CVE-2024-8096

Medium

Advisory

Published 11 Sept 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,031; of 17,787 indexed, latest versions
Container images: 979; deployed by those charts
Fix available: 3 of 3; affected packages

curl - security update

Carried by container images the latest versions of 1,031 of 17,787 indexed charts deploy, on 979 images.

Affected package	Affected versions	Fixed in	Images
curldeb	7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6, 7.47.0-1ubuntu2.7+75 more	7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.24, 7.74.0-1.3+deb11u14+3 more	801
curlapk	8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+11 more	8.10.0-r0	176
curlrpm	7.60.0-lp151.5.6.1	8.10.0-1.1	2

OSV records: ALPINE-CVE-2024-8096 DEBIAN-CVE-2024-8096 UBUNTU-CVE-2024-8096 DLA-3951-1 openSUSE-SU-2024:14333-1
Also known as: USN-7012-1, USN-8525-1

Charts affected

1,031 by stars

Chart

Latest

Affected images

Radar Score

resultappvoting-app-helm-charts-repo-cloud

1.0.0

1 of 1 See more

resultapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_result :v1	e510023fdf38	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14

Open the chart page →

1,263

voteappvoting-app-helm-charts-repo-cloud

1.0.0

2 of 5 See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_result :v1	e510023fdf38	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14
kodekloud/examplevotingapp_vote :v1	3a856afb02a3	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14

Open the chart page →

8,287

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.24

Open the chart page →

11,444

wallarm-ingress-rcwallarm

4.8.4

1 of 2 See more

wallarm-ingress-rc wallarm 4.8.4

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
wallarm/ingress-controller :4.8.0-1	a591b9c91570	curl@8.4.0-r0	8.10.0-r0

Open the chart page →

2,635

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.24
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm10

Open the chart page →

20,233

consulwarjiang

1.3.0

1 of 2 See more

consul warjiang 1.3.0

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.17.0	712fe02d2f84	curl@8.4.0-r0	8.10.0-r0

Open the chart page →

4,059

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24

Open the chart page →

11,167

apiwbstack

0.36.0

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14

Open the chart page →

2,019

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.18

Open the chart page →

6,272

mediawikiwbstack

0.14.0

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14

Open the chart page →

2,132

supersetwbstack

0.1.0

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8

Open the chart page →

6,540

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.24+esm10

Open the chart page →

9,748

drillwearefrank

1.3.6

2 of 3 See more

drill wearefrank 1.3.6

2 of the 3 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14

Open the chart page →

9,399

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.24

Open the chart page →

9,225

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.24

Open the chart page →

9,225

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	curl@7.88.1-10	7.88.1-10+deb12u8

Open the chart page →

8,858

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

2 of 2 See more

emissary-ingress wenerme 8.12.2

2 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	curl@8.9.1-r1	8.10.0-r0
istio/kubectl :1.5.10	dbb7726d1bf0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.24+esm10

Open the chart page →

10,857

hazelcastwenerme

5.10.3

1 of 2 See more

hazelcast wenerme 5.10.3

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
hazelcast/hazelcast :5.5.0	5dd5d31c7a06	curl@8.9.0-r0	8.10.0-r0

Open the chart page →

2,623

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.24

Open the chart page →

15,287

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.18

Open the chart page →

9,296

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
dwdraju/alpine-curl-jq :latest	83bd9be2b14b	curl@8.9.1-r1	8.10.0-r0

Open the chart page →

6,323

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8

Open the chart page →

5,548

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14

Open the chart page →

2,021

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.18

Open the chart page →

14,172

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8

Open the chart page →

7,685

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8

Open the chart page →

13,197

prometheusalertygqygq2

1.0.0

1 of 1 See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
feiyu563/prometheus-alert :v4.9.1	224cfa68cbd9	curl@8.5.0-r0	8.10.0-r0

Open the chart page →

1,610

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14

Open the chart page →

1,838

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-8096.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	curl@8.5.0-r0	8.10.0-r0

