CVE-2024-8096

Medium

Advisory

Published 11 Sept 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,022; of 17,781 indexed, latest versions
Container images: 972; deployed by those charts
Fix available: 3 of 3; affected packages

curl - security update

Carried by container images the latest versions of 1,022 of 17,781 indexed charts deploy, on 972 images.

Affected package	Affected versions	Fixed in	Images
curldeb	7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6, 7.47.0-1ubuntu2.7+75 more	7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.24, 7.74.0-1.3+deb11u14+3 more	795
curlapk	8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+11 more	8.10.0-r0	175
curlrpm	7.60.0-lp151.5.6.1	8.10.0-1.1	2

OSV records: ALPINE-CVE-2024-8096 DEBIAN-CVE-2024-8096 UBUNTU-CVE-2024-8096 DLA-3951-1 openSUSE-SU-2024:14333-1
Also known as: USN-7012-1, USN-8525-1

Charts affected

1,022 by stars

Chart

Latest

Affected images

Radar Score

sonarqubesonarqube

10.0.0+521

1 of 3 See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
library/sonarqube :10.0.0-community	ef9723cf4fe4	curl@7.81.0-1ubuntu1.10	7.81.0-1ubuntu1.18

Open the chart page →

6,556

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8

Open the chart page →

11,367

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	curl@7.58.0-2ubuntu3.22	7.58.0-2ubuntu3.24+esm10

Open the chart page →

5,552

rocketchatrocketchat-server

7.0.2

2 of 12 See more

rocketchat rocketchat-server 7.0.2

2 of the 12 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14
bitnamilegacy/os-shell :11-debian-11-r72	2cb5982dcbf4	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14

Open the chart page →

12,279

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	curl@8.4.0-r0	8.10.0-r0

Open the chart page →

2,103

netboxbootc

4.1.1

1 of 4 See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
netboxcommunity/netbox :v3.2.8	3d652dca5351	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.18

Open the chart page →

9,145

milvusmilvus

4.0.31

2 of 5 See more

milvus milvus 4.0.31

2 of the 5 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.8.2	d538416d5afe	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24
milvusdb/milvus :v2.2.13	a3a55e1c1497	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.24

Open the chart page →

32,259

clearmlallegroai

7.15.0

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14

Open the chart page →

10,622

signozsignoz

0.141.1

1 of 5 See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
signoz/zookeeper :3.7.1	fcc4a3288154	curl@7.74.0-1.3+deb11u9	7.74.0-1.3+deb11u14

Open the chart page →

7,568

bitcoin-corehirosystems

2.1.7

1 of 1 See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
dobtc/bitcoin :25.1	a870f7cb1105	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u8

Open the chart page →

4,802

vertical-pod-autoscalercowboysysop

11.1.1

1 of 4 See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8

Open the chart page →

6,927

botkubeinfracloudio

1.14.0

1 of 1 See more

botkube infracloudio 1.14.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/kubeshop/botkube :v1.14.0	c6fe64c7bfcd	curl@8.9.1-r1	8.10.0-r0

Open the chart page →

1,097

istiocloudposse

1.1.0

2 of 8 See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	curl@7.47.0-1ubuntu2.13	7.47.0-1ubuntu2.19+esm17
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	curl@7.47.0-1ubuntu2.13	7.47.0-1ubuntu2.19+esm17

Open the chart page →

23,964

oncallgrafana

1.16.5

1 of 12 See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.4	886b56d5534e	curl@8.9.0-r0	8.10.0-r0

Open the chart page →

16,251

zabbixcetic

3.1.3

3 of 5 See more

zabbix cetic 3.1.3

3 of the 5 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.18
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.18
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.18

Open the chart page →

33,725

chatwootchatwoot

2.0.24

2 of 3 See more

chatwoot chatwoot 2.0.24

2 of the 3 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14
ghcr.io/chatwoot/pgvector :14.4.0-debian-11-r0	f759f1510d09	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14

Open the chart page →

9,203

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u8

Open the chart page →

6,543

daskdask

2024.1.1

2 of 2 See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask :2024.1.0	080150de7d86	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.18

Open the chart page →

12,746

prometheus-cloudwatch-exporterprometheus-community

0.28.2

1 of 1 See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
prom/cloudwatch-exporter :v0.16.0	71c2e988af06	curl@8.5.0-2ubuntu10.2	8.5.0-2ubuntu10.4

Open the chart page →

3,382

openvpn-asstenic

0.1.9

1 of 1 See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	curl@7.58.0-2ubuntu3.10	7.58.0-2ubuntu3.24+esm10

Open the chart page →

15,592

jellyfinutkuozdemir

2.0.0

1 of 1 See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
linuxserver/jellyfin :10.7.7	2427dde159a2	curl@7.68.0-1ubuntu2.11	7.68.0-1ubuntu2.24

