StackRadarChart IndexLive demo

CVE-2018-16840

Critical

Advisory

Published 31 Oct 2018In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.034; 88th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 10; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 10 images.

Affected package	Affected versions	Fixed in	Images
curlapk	7.59.0-r0, 7.60.0-r1, 7.61.0-r0	7.61.1-r1	10

OSV records: ALPINE-CVE-2018-16840

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

mattermost-team-editionmattermost

1 of 4 See more

mattermost-team-edition mattermost 6.6.106

1 of the 4 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
appropriate/curl :latest	c8bf5bbec639	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

1,475

mattermostphntom

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
appropriate/curl :latest	c8bf5bbec639	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

8,722

mattermost-enterprise-editionmattermost

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
appropriate/curl :latest	c8bf5bbec639	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

3,600

sshdwiremind

1 of 1 See more

sshd wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
wiremind/sshd :latest	b3d63ce7d198	curl@7.60.0-r1	7.61.1-r1

Open the chart page →

1,171

event-store-servicechoerodon

1 of 2 See more

event-store-service choerodon 0.8.0

1 of the 2 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
choerodon/event-store-service :0.8.0	3c94c97f6f69	curl@7.60.0-r1	7.61.1-r1

Open the chart page →

9,808

katafygiocloudnativeapp

1 of 1 See more

katafygio cloudnativeapp 0.4.0

1 of the 1 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
bpineau/katafygio :v0.7.1	76edd9d121b8	curl@7.60.0-r1	7.61.1-r1

Open the chart page →

893

openibancloudnativeapp

1 of 1 See more

openiban cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
fourcube/openiban :1.0.1	5091df635f7e	curl@7.61.0-r0	7.61.1-r1

Open the chart page →

922

1 of 7 See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
appropriate/curl :latest	c8bf5bbec639	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

11,174

ibm-microclimateibm-charts

2 of 8 See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	curl@7.59.0-r0	7.61.1-r1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

57,669

giteajenkins-x

1 of 3 See more

gitea jenkins-x 1.3.12

1 of the 3 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
gitea/gitea :1.4	146196cbc344	curl@7.60.0-r1	7.61.1-r1

Open the chart page →

2,407

jx-app-giteajenkins-x

1 of 3 See more

jx-app-gitea jenkins-x 0.0.2

1 of the 3 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
gitea/gitea :1.4	146196cbc344	curl@7.60.0-r1	7.61.1-r1

Open the chart page →

2,407

knative-buildjenkins-x

1 of 1 See more

knative-build jenkins-x 0.1.19

1 of the 1 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
rawlingsj/build-controller :upstream3	06dd328e3d79	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

533

metricsjenkins-x

1 of 9 See more

metrics jenkins-x 0.0.6

1 of the 9 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
appropriate/curl :latest	c8bf5bbec639	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

551

influxdblsst-sqre

1 of 2 See more

influxdb lsst-sqre 3.1.1

1 of the 2 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
appropriate/curl :latest	c8bf5bbec639	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

758

sasquatchlsst-sqre

1 of 6 See more

sasquatch lsst-sqre 0.1.13

1 of the 6 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
appropriate/curl :latest	c8bf5bbec639	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

9,332

mattermost-team-editionmattermost-team-edition

1 of 4 See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
appropriate/curl :latest	c8bf5bbec639	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

4,089

mattermost-team-editionopenshift

1 of 4 See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
appropriate/curl :latest	c8bf5bbec639	curl@7.59.0-r0	7.61.1-r1

Open the chart page →

4,089

1 of 7 See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
pstauffer/curl :latest	2663156457ab	curl@7.60.0-r1	7.61.1-r1

Open the chart page →

20,462

istio-bookinforgnu

1 of 7 See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2018-16840.

Container image	Digest	Package	Fixed in
pstauffer/curl :latest	2663156457ab	curl@7.60.0-r1	7.61.1-r1

Open the chart page →

20,462

Container images carrying it

10 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
appropriate/curl :latest	c8bf5bbec639	curl@7.59.0-r0	7.61.1-r1	9
gitea/gitea :1.4	146196cbc344	curl@7.60.0-r1	7.61.1-r1	2
pstauffer/curl :latest	2663156457ab	curl@7.60.0-r1	7.61.1-r1	2
bpineau/katafygio :v0.7.1	76edd9d121b8	curl@7.60.0-r1	7.61.1-r1	1
choerodon/event-store-service :0.8.0	3c94c97f6f69	curl@7.60.0-r1	7.61.1-r1	1
fourcube/openiban :1.0.1	5091df635f7e	curl@7.61.0-r0	7.61.1-r1	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	curl@7.59.0-r0	7.61.1-r1	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	curl@7.59.0-r0	7.61.1-r1	1
rawlingsj/build-controller :upstream3	06dd328e3d79	curl@7.59.0-r0	7.61.1-r1	1
wiremind/sshd :latest	b3d63ce7d198	curl@7.60.0-r1	7.61.1-r1	1