From 38baf4b543d0f1f80b6e9167c741d861fb67b586 Mon Sep 17 00:00:00 2001
From: felhom security watch <monitoring@felhom.eu>
Date: Sat, 31 Oct 2026 03:44:22 +0000
Subject: [PATCH] security-watch: memory of 2026-10-31 (R-1303). Docs only.

---
 documentation/security-watch/state.json | 75 ++++++++++++++++---------
 1 file changed, 49 insertions(+), 26 deletions(-)

diff --git a/documentation/security-watch/state.json b/documentation/security-watch/state.json
index 6b41027f..bbd0fa1d 100644
--- a/documentation/security-watch/state.json
+++ b/documentation/security-watch/state.json
@@ -1935,16 +1935,22 @@
    "last_mailed": "2026-10-28",
    "program": "rommapp/romm 5.4.0 (arcade-system/romm.yaml)",
    "summary": "Node.js 24.18.1 inside the image: Brotli decoder out-of-bounds write (HTTP2Shell): a crafted compressed body can run code in the process"
+  },
+  "traefik|release:traefik/traefik@v3.7.17": {
+   "first": "2026-10-31",
+   "last_mailed": "2026-10-31",
+   "program": "traefik v3.7.16 (controller infra)",
+   "summary": "[security]  Point security announcements to GitHub advisories ( #14099   @nmengin )"
   }
  },
  "failures": {
   "registry:docker.io": {
    "mailed": true,
-   "streak": 4
+   "streak": 5
   },
   "runtime": {
    "mailed": true,
-   "streak": 3
+   "streak": 4
   }
  },
  "runtime_cache": {
@@ -1986,17 +1992,6 @@
    "python": null,
    "unchecked": []
   },
-  "sha256:04a67669899e825ae87afcdf27fd28f98b554af40b05294fea8bf00fb5a6a3d7": {
-   "apk": {},
-   "brotli": null,
-   "brotlicffi": null,
-   "digest": "sha256:21f242d85a68537aa510bb8626fa6ef9c879732ad2c916ce5905ee10f1206b93",
-   "dpkg": {},
-   "env": {},
-   "node": "26.12.1",
-   "python": null,
-   "unchecked": []
-  },
   "sha256:084b3b2ab1d0ef930660727259546a241f2bdf67c9ed085d54bf1486a6887c9b": {
    "apk": {
     "brotli-libs": "1.2.1-r0"
@@ -2456,6 +2451,19 @@
    "python": null,
    "unchecked": []
   },
+  "sha256:386c962ee6e260e3a5656b25df2ed056bcc9b6410e197d075f9547fd14c23bca": {
+   "apk": {
+    "brotli-libs": "1.2.1-r0"
+   },
+   "brotli": null,
+   "brotlicffi": null,
+   "digest": "sha256:ee40ad01f650ef45d07b07eb149258104fbd07c23f6300eb9ab07227e536704f",
+   "dpkg": {},
+   "env": {},
+   "node": null,
+   "python": null,
+   "unchecked": []
+  },
   "sha256:38dc2727bfcfd5ede290f8ada114fc90368146f265ae4701ddddbcbe2a44ee52": {
    "apk": {
     "brotli-libs": "1.1.0-r2"
@@ -2564,19 +2572,6 @@
    "python": null,
    "unchecked": []
   },
-  "sha256:48e36b608b461273b9dae857725cd0561a127f2c694b687318f6d0c5ce63e5c9": {
-   "apk": {
-    "brotli-libs": "1.2.0-r1"
-   },
-   "brotli": null,
-   "brotlicffi": null,
-   "digest": "sha256:a674ae620ca7ce1246b377bcac13a7500567196cf2207059e68146fa4dc169f7",
-   "dpkg": {},
-   "env": {},
-   "node": null,
-   "python": null,
-   "unchecked": []
-  },
   "sha256:4b3d9475d65571d28cbb19544d3820ec2945e4c8b2f18279394282b8dc3a592e": {
    "apk": {},
    "brotli": null,
@@ -3118,6 +3113,23 @@
    "python": null,
    "unchecked": []
   },
+  "sha256:90b7a39bdfd77286448e4a79eef393cf1a6700da2a601da1ae89234abe70efe8": {
+   "apk": {},
+   "brotli": null,
+   "brotlicffi": null,
+   "digest": "sha256:21486bcf50f454338fa38f1615571390da95e0b2bf0ddeb722c9af80a548c862",
+   "dpkg": {
+    "libbrotli1": "1.1.0-2+deb13u1",
+    "python3": "3.13.5-1",
+    "python3.13": "3.13.5-2+deb13u5"
+   },
+   "env": {
+    "PYTHON_VERSION": "3.13.18"
+   },
+   "node": null,
+   "python": "3.13.18",
+   "unchecked": []
+  },
   "sha256:92bfd78d731e254ba64f62b77b0696add6447a33642ee5feda106a26b285aa7f": {
    "apk": {
     "brotli-libs": "1.2.0-r1",
@@ -3487,6 +3499,17 @@
    "python": null,
    "unchecked": []
   },
+  "sha256:ba97c3cb4f9cf979163f64855b7a4d5ecb36445a9b32ba50ac4f3c4fccd6f930": {
+   "apk": {},
+   "brotli": null,
+   "brotlicffi": null,
+   "digest": "sha256:88991c3a845e395340a4dd2118015516ddd0544867cb19733b0eba373cb7a217",
+   "dpkg": {},
+   "env": {},
+   "node": "26.12.1",
+   "python": null,
+   "unchecked": []
+  },
   "sha256:bc5a392672c1ec8823c50b61f3bd4b7e5acc34fcbb8477862577b3af1c633875": {
    "apk": {},
    "brotli": null,