CVE-2024-0853
MediumAdvisory
Published 3 Feb 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.3
- base score, highest
- EPSS
- 0.011
- 64th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 201
- of 17,787 indexed, latest versions
- Container images
- 189
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
curl-8.6.0-1.1 on GA media
Carried by container images the latest versions of 201 of 17,787 indexed charts deploy, on 189 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curlapk | 7.86.0-r1, 7.87.0-r0, 7.87.0-r1, 7.87.0-r2+12 more | 8.6.0-r0 | 187 |
| curlrpm | 7.60.0-lp151.5.6.1 | 8.6.0-1.1 | 2 |
- OSV records
- ALPINE-CVE-2024-0853openSUSE-SU-2024:13637-1
Charts affected
201 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,588 |
Container images carrying it
189 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| natsio/ | a67913df95f1 | curl | 8.6.0-r0 | 5 |
| ghcr.io/ | b72cf734d85f | curl | 8.6.0-r0 | 5 |
| grafana/ | 0dc5a246ab16 | curl | 8.6.0-r0 | 3 |
| library/ | 516475cc129d | curl | 8.6.0-r0 | 3 |
| nginxinc/ | be76a26e238d | curl | 8.6.0-r0 | 3 |
| pnnlmiscscripts/ | 9a2fe06a1472 | curl | 8.6.0-r0 | 3 |
| rcdelacruz/ | 38007f358355 | curl | 8.6.0-r0 | 3 |
| rss3/ | d1d2ae6efd05 | curl | 8.6.0-r0 | 3 |
| quay.io/ | fd916f75415f | curl | 8.6.0-r0 | 3 |
| registry.k8s.io/ | e5c4824e7375 | curl | 8.6.0-r0 | 3 |
| agoldis/ | e061e5714238 | curl | 8.6.0-r0 | 2 |
| chatwoot/ | d530ab8c1753 | curl | 8.6.0-r0 | 2 |
| cs3org/ | 02a9e78757b4 | curl | 8.6.0-r0 | 2 |
| daniacobext/ | 9eae4d39fc33 | curl | 8.6.0-r0 | 2 |
| dtzar/ | 55429449408e | curl | 8.6.0-r0 | 2 |
| ethersphere/ | 0558799ca992 | curl | 8.6.0-r0 | 2 |
| grafana/ | 079600c9517b | curl | 8.6.0-r0 | 2 |
| krtk6160/ | cc82a694f818 | curl | 8.6.0-r0 | 2 |
| lachlanevenson/ | af5cea3f2e40 | curl | 8.6.0-r0 | 2 |
| library/ | 44a366dd7724 | curl | 8.6.0-r0 | 2 |
| library/ | 77e5d4a6ad90 | curl | 8.6.0-r0 | 2 |
| metabase/ | 1fb334ce4820 | curl | 8.6.0-r0 | 2 |
| organizr/ | 1ce319d73cdf | curl | 8.6.0-r0 | 2 |
| taigaio/ | 570c8792ce80 | curl | 8.6.0-r0 | 2 |
| temporalio/ | c0a44c26397b | curl | 8.6.0-r0 | 2 |
| temporalio/ | af9c9349708f | curl | 8.6.0-r0 | 2 |
| ghcr.io/ | b940cab56435 | curl | 8.6.0-r0 | 2 |
| ghcr.io/ | f04718704dab | curl | 8.6.0-r0 | 2 |
| registry.k8s.io/ | 5b161f051d01 | curl | 8.6.0-r0 | 2 |
| registry.k8s.io/ | b3aba22b1da8 | curl | 8.6.0-r0 | 2 |
| abdullahkhabir/ | 56526d0cc929 | curl | 8.6.0-r0 | 1 |
| alpine/ | 513c4f0d7123 | curl | 8.6.0-r0 | 1 |
| alpine/ | 21b24e6bf801 | curl | 8.6.0-r0 | 1 |
| alpine/ | bd01dae02676 | curl | 8.6.0-r0 | 1 |
| alpine/ | fc059f056ad0 | curl | 8.6.0-r0 | 1 |
| andrcuns/ | b4a8eb20581a | curl | 8.6.0-r0 | 1 |
| aquasec/ | 6e790e233872 | curl | 8.6.0-r0 | 1 |
| aquasec/ | 0795cba777e7 | curl | 8.6.0-r0 | 1 |
| aquasec/ | 944a04445179 | curl | 8.6.0-r0 | 1 |
| casbin/ | 66f836ef778b | curl | 8.6.0-r0 | 1 |
| cfcontainerization/ | 82fa261c18a8 | curl | 8.6.0-1.1 | 1 |
| cfcontainerization/ | 58fb1c173a46 | curl | 8.6.0-1.1 | 1 |
| cloudnativelabs/ | 0ec7cd73f43f | curl | 8.6.0-r0 | 1 |
| codecov/ | 0475cb1c3136 | curl | 8.6.0-r0 | 1 |
| codecov/ | 534bc4778073 | curl | 8.6.0-r0 | 1 |
| codecov/ | 837f546b479b | curl | 8.6.0-r0 | 1 |
| crazymax/ | fb307f5b87bf | curl | 8.6.0-r0 | 1 |
| daledavies/ | 0a0c8ad93902 | curl | 8.6.0-r0 | 1 |
| datawire/ | 95ec30b3c732 | curl | 8.6.0-r0 | 1 |
| ddosify/ | 56dbd7cf0776 | curl | 8.6.0-r0 | 1 |