EurtifactExploited-component bulletins

All bulletins

CVE-2026-111497 is actively exploited: 55 mirrored artifacts affected

Published 2026-11-02 · Updated 2026-11-04 09:03 UTC

Summary

CVE-2026-111497 is listed as actively exploited by ENISA EUVD (since 2026-10-27). Eurtifact's latest scans find it in 142 versions of 55 mirrored components.

A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Users need to update any Brotli libraries or binaries between 1.0.3 through 1.2.0 to the latest available version: 1.0.10 or 1.1.1 or 1.2.1.

EPSS
0.8264 (100th percentile), scored 2026-11-03
CVSS (highest reported)
8.1

Sources

Affected mirrored artifacts

ArtifactTypeVersionPackageInstalledFixedSeverity
docker.io/gitea/act_runner image 0.6.1 brotli-libs 1.2.0-r0 1.2.1-r0 Critical
docker.io/apache/activemq image 6.3.2 libbrotli1 1.2.0-3build1 1.2.0-3ubuntu0.1 High
docker.io/library/adminer image 6.1.1 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/adminer image 6.1.2 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/adminer image 6.2.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/adminer image 6.3.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/apache/airflow image 3.3.2 libbrotli1 1.0.9-2+b6 1.0.9-2+deb12u1 Critical
docker.io/library/caddy image 2.11.6 brotli-libs 1.2.0-r0 1.2.1-r0 Critical
docker.io/library/caddy image 2.11.7 brotli-libs 1.2.0-r0 1.2.1-r0 Critical
docker.io/library/clojure image temurin-25-tools-deps-1.12.6.1673-trixie-slim libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/hashicorp/consul image 2.0.4 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/hashicorp/consul image 2.1.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/couchdb image 3.5.3 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/curlimages/curl image 8.21.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/curlimages/curl image 8.22.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/curlimages/curl image 8.23.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/docker image 29.7.2 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/docker image 29.8.1 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/docker image 29.8.2 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/docker image 29.9.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/docker image 29.9.1 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/docker image 29.9.2 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/library/drupal image 11.2.14 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/library/drupal image 11.3 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/library/drupal image 11.4.10 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/library/drupal image 11.4.11 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/library/drupal image 11.4.7 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/library/drupal image 11.4.8 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/library/drupal image 11.4.9 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/library/eclipse-temurin image 21-jre libbrotli1 1.2.0-3build1 1.2.0-3ubuntu0.1 High
docker.io/library/eclipse-temurin image 26 libbrotli1 1.2.0-3build1 1.2.0-3ubuntu0.1 High
docker.io/library/elixir image 1.20.4 libbrotli-dev 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/library/elixir image 1.20.4 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/library/erlang image 29.1.2 libbrotli-dev 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/library/erlang image 29.1.2 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/falcosecurity/falco image 0.45.0 libbrotlicommon1 1.2.0-r5 1.2.0-r7 Critical
docker.io/falcosecurity/falco image 0.45.0 libbrotlidec1 1.2.0-r5 1.2.0-r7 Critical
docker.io/falcosecurity/falco image 0.45.1 libbrotlicommon1 1.2.0-r6 1.2.0-r7 Critical
docker.io/falcosecurity/falco image 0.45.1 libbrotlidec1 1.2.0-r6 1.2.0-r7 Critical
docker.io/falcosecurity/falco image 0.45.1 libbrotlienc1 1.2.0-r6 1.2.0-r7 Critical
docker.io/apache/flink image 2.3.0 libbrotli1 1.1.0-2build2 1.1.0-2ubuntu0.1 High
docker.io/fluent/fluent-bit image 5.1.2 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/fluent/fluent-bit image 5.1.3 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/fluent/fluent-bit image 5.1.4 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/fluent/fluent-bit image 5.1.5 libbrotli1 1.1.0-2+b7 1.1.0-2+deb13u1 Critical
docker.io/alpine/git image 2.54.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/gitea/gitea image 1.27.3 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/gitea/gitea image 28.0.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/gitea/gitea image 28.1.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical
docker.io/gitea/gitea image 28.2.0 brotli-libs 1.2.0-r1 1.2.1-r0 Critical

Showing 50 of 142 affected versions.

Fixed versions

Cyber Resilience Act, Article 14

Since 11 September 2026, manufacturers in scope of the Cyber Resilience Act must notify an actively exploited vulnerability in their product under Article 14: an early warning within 24 hours of becoming aware, a notification within 72 hours, and a final report within 14 days of a corrective measure being available. Assess whether this finding affects a product you place on the EU market; a CVE in a component is not automatically an exploitable vulnerability in your product.

Data as of 2026-11-04 09:03 UTC. Versions are those in Eurtifact's shared mirror catalogue; findings come from the latest completed scan of each version.

Eurtifact records when a component entered a build, who approved it and which releases carry it — for the images and Maven packages it mirrors. How this relates to the CRA

Get these by email: one message per new bulletin, unsubscribe in every message.