StackRadar

CVE-2024-2398

High

Advisory

Published 27 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
0.361
98th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
875
of 17,787 indexed, latest versions
Container images
838
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security update

Carried by container images the latest versions of 875 of 17,787 indexed charts deploy, on 838 images.

Affected packageAffected versionsFixed inImages
curldeb7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6, 7.47.0-1ubuntu2.7+56 more7.47.0-1ubuntu2.19+esm12, 7.58.0-2ubuntu3.24+esm4, 7.68.0-1ubuntu2.22, 7.81.0-1ubuntu1.16+1 more451
curlapk7.86.0-r1, 7.87.0-r0, 7.87.0-r1, 7.87.0-r2+12 more8.7.1-r0187
curlrpm7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+26 more0:7.61.1-34.el8_10.2, 0:7.76.1-23.el9_2.7, 0:7.76.1-29.el9_4.1200
OSV records
ALPINE-CVE-2024-2398DEBIAN-CVE-2024-2398RHSA-2024:3998RHSA-2024:5529RHSA-2024:5654RLSA-2024:5654UBUNTU-CVE-2024-2398
Also known as
USN-6718-1, USN-6718-2

Charts affected

875 by stars
ChartLatestAffected imagesRadar Score
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
curl@7.61.1-22.el8
0:7.61.1-34.el8_10.2

Open the chart page →

6,982
nginx-custom-selinuxnginx-custom1.0.01 of 1See more

nginx-custom-selinux nginx-custom 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
library/nginx:1.25-alpine516475cc129d
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

686
minio-directpvnineinfra-charts4.0.81 of 5See more

minio-directpv nineinfra-charts 4.0.8

1 of the 5 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
quay.io/minio/directpv:v4.0.84560083eb77d
curl@7.61.1-30.el8_8.3
0:7.61.1-34.el8_10.2

Open the chart page →

7,035
minio-operatornineinfra-charts5.0.91 of 1See more

minio-operator nineinfra-charts 5.0.9

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
minio/operator:v5.0.9170b154d2c61
curl@7.61.1-30.el8_8.3
0:7.61.1-34.el8_10.2

Open the chart page →

3,418
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

2,966
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.22

Open the chart page →

22,713
ingress-helm-chartnotesprojectchart0.1.01 of 2See more

ingress-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
curl@8.1.2-r0
8.7.1-r0

Open the chart page →

2,956
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u6

Open the chart page →

13,331
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u6

Open the chart page →

13,405
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u6

Open the chart page →

13,387
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
curl@7.58.0-2ubuntu3.19
7.58.0-2ubuntu3.24+esm4
linuxserver/codimd:latestb801bbcf6386
curl@7.58.0-2ubuntu3.12
7.58.0-2ubuntu3.24+esm4

Open the chart page →

27,486
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm4

Open the chart page →

27,667
nutanix-flow-cninutanix-helm-releasesVerified publisher1.1.01 of 7See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

1 of the 7 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
curl@8.4.0-r0
8.7.1-r0

Open the chart page →

4,989
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.16

Open the chart page →

8,130
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
curl@7.81.0-1ubuntu1.13
7.81.0-1ubuntu1.16

Open the chart page →

9,059
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
curl@7.61.1-30.el8_8.3
0:7.61.1-34.el8_10.2
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
curl@7.61.1-30.el8_8.3
0:7.61.1-34.el8_10.2
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
curl@7.61.1-30.el8_8.3
0:7.61.1-34.el8_10.2

Open the chart page →

18,666
commonground-gatewayopencatalogi1.5.32 of 7See more

commonground-gateway opencatalogi 1.5.3

2 of the 7 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
curl@8.5.0-r0
8.7.1-r0
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
curl@7.88.1-10
7.88.1-10+deb12u6

Open the chart page →

9,736
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6

Open the chart page →

5,688
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
curl@7.61.1-18.el8
0:7.61.1-34.el8_10.2

Open the chart page →

18,023
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
curl@7.58.0-2ubuntu3.6
7.58.0-2ubuntu3.24+esm4

Open the chart page →

63,277
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.19+esm12
omecproject/onos-progran:1.0.05715e5648aa0
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.19+esm12
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.19+esm12

Open the chart page →

88,616
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.19+esm12

Open the chart page →

26,234
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm4

Open the chart page →

15,722
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
omecproject/c3po-hssdb:master-latest28a90cc26716
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.22

Open the chart page →

40,795
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm4

Open the chart page →

12,939
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.19+esm12

Open the chart page →

38,889
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
curl@7.47.0-1ubuntu2.5
7.47.0-1ubuntu2.19+esm12

Open the chart page →

93,965
voltha-infraopencord2.14.02 of 10See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm4
voltha/voltha-onos:5.1.8e038acb950d3
curl@7.58.0-2ubuntu3.19
7.58.0-2ubuntu3.24+esm4

