StackRadar

CVE-2026-14257

High

Advisory

Published 23 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
956
of 17,787 indexed, latest versions
Container images
1,000
deployed by those charts
Fix available
2 of 3
affected packages

brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash

Carried by container images the latest versions of 956 of 17,787 indexed charts deploy, on 1,000 images.

Affected packageAffected versionsFixed inImages
brace-expansionnpm1.1.1, 1.1.2, 1.1.4, 1.1.6+19 more1.1.17, 2.1.3, 5.0.81,000
node-brace-expansiondeb1.1.8-1, 1.1.11-1, 2.0.1+~1.1.0-1, 2.0.1+~1.1.0-2no fix listed7
npmapk11.17.0-r012.0.1-r21
OSV records
CGA-6hf9-6j4p-2q3vDEBIAN-CVE-2026-14257GHSA-mh99-v99m-4gvgUBUNTU-CVE-2026-14257
Also known as
CGA-mwqw-7q2r-9q5w

Charts affected

956 by stars
ChartLatestAffected imagesRadar Score
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
brace-expansion@1.1.11
1.1.17

Open the chart page →

4,455
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
brace-expansion@1.1.11
1.1.17

Open the chart page →

22,916
bluerange-mosquittobluerangeOfficialVerified publisher1.0.41 of 1See more

bluerange-mosquitto bluerange 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
bluerange/bluerange-mosquitto:25f1bfbba84832
brace-expansion@1.1.11
1.1.17

Open the chart page →

1,168
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
brace-expansion@1.1.11
1.1.17

Open the chart page →

18,998
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
brace-expansion@1.1.11
1.1.17
sysnet4admin/colosseum-prm:log5802bfcd7fed
brace-expansion@2.0.1
2.1.3

Open the chart page →

26,266
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
brace-expansion@2.0.1
2.1.3

Open the chart page →

3,072
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
brace-expansion@1.1.8
1.1.17

Open the chart page →

4,069
rtorrent-floodbryanalves0.5.01 of 1See more

rtorrent-flood bryanalves 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
jesec/flood:4.7.03d1d0bec117a
brace-expansion@1.1.11
1.1.17

Open the chart page →

1,477
node-appbryopsida0.5.12 of 2See more

node-app bryopsida 0.5.1

2 of the 2 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
brace-expansion@5.0.7
5.0.8
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
brace-expansion@2.0.1
2.1.3

Open the chart page →

14,446
openmctbryopsida0.1.11 of 1See more

openmct bryopsida 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/openmct:main38b6a50a62b2
brace-expansion@1.1.11
1.1.17

Open the chart page →

951
syslog-portalbryopsida0.3.11 of 1See more

syslog-portal bryopsida 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
brace-expansion@2.0.1
2.1.3

Open the chart page →

1,306
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
brace-expansion@1.1.11
1.1.17

Open the chart page →

13,363
cross-seedcfi20176.13.61 of 1See more

cross-seed cfi2017 6.13.6

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
brace-expansion@2.0.1
2.1.3

Open the chart page →

1,339
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
brace-expansion@2.0.1
2.1.3

Open the chart page →

1,339
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
obolnetwork/charon-dkg-sidecar:maine263be0a7440
brace-expansion@1.1.11
1.1.17

Open the chart page →

7,457
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
brace-expansion@2.0.1
2.1.3

Open the chart page →

4,083
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
brace-expansion@2.0.1
2.1.3

Open the chart page →

1,722
ddb-proxycharts-derwitt-devVerified publisher1.3.01 of 1See more

ddb-proxy charts-derwitt-dev 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/mrprimate/ddb-proxy:0.0.258dc2d7fb460f
brace-expansion@1.1.11
1.1.17

Open the chart page →

812
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
brace-expansion@1.1.1
node-brace-expansion@1.1.8-1
1.1.17
no fix listed

Open the chart page →

12,804
servicechart-serviceVerified publisher0.0.41 of 1See more

service chart-service 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
punkerside/noroot:v0.0.7be20c81d6ca1
brace-expansion@2.0.1
2.1.3

Open the chart page →

930
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
brace-expansion@2.0.1
2.1.3

Open the chart page →

1,977
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
brace-expansion@2.0.1
2.1.3

Open the chart page →

1,722
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
brace-expansion@2.0.1
2.1.3
countly/frontend:25.05.42acbc11499b6
brace-expansion@1.1.11
1.1.17

