Is plantuml-server affected by CVE-2026-111497 (Node2Shell/HTTP2Shell)?

asked 11 hours ago in Question / help by anonymous

The Docker image `plantuml/plantuml-server:jetty` contains the following libraries affected by vulnerability CVE-2026-111497 (Node2Shell/HTTP2Shell). Is plantuml-server itself affected by this vulnerability?

* Java library brotli4j:1.23.0 – Fixed in 1.24.0

* shared library libbrotli1:1.1.0-2build2 – Fixed in 1.1.0-2ubuntu0.1

Your answer

Your name to display (optional):

Email me at this address if my answer is selected or commented on:

Privacy: Your email address will only be used for sending these notifications.

Anti-spam verification:

Please complete the anti-spam verification

[Antispam2 Feature: please please wait 1 or 2 minutes (this message will disappear) before pressing the button otherwise it will fail](--------)

To avoid this verification in future, please log in or register.

...

Is plantuml-server affected by CVE-2026-111497 (Node2Shell/HTTP2Shell)?

Your comment on this question:

Your answer

Related questions