_client:1.20.0e4da90a0634c
brace-expansion@5.0.4
5.0.7
yooooomi/your_spotify_server:1.20.0624ea009f2ef
brace-expansion@5.0.4
5.0.7

Open the chart page →

4,966
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
brace-expansion@5.0.6
5.0.7

Open the chart page →

5,833
s3-browsers3-browser0.4.11 of 1See more

s3-browser s3-browser 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
registry.gitlab.com/evolves-fr/s3-browser:0.4.1c350c941fe7b
brace-expansion@2.0.2
2.1.2

Open the chart page →

576
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
brace-expansion@1.1.11
1.1.16
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
brace-expansion@1.1.11
1.1.16

Open the chart page →

17,736
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
brace-expansion@1.1.11
1.1.16

Open the chart page →

14,792
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
library/mongo-express:1.0.2-20-alpine3.191aae00775251
brace-expansion@2.0.1
2.1.2

Open the chart page →

2,348
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
brace-expansion@1.1.11
1.1.16

Open the chart page →

4,744
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
brace-expansion@2.0.2
2.1.2

Open the chart page →

4,559
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-13149.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
brace-expansion@2.0.1
2.1.2

Open the chart page →

5,582

Container images carrying it

966 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/gethomepage/homepage:v2.3.0f82027665453
brace-expansion@2.0.2
2.1.2
1
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
brace-expansion@2.0.1
2.1.2
1
ghcr.io/harish2k01/portfolio-tracker:0.1.056efa3085895
brace-expansion@5.0.5
5.0.7
1
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
brace-expansion@2.0.2
2.1.2
1
ghcr.io/homarr-labs/homarr:v1.77.11f5b892aeef4
brace-expansion@5.0.6
5.0.7
1
ghcr.io/homarr-labs/homarr:v1.77.0f23ad77a681b
brace-expansion@5.0.6
5.0.7
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
brace-expansion@2.0.1
2.1.2
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
brace-expansion@1.1.11
1.1.16
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
brace-expansion@2.0.1
2.1.2
1
ghcr.io/immich-app/immich-server:v3.2.12ab6a6273755
brace-expansion@5.0.6
5.0.7
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
brace-expansion@2.1.1
2.1.2
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
brace-expansion@2.0.2
2.1.2
1
ghcr.io/jeboehm/fetchmailmgr:0.3.2126c4691b28a4
brace-expansion@2.0.2
2.1.2
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
brace-expansion@2.0.2
2.1.2
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
brace-expansion@1.1.11
1.1.16
1
ghcr.io/jordan-dalby/bytestash:1.5.12eb4f736b8cd4
brace-expansion@2.0.2
2.1.2
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
brace-expansion@1.1.11
1.1.16
1
ghcr.io/k10app/basicuserservice:latest2ee057ad3bef
brace-expansion@1.1.11
1.1.16
1
ghcr.io/k10app/catalog:latest639c980be0f1
brace-expansion@1.1.11
1.1.16
1
ghcr.io/k10app/order:lateste1017d0dbd78
brace-expansion@2.0.1
2.1.2
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
brace-expansion@1.1.11
1.1.16
1
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
brace-expansion@2.0.1
2.1.2
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
brace-expansion@2.0.2
2.1.2
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
brace-expansion@2.0.1
2.1.2
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
brace-expansion@2.0.1
2.1.2
1
ghcr.io/kikplate/kikplate-web:main34bbb61e8e42
brace-expansion@2.0.2
2.1.2
1
ghcr.io/kubedb/mongo-gui:latestee0354b7a57a
brace-expansion@2.0.1
2.1.2
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
brace-expansion@2.0.1
2.1.2
1
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
brace-expansion@2.0.1
2.1.2
1
ghcr.io/leoquote/mergeable:latest451706815103
brace-expansion@1.1.11
1.1.16
1
ghcr.io/leprechaun/lgtv2mqtt:latestac2e11c41ffb
brace-expansion@2.0.1
2.1.2
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
brace-expansion@5.0.3
5.0.7
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
brace-expansion@2.0.2
2.1.2
1
ghcr.io/linuxserver/pairdrop:version-v1.11.23279d2d986c0
brace-expansion@2.0.2
2.1.2
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
brace-expansion@1.1.11
1.1.16
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
brace-expansion@1.1.11
1.1.16
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
brace-expansion@2.0.2
2.1.2
1
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
brace-expansion@2.1.1
2.1.2
1
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
brace-expansion@2.1.1
2.1.2
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
brace-expansion@2.0.1
2.1.2
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
brace-expansion@2.0.1
2.1.2
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
brace-expansion@2.0.1
2.1.2
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
brace-expansion@1.1.12
1.1.16
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
brace-expansion@1.1.11
1.1.16
1
ghcr.io/marcuwynu23/express-typescript-sample:latest9ef671b78ea8
brace-expansion@2.0.2
2.1.2
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
brace-expansion@1.1.11
1.1.16
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
brace-expansion@2.0.1
2.1.2
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
brace-expansion@5.0.6
5.0.7
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
brace-expansion@1.1.11
1.1.16
1
ghcr.io/michaelhaigh/pacman:latestb0931b1f085d
brace-expansion@2.0.2
2.1.2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.