CVE-2026-111497 - CVE Scans - 2026-11-13

Last scan: 2026-11-13T01:12:43Z

Go to the main page | Go to CVE index

Advisory: https://www.suse.com/security/cve/CVE-2026-111497.html

The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".

Image Release Binary/Package Dependency Patched version Severity Status Justification (for status not affected)
kubeovn/kube-ovn:v1.16.4 Harvester master libbrotli1 libbrotli1@1.1.0-2build2 1.1.0-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
rancher/mirrored-library-nginx:1.31.2-alpine Harvester master-head brotli-libs brotli-libs@1.2.0-r0 1.2.1-r0 CRITICAL not affected vulnerable code not in execute path
kubeovn/kube-ovn:v1.15.4 Harvester v1.8-head libbrotli1 libbrotli1@1.1.0-2build2 1.1.0-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
kubeovn/kube-ovn:v1.15.4 Harvester v1.8.2 libbrotli1 libbrotli1@1.1.0-2build2 1.1.0-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
kubeovn/kube-ovn:v1.16.2 Harvester v1.9-head libbrotli1 libbrotli1@1.1.0-2build2 1.1.0-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
kubeovn/kube-ovn:v1.16.2 Harvester v1.9.0 libbrotli1 libbrotli1@1.1.0-2build2 1.1.0-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
rancher/mirrored-grafana-grafana:11.5.5 Rancher Prime v2.12-head brotli-libs brotli-libs@1.1.0-r2 1.1.1-r0 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-grafana-grafana:11.5.5 Rancher Prime v2.12.15 brotli-libs brotli-libs@1.1.0-r2 1.1.1-r0 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-library-nginx:1.31.2-alpine Rancher Prime v2.15-head brotli-libs brotli-libs@1.2.0-r0 1.2.1-r0 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-library-nginx:1.31.2-alpine Rancher Prime v2.15.3 brotli-libs brotli-libs@1.2.0-r0 1.2.1-r0 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-library-nginx:1.31.2-alpine Rancher v2.15-head brotli-libs brotli-libs@1.2.0-r0 1.2.1-r0 CRITICAL not affected vulnerable code not in execute path
rancher/mirrored-library-nginx:1.31.2-alpine Rancher v2.15.3 brotli-libs brotli-libs@1.2.0-r0 1.2.1-r0 CRITICAL not affected vulnerable code not in execute path
alpine/k8s:1.36.2 SUSE AI latest brotli-libs brotli-libs@1.2.0-r1 1.2.1-r0 CRITICAL not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/codeserver-python:v1.11.0 SUSE AI latest Python Brotli@1.2.0 1.2.1 CRITICAL not affected vulnerable code not present
ghcr.io/kubeflow/kubeflow/notebook-servers/codeserver-python:v1.11.0 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not present
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-cuda-full:v1.11.0 SUSE AI latest Python Brotli@1.2.0 1.2.1 CRITICAL not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-cuda-full:v1.11.0 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-full:v1.11.0 SUSE AI latest Python Brotli@1.2.0 1.2.1 CRITICAL not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-full:v1.11.0 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-scipy:v1.11.0 SUSE AI latest Python Brotli@1.2.0 1.2.1 CRITICAL not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-scipy:v1.11.0 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-cuda-full:v1.11.0 SUSE AI latest Python Brotli@1.2.0 1.2.1 CRITICAL not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-cuda-full:v1.11.0 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-full:v1.11.0 SUSE AI latest Python Brotli@1.2.0 1.2.1 CRITICAL not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-full:v1.11.0 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/rstudio-tidyverse:v1.11.0 SUSE AI latest Python Brotli@1.2.0 1.2.1 CRITICAL not affected vulnerable code not in execute path
ghcr.io/kubeflow/kubeflow/notebook-servers/rstudio-tidyverse:v1.11.0 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
ghcr.io/kubeflow/trainer/mlx-runtime:v2.3.0 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
ghcr.io/kubeflow/trainer/torchtune-trainer:v2.3.0 SUSE AI latest Python Brotli@1.2.0 1.2.1 CRITICAL not affected vulnerable code cannot be controlled by adversary
kserve/huggingfaceserver:v0.21.0 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
kserve/huggingfaceserver:v0.21.0-gpu SUSE AI latest libbrotli1 libbrotli1@1.2.0-3build1 1.2.0-3ubuntu0.1 HIGH not affected vulnerable code not in execute path
kserve/pmmlserver:v0.21.0 SUSE AI latest libbrotli1 libbrotli1@1.1.0-2build2 1.1.0-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
nvcr.io/nvidia/tritonserver:23.05-py3 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not in execute path
seldonio/mlserver:1.7.1 SUSE AI latest Python Brotli@1.1.0 1.2.1 CRITICAL not affected vulnerable code not in execute path
tensorflow/tensorflow:2.21.0 SUSE AI latest libbrotli1 libbrotli1@1.0.9-2build6 1.0.9-2ubuntu0.1 HIGH not affected vulnerable code not in execute path