Open the chart page →

7,880

homeassistantvolker-raschek

0.2.3

1 of 1 See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.12.4	8d000332b09b	curl@8.4.0-r0	8.10.0-r0

Open the chart page →

6,041

docker-mailserverdocker-mailserver

0.4.0

1 of 2 See more

docker-mailserver docker-mailserver 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
mailserver/docker-mailserver :11.0.0	e0809756dc96	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14

Open the chart page →

1,382

snipeitt3n

3.4.1

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.24

Open the chart page →

18,509

codefreshcodefresh-onprem

2.12.13

1 of 42 See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8

Open the chart page →

14,956

servarrkubitodev

1.5.2

1 of 10 See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/flaresolverr/flaresolverr :v3.3.21	f104ee51e512	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14

Open the chart page →

3,004

stackstorm-hastackstorm

1.1.0

12 of 17 See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
stackstorm/st2actionrunner :3.8	88235ba70cad	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2api :3.8	6f56d239d280	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2auth :3.8	33ecfda16608	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2notifier :3.8	f190a6212195	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2rulesengine :3.8	259503496ff9	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2scheduler :3.8	b1de2055c362	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2sensorcontainer :3.8	b1a338f64773	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2stream :3.8	1c8904a3bf67	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2timersengine :3.8	1bf35bfaf00c	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2web :3.8	09989a26c8b7	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24
stackstorm/st2workflowengine :3.8	19fdfffdbba8	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24

Open the chart page →

96,419

supabasetokens-studio

1.0.0

3 of 14 See more

supabase tokens-studio 1.0.0

3 of the 14 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
supabase/logflare :1.8.12	d429005429ce	curl@7.74.0-1.3+deb11u13	7.74.0-1.3+deb11u14
supabase/realtime :v2.33.8	d207e6e23ad3	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8
supabase/studio :20241021-9f9b083	26d8070c55e9	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8

Open the chart page →

23,123

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8

Open the chart page →

8,493

frigateblakeblackshear

7.8.0

1 of 1 See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	curl@7.74.0-1.3+deb11u12	7.74.0-1.3+deb11u14

Open the chart page →

3,004

hivemq-operatorhivemq

0.11.62

1 of 2 See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
hivemq/hivemq-operator :4.7.10	241d6a8e1963	curl@7.81.0-1ubuntu1.8	7.81.0-1ubuntu1.18

Open the chart page →

7,857

quickwitquickwit

0.8.16

1 of 1 See more

quickwit quickwit 0.8.16

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
quickwit/quickwit :v0.8.2	363ff56ce456	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8

Open the chart page →

3,480

transmission-openvpnutkuozdemir

2.5.0

1 of 1 See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
haugene/transmission-openvpn :4.0	059216cfae4b	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.24

Open the chart page →

11,405

devtron-operatordevtron

0.23.3

1 of 11 See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u8

Open the chart page →

32,902

ilumilum

6.7.3

2 of 19 See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
bitnamilegacy/os-shell :11-debian-11-r72	2cb5982dcbf4	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14
ilum/mongodb :6.0.5	42b6d774c37d	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14

Open the chart page →

23,228

temporallemontech

0.37.0

1 of 13 See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
temporalio/server :1.22.4	c0a44c26397b	curl@8.4.0-r0	8.10.0-r0

Open the chart page →

14,893

syftopenmined

0.9.5

1 of 6 See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	curl@8.5.0-r0	8.10.0-r0

Open the chart page →

17,245

solrpreferred-ai

3.2.0

1 of 3 See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
library/solr :8.7.0	d124efd81fbb	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14

Open the chart page →

6,048

puppetserverpuppetserver

9.5.2

2 of 5 See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.18
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.18

Open the chart page →

14,184

selenium3selenium3

1.2.4

1 of 1 See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
selenium/hub :3.141.59	02f251d48d5f	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24

Open the chart page →

11,782

tbmq-clustertbmq-helm-chart

2.1.0

1 of 3 See more

tbmq-cluster tbmq-helm-chart 2.1.0

1 of the 3 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
thingsboard/toolbox :1.13.0	1bd61a0da6d3	curl@8.9.1-r1	8.10.0-r0

Open the chart page →

3,534

plexutkuozdemir

2.1.1

1 of 1 See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
linuxserver/plex :1.25.2	4a13ced2326c	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24

Open the chart page →

6,348

istio-operatorwiremind

1.18.2

1 of 1 See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
istio/operator :1.18.2	70f9d1fe5fff	curl@7.81.0-1ubuntu1.10	7.81.0-1ubuntu1.18

Open the chart page →

5,630

zabbix-serveraekondratiev

1.0.6

3 of 4 See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24

Open the chart page →

30,668

hadoopbigdata-charts

1.0.1

1 of 2 See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
5200710/hadoop :3.2.3-java8	092d3088a5fb	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.24

