Anchore Enterprise UI Release Notes - Version 6.3.1
Anchore Enterprise UI v6.3.1
Anchore Enterprise UI v6.3.1 is a security release of the Enterprise UI. It addresses CVE-2026-111497 and updates the libraries listed below to versions that address published security advisories. It contains no functional changes.
Only the UI image changes in this release. The Enterprise service remains at v6.3.0, and no database upgrade is
required. To upgrade, change the anchore/enterprise-ui image tag to v6.3.1.
UI Updates
UI Fixes
- Security - Base Image Update for CVE-2026-111497 - Updated the container base image so the Brotli decompression library used by the Node.js runtime includes the fix for CVE-2026-111497, an out-of-bounds write in the Brotli decoder that could be triggered by malformed compressed data.
- Security - npm CLI Removed from the Container Image - The container image no longer includes the npm command-line tool and its bundled modules, which the application never used at runtime. This removes those modules from vulnerability scans of the image.
- Security - DOMPurify Update - Updated the DOMPurify sanitization library to 3.4.17 to address GHSA-cg2g-xh64-v4q7, GHSA-mrv2-3pqr-j5jr, GHSA-c6gr-qvv4-5v3f, GHSA-6688-9rhm-gjv2, and GHSA-p98j-92pf-mc4p.
- Security - Dependency Updates - Updated body-parser, engine.io, fast-uri, follow-redirects, markdown-it, multer, qs, source-map-js, undici, and zod to versions that address published security advisories.
Recommended Component Versions
| Component | Supported Version | Helm Chart Version | Additional Info |
|---|---|---|---|
| Enterprise | v6.3.0 | v4.5.1 | With Syft v1.55.0 and Grype v0.121.0 |
| Enterprise UI | v6.3.1 | ||
| AnchoreCTL | v6.3.1 | Deploying AnchoreCTL | |
| Anchore ECS Inventory | v1.5.3 | v0.1.3 | https://github.com/anchore/ecs-inventory |
| Anchore Kubernetes Inventory | v1.8.7 | v0.7.3 | https://github.com/anchore/k8s-inventory |
| Kubernetes Admission Controller | v0.8.8 | v0.9.4 | https://github.com/anchore/kubernetes-admission-controller |
| Jenkins Plugin | v3.3.0 | https://plugins.jenkins.io/anchore-container-scanner | |
| Harbor Scanner Adapter | v1.5.6 | https://github.com/anchore/harbor-scanner-adapter |
Anchore Helm Chart can be found at https://github.com/anchore/anchore-charts
Syft Release Notes can be found at https://github.com/anchore/syft/releases/tag/v1.55.0
Grype Release Notes can be found at https://github.com/anchore/grype/releases/tag/v0.121.0
Last modified November 5, 2026