Open the chart page →

7,295
mcp-for-argocdchristianhuthVerified publisher2.0.01 of 1See more

mcp-for-argocd christianhuth 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
brace-expansion@2.0.1
2.1.3

Open the chart page →

1,958
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
brace-expansion@2.0.1
2.1.3

Open the chart page →

5,550
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
brace-expansion@1.1.11
1.1.17

Open the chart page →

2,761
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
brace-expansion@1.1.11
1.1.17

Open the chart page →

29,922
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
brace-expansion@1.1.8
1.1.17

Open the chart page →

27,434
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
brace-expansion@1.1.8
1.1.17

Open the chart page →

34,014
hubotcloudnativeapp0.0.11 of 1See more

hubot cloudnativeapp 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
minddocdev/hubot:0.1.96c60b11a4fa7
brace-expansion@1.1.11
1.1.17

Open the chart page →

2,580
kube-slackcloudnativeapp1.0.01 of 1See more

kube-slack cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
willwill/kube-slack:v4.1.1d443017aae98
brace-expansion@1.1.11
1.1.17

Open the chart page →

1,937
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
brace-expansion@1.1.11
1.1.17

Open the chart page →

4,790
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
brace-expansion@1.1.8
1.1.17

Open the chart page →

77,798
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
brace-expansion@1.1.11
1.1.17

Open the chart page →

25,454
robot-shopcloud-native-toolkit1.1.13 of 12See more

robot-shop cloud-native-toolkit 1.1.1

3 of the 12 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
robotshop/rs-cart:latest388349d5cb3c
brace-expansion@1.1.11
1.1.17
robotshop/rs-catalogue:latestd545747c1b97
brace-expansion@1.1.11
1.1.17
robotshop/rs-user:latestea509182c180
brace-expansion@1.1.11
1.1.17

Open the chart page →

29,594
setup-jobcloud-native-toolkit0.3.01 of 2See more

setup-job cloud-native-toolkit 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/nodejs:latest01c3b7acb301
brace-expansion@1.1.11
1.1.17

Open the chart page →

2,792
slack-notificationscloud-native-toolkit0.1.71 of 1See more

slack-notifications cloud-native-toolkit 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/slack-notifications:latest041df93e2bac
brace-expansion@1.1.11
1.1.17

Open the chart page →

1,545
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad3 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

3 of the 6 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
brace-expansion@2.0.1
2.1.3
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
brace-expansion@2.0.2
2.1.3
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
brace-expansion@2.0.2
2.1.3

Open the chart page →

18,256
cloudvaultcloudvaultOfficialVerified publisher1.0.21 of 3See more

cloudvault cloudvault 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
shyamkrishna21/cloudvault:latestaf2785f5bb71
brace-expansion@2.0.2
2.1.3

Open the chart page →

2,185
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
brace-expansion@1.1.8
1.1.17

Open the chart page →

70,968
stocksalescluster-deploy0.1.31 of 1See more

stocksales cluster-deploy 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
foggbh/stocky:latest8b7a2e5ecf4e
brace-expansion@5.0.7
5.0.8

Open the chart page →

408
clusterplexclusterplexVerified publisher1.1.101 of 3See more

clusterplex clusterplex 1.1.10

1 of the 3 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
brace-expansion@2.0.2
2.1.3

Open the chart page →

3,918
maildevcnieg1.1.11 of 1See more

maildev cnieg 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
cnieg/maildev:v1.1.998ee05668915
brace-expansion@1.1.11
1.1.17

Open the chart page →

2,449
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
brace-expansion@2.0.1
node-brace-expansion@2.0.1+~1.1.0-1
2.1.3
no fix listed

Open the chart page →

13,286
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
brace-expansion@2.0.1
2.1.3

Open the chart page →

5,142
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
brace-expansion@2.0.1
2.1.3

Open the chart page →

5,142
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
brace-expansion@2.0.1
2.1.3

Open the chart page →

5,142
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
brace-expansion@1.1.11
1.1.17

Open the chart page →

12,906
containers-security-chartscontainers-security0.1.02 of 7See more

containers-security-charts containers-security 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
coldatom/containers-security-api:latesteae9e82da080
brace-expansion@2.0.1
2.1.3
coldatom/containers-security-front:latest7c2fbbb41bcf
brace-expansion@2.0.1
2.1.3

Open the chart page →

9,146
conversor-temperaturaconversor-temperaturaVerified publisher0.1.01 of 1See more

conversor-temperatura conversor-temperatura 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-14257.