Open the chart page →

41,088
minioopenobserve5.0.72 of 2See more

minio openobserve 5.0.7

2 of the 2 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
curl@7.61.1-25.el8_7.1
0:7.61.1-34.el8_10.2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
curl@7.61.1-25.el8_7.1
0:7.61.1-34.el8_10.2

Open the chart page →

7,457
akeyless-api-gatewayopenshift1.41.21 of 1See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
akeyless/base-rhel:0.0.14ba8900a0061
curl@7.61.1-33.el8
0:7.61.1-34.el8_10.2

Open the chart page →

11,795
bpjstk-serviceopenshift1.0.03 of 6See more

bpjstk-service openshift 1.0.0

3 of the 6 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
andrianrf/backoffice:latest047a7837651e
curl@7.61.1-34.el8
0:7.61.1-34.el8_10.2
andrianrf/backoffice-be:latest6036614803d4
curl@7.76.1-23.el9_2.1
0:7.76.1-23.el9_2.7
andrianrf/iso-server:latest7da47f525c7d
curl@7.76.1-23.el9_2.1
0:7.76.1-23.el9_2.7

Open the chart page →

34,721
chatbot-ai-sampleopenshift0.1.61 of 4See more

chatbot-ai-sample openshift 0.1.6

1 of the 4 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
curl@7.76.1-29.el9_4
0:7.76.1-29.el9_4.1

Open the chart page →

18,991
flomesh-consoleopenshift0.70.0-30-ubi82 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

2 of the 2 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
curl@7.61.1-25.el8
0:7.61.1-34.el8_10.2
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
curl@7.61.1-25.el8
0:7.61.1-34.el8_10.2

Open the chart page →

9,968
fsmopenshift0.1.8-ubi.66 of 6See more

fsm openshift 0.1.8-ubi.6

6 of the 6 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
curl@7.61.1-34.el8
0:7.61.1-34.el8_10.2
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
curl@7.61.1-25.el8
0:7.61.1-34.el8_10.2
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
curl@7.61.1-25.el8
0:7.61.1-34.el8_10.2
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
curl@7.61.1-25.el8
0:7.61.1-34.el8_10.2
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
curl@7.61.1-25.el8
0:7.61.1-34.el8_10.2
quay.io/flomesh/toolbox-ubi8:1.2.01f5e3161cb84
curl@7.61.1-34.el8
0:7.61.1-34.el8_10.2

Open the chart page →

16,554
orion-ldopenshift1.0.32 of 2See more

orion-ld openshift 1.0.3

2 of the 2 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
curl@7.61.1-18.el8_4.2
0:7.61.1-34.el8_10.2
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
curl@7.61.1-18.el8
0:7.61.1-34.el8_10.2

Open the chart page →

14,727
osm-edgeopenshift1.2.1-ubi87 of 7See more

osm-edge openshift 1.2.1-ubi8

7 of the 7 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
curl@7.61.1-34.el8
0:7.61.1-34.el8_10.2
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
curl@7.61.1-25.el8_7.1
0:7.61.1-34.el8_10.2
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
curl@7.61.1-25.el8_7.1
0:7.61.1-34.el8_10.2
quay.io/flomesh/osm-edge-crds-ubi8:1.2.1c3bc5e7a70e6
curl@7.61.1-25.el8_7.1
0:7.61.1-34.el8_10.2
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
curl@7.61.1-25.el8_7.1
0:7.61.1-34.el8_10.2
quay.io/flomesh/osm-edge-preinstall-ubi8:1.2.1f94282a9cfec
curl@7.61.1-25.el8_7.1
0:7.61.1-34.el8_10.2
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
curl@7.61.1-25.el8
0:7.61.1-34.el8_10.2

Open the chart page →

19,449
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
curl@7.76.1-23.el9_2.2
0:7.76.1-23.el9_2.7

Open the chart page →

8,634
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
curl@7.61.1-33.el8
0:7.61.1-34.el8_10.2

Open the chart page →

13,608
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
curl@7.61.1-33.el8
0:7.61.1-34.el8_10.2

Open the chart page →

11,740
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
curl@7.61.1-33.el8
0:7.61.1-34.el8_10.2

Open the chart page →

13,570
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
curl@7.61.1-33.el8
0:7.61.1-34.el8_10.2

Open the chart page →

13,553
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
curl@7.61.1-33.el8
0:7.61.1-34.el8_10.2

Open the chart page →

13,457
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
curl@7.61.1-33.el8
0:7.61.1-34.el8_10.2

Open the chart page →

13,101
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24+esm4

Open the chart page →

15,607
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.24+esm4

Open the chart page →

36,230
opslevelopslevelVerified publisher2025.1.221 of 10See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2023-02-28T00-12-59Zc631532a394e
curl@7.61.1-25.el8_7.3
0:7.61.1-34.el8_10.2