Open the chart page →

12,111

passboltcnieg

1.1.17

1 of 2 See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	curl@7.74.0-1.3+b1	7.74.0-1.3+deb11u14

Open the chart page →

3,543

hasurahasura-extra

3.0.1

1 of 1 See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
hasura/graphql-engine :v2.34.0-ce	0111b0204136	curl@7.81.0-1ubuntu1.10	7.81.0-1ubuntu1.18

Open the chart page →

4,903

invoiceninjainvoiceninja

0.10.2

1 of 5 See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
invoiceninja/invoiceninja :5.6.24	1437916dee01	curl@8.1.2-r0	8.10.0-r0

Open the chart page →

2,709

servarrservarr

1.0.2

6 of 10 See more

servarr servarr 1.0.2

6 of the 10 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.8.13	05a9734d7e83	curl@7.74.0-1.3+deb11u10	7.74.0-1.3+deb11u14
ghcr.io/flaresolverr/flaresolverr :v3.3.16	088412db1051	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14
ghcr.io/onedr0p/prowlarr-develop :1.14.0.4286	c77d84ebf7a6	curl@8.5.0-r0	8.10.0-r0
ghcr.io/onedr0p/qbittorrent :4.6.3	a4ad890e8c4a	curl@8.5.0-r0	8.10.0-r0
ghcr.io/onedr0p/radarr :5.3.6.8612	8d299e59fce7	curl@8.5.0-r0	8.10.0-r0
ghcr.io/onedr0p/sonarr :4.0.2.1183	27ffdcc8a937	curl@8.5.0-r0	8.10.0-r0

Open the chart page →

14,238

rekorsigstore

1.8.5

1 of 9 See more

rekor sigstore 1.8.5

1 of the 9 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	curl@7.74.0-1.3+deb11u10	7.74.0-1.3+deb11u14

Open the chart page →

5,415

Container images carrying it

972 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8	1
apache/airflow :2.8.1	e5560ad0b86e	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8	1
apache/drill :1.21.1	1f96558fd292	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14	1
apache/iotdb :0.13.3-node	afa47bf1692a	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.24	1
apache/nifi-registry :1.27.0	63b8e3e40742	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.18	1
apachepinot/pinot :latest-jdk11	0018bb04ced7	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	curl@7.81.0-1ubuntu1.13	7.81.0-1ubuntu1.18	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24	1
apachepulsar/pulsar :2.9.0	d056c89b7131	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24	1
apachepulsar/pulsar :2.8.2	d538416d5afe	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24	1
apache/rocketmq :5.3.0	434d8398f996	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.4	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.18	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.18	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24	1
apache/skywalking-ui :9.2.0	295f1dc87d98	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.18	1
apache/skywalking-ui :8.9.1	80530f0308a5	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14	1
apache/superset :4.0.1	ab9467fd712c	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8	1
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	curl@8.5.0-r0	8.10.0-r0	1
aquasec/postee :2.12.0-amd64	0795cba777e7	curl@8.1.2-r0	8.10.0-r0	1
aquasec/trivy :0.43.1	944a04445179	curl@8.1.2-r0	8.10.0-r0	1
archish27/python-fastapi-postgres :latest	6610071a2101	curl@7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u14	1
aristidetm/basic-notebook :3.6.5	469dbc951224	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u8	1
aristidetm/k8s-hub :3.3.7	ccb516cb8474	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14	1
aroralalit/student-producer :1.0.0	2a094f597b36	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	curl@7.68.0-1ubuntu2.20	7.68.0-1ubuntu2.24	1
assistiot/cybersecurity-monitoring_ir-ctx :latest	ae8b3d72eb5d	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14	1
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.24	1
assistiot/location_processing :latest	e9bae124095f	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.18	1
assistiot/open_api_backend :1.1.2	30812ba93555	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.18	1
assistiot/resource-provisioning_prc :1.0.0	8b5d118bdf0e	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	curl@7.68.0-1ubuntu2.19	7.68.0-1ubuntu2.24	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u8	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.24	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.18	1
atlassian/jira-software :8.14.0	37bc46cbec1a	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.18	1
atomix/atomix :3.1.12	7738ff4f5c63	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14	1
avinash263/pyredis263 :latest	aa2b8727f1a6	curl@7.88.1-10	7.88.1-10+deb12u8	1
avzini/web-app :latest	f40b30210ed0	curl@7.88.1-10+deb12u4	7.88.1-10+deb12u8	1
azhar008/flaskapplication :latest	a1e827b0adea	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8	1
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14	1
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14	1
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	curl@7.74.0-1.3+deb11u5	7.74.0-1.3+deb11u14	1
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14	1
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8	1