Container imageDigestPackageFixed in
felipecs8/conversor-temperatura:v1f945423be36d
brace-expansion@2.0.1
2.1.3

Open the chart page →

1,527

Container images carrying it

1,000 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
brace-expansion@2.0.2
2.1.3
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
brace-expansion@2.0.1
2.1.3
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
brace-expansion@2.0.1
2.1.3
1
ghcr.io/kikplate/kikplate-web:main34bbb61e8e42
brace-expansion@2.0.2
2.1.3
1
ghcr.io/kubedb/mongo-gui:latestee0354b7a57a
brace-expansion@2.0.1
2.1.3
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
brace-expansion@2.0.1
2.1.3
1
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
brace-expansion@2.0.1
2.1.3
1
ghcr.io/leoquote/mergeable:latest451706815103
brace-expansion@1.1.11
1.1.17
1
ghcr.io/leprechaun/lgtv2mqtt:latestac2e11c41ffb
brace-expansion@2.0.1
2.1.3
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
brace-expansion@5.0.3
5.0.8
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
brace-expansion@2.0.2
2.1.3
1
ghcr.io/linuxserver/pairdrop:version-v1.11.23279d2d986c0
brace-expansion@2.0.2
2.1.3
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
brace-expansion@1.1.11
1.1.17
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
brace-expansion@1.1.11
1.1.17
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
brace-expansion@2.0.2
2.1.3
1
ghcr.io/logtide-dev/logtide-backend:1.0.265463e02f887
brace-expansion@2.1.1
2.1.3
1
ghcr.io/logtide-dev/logtide-frontend:1.0.22a7da1451f86
brace-expansion@2.1.1
2.1.3
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
brace-expansion@2.0.1
2.1.3
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
brace-expansion@2.0.1
2.1.3
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
brace-expansion@2.0.1
2.1.3
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
brace-expansion@1.1.12
1.1.17
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
brace-expansion@1.1.11
1.1.17
1
ghcr.io/marcuwynu23/express-typescript-sample:latest9ef671b78ea8
brace-expansion@2.0.2
2.1.3
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
brace-expansion@1.1.11
1.1.17
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
brace-expansion@2.0.1
2.1.3
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
brace-expansion@5.0.6
5.0.8
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
brace-expansion@1.1.11
1.1.17
1
ghcr.io/michaelhaigh/pacman:latestb0931b1f085d
brace-expansion@2.0.2
2.1.3
1
ghcr.io/microboxlabs/miot-dashboard-server:latest19b910920ab1
brace-expansion@5.0.7
5.0.8
1
ghcr.io/microboxlabs/miot-docs:latest0307d2fd9f5c
brace-expansion@2.0.2
2.1.3
1
ghcr.io/microboxlabs/miot-docs:lateste09d92c61f43
brace-expansion@2.0.2
2.1.3
1
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
brace-expansion@1.1.11
1.1.17
1
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
brace-expansion@1.1.11
1.1.17
1
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
brace-expansion@1.1.11
1.1.17
1
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
brace-expansion@2.0.1
2.1.3
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
brace-expansion@5.0.7
5.0.8
1
ghcr.io/mmontes11/iot-back:v3.11.096683c54ae65
brace-expansion@1.1.11
1.1.17
1
ghcr.io/mmontes11/iot-biot:v3.11.033f7976b26a8
brace-expansion@1.1.11
1.1.17
1
ghcr.io/mmontes11/iot-thing:v3.11.0542e91e8499c
brace-expansion@1.1.11
1.1.17
1
ghcr.io/mmontes11/iot-worker:v3.11.0491bb243f555
brace-expansion@1.1.11
1.1.17
1
ghcr.io/mrprimate/ddb-proxy:0.0.258dc2d7fb460f
brace-expansion@1.1.11
1.1.17
1
ghcr.io/multica-ai/multica-web:v0.4.43fc937fbbf8e5
brace-expansion@2.0.2
2.1.3
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
brace-expansion@2.0.2
2.1.3
1
ghcr.io/openccu/openccu:3.89.9.20260914eaeefd355dca
brace-expansion@2.0.2
2.1.3
1
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
brace-expansion@5.0.6
5.0.8
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
brace-expansion@5.0.6
5.0.8
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
brace-expansion@2.0.1
2.1.3
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
brace-expansion@2.0.1
2.1.3
1
ghcr.io/open-telemetry/demo:3.0.0-frontend9505e349e140
brace-expansion@2.1.1
2.1.3
1
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
brace-expansion@2.0.1
2.1.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.