Open the chart page →

5,609
lokiot-container-kit1.0.11 of 5See more

loki ot-container-kit 1.0.1

1 of the 5 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.24-alpinebe76a26e238d
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

4,831
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

5,136
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6

Open the chart page →

11,095
p4p40.1.03 of 7See more

p4 p4 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-2398.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.16
mastercloudapps/server:v2.23f3d24dfe2686
curl@7.61.1-25.el8_7.1
0:7.61.1-34.el8_10.2
mastercloudapps/weatherservice:v1.23de859d29c116
curl@7.61.1-22.el8_6.4
0:7.61.1-34.el8_10.2

Open the chart page →

27,667

Container images carrying it

838 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
istio/operator:1.10.3655eefa11c84
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm4
1
istio/operator:1.12.06cfce8a071b9
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.22
1
istio/operator:1.18.270f9d1fe5fff
curl@7.81.0-1ubuntu1.10
7.81.0-1ubuntu1.16
1
istio/pilot:1.10.0294ca55bd1cc
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm4
1
istio/pilot:1.16.0ac0284d75ec9
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.16
1
istio/pilot:1.2.9c09319753454
curl@7.47.0-1ubuntu2.13
7.47.0-1ubuntu2.19+esm12
1
istio/pilot:1.17.1ce9d87606701
curl@7.81.0-1ubuntu1.7
7.81.0-1ubuntu1.16
1
istio/pilot:1.15.2db08d6963975
curl@7.81.0-1ubuntu1.4
7.81.0-1ubuntu1.16
1
istio/pilot:1.10.3e7e110a421c2
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm4
1
istio/proxyv2:1.2.90c78be035e98
curl@7.47.0-1ubuntu2.13
7.47.0-1ubuntu2.19+esm12
1
istio/proxyv2:1.9.687a9db561d2e
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm4
1
istio/proxyv2:1.10.088c6c693e67a
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm4
1
istio/proxyv2:1.14.1df69c1a7af7c
curl@7.68.0-1ubuntu2.11
7.68.0-1ubuntu2.22
1
jacobalberty/unifi:v7.1.664a3616625dda
curl@7.58.0-2ubuntu3.18
7.58.0-2ubuntu3.24+esm4
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
curl@7.58.0-2ubuntu3.24
7.58.0-2ubuntu3.24+esm4
1
jacobalberty/unifi:5.10.19c409924e2463
curl@7.47.0-1ubuntu2.12
7.47.0-1ubuntu2.19+esm12
1
jakowenko/double-take:1.6.0b858bac9e32a
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.22
1
jedi132000/nextapp:latestdc2a81e92f23
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.22
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.22
1
jmferrer/azure-devops-agent:latest030f68ec6998
curl@7.47.0-1ubuntu2.14
7.47.0-1ubuntu2.19+esm12
1
josh5/unmanic:0.2.64d49c4816260
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.16
1
jupyterhub/configurable-http-proxy:4.5.67adeeed34a36
curl@8.2.1-r0
8.7.1-r0
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.22
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.22
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.22
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.16
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.16
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.16
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
curl@8.5.0-r0
8.7.1-r0
1
kfirfer/king:latestc05d9fc7ae77
curl@8.2.1-r0
8.7.1-r0
1
kfirfer/mysql-client:0.0.4d23d173f333f
curl@8.5.0-r0
8.7.1-r0
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.22
1
knspar/phronetis-operator:0.1.60c4f0543ee58
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
curl@7.68.0-1ubuntu2.16
7.68.0-1ubuntu2.22
1
kubegems/kubectl:latestc3b4be9a54f5
curl@7.87.0-r1
8.7.1-r0
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm4
1
kuberay/operator:v1.0.04e6ac8a3a2c4
curl@7.61.1-30.el8_8.3
0:7.61.1-34.el8_10.2
1
kubeshop/testkube-dashboard:1.16.748958b4126a4
curl@8.5.0-r0
8.7.1-r0
1
kubestar/event-exporter:latest656606941255
curl@8.5.0-r0
8.7.1-r0
1
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
curl@8.5.0-r0
8.7.1-r0
1
kvalitetsit/stakit-frontend:0.2.5fd5c4f60ef80
curl@8.2.1-r0
8.7.1-r0
1
kyso/jupyter-diff:latest82299a9e5a86
curl@8.2.1-r0
8.7.1-r0
1
lachlanevenson/k8s-kubectl:v1.22.1638b7962cd016
curl@7.86.0-r1
8.7.1-r0
1
langgenius/dify-api:0.6.11fca918260dd6
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
1
lib42/jackett:latesta55596cda383
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
1
library/cassandra:3.11.10b095ff3248c6
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.22
1
library/elasticsearch:7.17.0332c6d416808
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.22
1
library/elasticsearch:7.17.1588c2ec10c7f2
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.22
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.