Open the chart page →

1,588

Container images carrying it

979 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8	1
bitnamilegacy/kubectl :1.30.5	744f84cf7493	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8	1
bitnamilegacy/kubectl :1.22.13	d0e426ccff33	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14	1
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8	1
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14	1
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14	1
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u8	1
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14	1
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u8	1
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8	1
bitnamilegacy/mongodb :7.0.8-debian-12-r2	3163c3842bfd	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8	1
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	curl@7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u14	1
bitnamilegacy/mongodb :7.0.5-debian-11-r6	6fe59ed5d79f	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14	1
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8	1
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8	1
bitnamilegacy/os-shell :11-debian-11-r96	8643af4facff	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14	1
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8	1
bitnamilegacy/rabbitmq :3.11.18-debian-11-r0	29b0a2330572	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14	1
bitnamilegacy/rabbitmq :3.10.8	8f7161d8ce19	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14	1
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u8	1
bitnamilegacy/rabbitmq :3.10.7-debian-11-r4	cf93e2772250	curl@7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u14	1
bitnamilegacy/redis :6.2.7-debian-11-r3	7788b908dd0d	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14	1
bitnamilegacy/zookeeper :3.7.2-debian-11-r5	cbf54314c401	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.24	1
buntha/mlflow :2.1.1	154542cc3083	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14	1
camerahub/camerahub :0.36.23	a5af37dd6e1b	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14	1
castopod/castopod :1.12.10	1fd37280cbb2	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8	1
cfcontainerization/cf-operator :v2.3.0-0.g27a91cdf	82fa261c18a8	curl@7.60.0-lp151.5.6.1	8.10.0-1.1	1
cfcontainerization/quarks-job :v0.0.0-0.g70ae34b	58fb1c173a46	curl@7.60.0-lp151.5.6.1	8.10.0-1.1	1
chetangautamm/repo :sipp.v3	e7f7049e1544	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.24	1
cheyang/distributed-tf :1.6.0	46cc34755493	curl@7.47.0-1ubuntu2.6	7.47.0-1ubuntu2.19+esm17	1
chubaofs/cfs-client :3.2.0	15ff74209ce7	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14	1
chubaofs/cfs-server :3.2.0	205030e045f2	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u14	1
cloudve/ttyd :latest	d79c1c5881c0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.24+esm10	1
clsen2024/daejeon_2-3 :latest	1156cd87c8fb	curl@8.9.0-r0	8.10.0-r0	1
clsen2024/gwangju_2-3 :service-b-1	0ba9eff852c5	curl@8.9.0-r0	8.10.0-r0	1
clsen2024/gwangju_2-3 :service-a-1	51b1d45961cd	curl@8.9.0-r0	8.10.0-r0	1
clsen2024/gwangju_2-3 :service-c-1	efb1586c8299	curl@8.9.0-r0	8.10.0-r0	1
cm2network/csgo :sourcemod	93df54a2e4fb	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u14	1
codecov/self-hosted-api :24.4.1	0475cb1c3136	curl@8.5.0-r0	8.10.0-r0	1
codecov/self-hosted-worker :24.4.1	837f546b479b	curl@8.5.0-r0	8.10.0-r0	1
codercom/code-server :4.11.0-debian	1e2cc688008e	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u14	1
collabora/code :23.05.10.1.1	05299b452f7f	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u8	1
contentsquareplatform/chproxy :v1.26.5	24555f22d4be	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u8	1
countly/api :25.05.4	f4cc7447c4f5	curl@7.74.0-1.3+deb11u12	7.74.0-1.3+deb11u14	1
countly/countly-server :25.05.4	e3c238248f99	curl@7.68.0-1ubuntu2.22	7.68.0-1ubuntu2.24	1
countly/frontend :25.05.4	2acbc11499b6	curl@7.74.0-1.3+deb11u12	7.74.0-1.3+deb11u14	1
cribl/cribl :3.0.2	762747cb6796	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm10	1
cryptexlabs/authf :0.12.11	189c07411d7c	curl@8.9.1-r1	8.10.0-r0	1
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	curl@7.47.0-1ubuntu2.19	7.47.0-1ubuntu2.19+esm17	1