StackRadar

CVE-2024-9681

Medium

Advisory

Published 6 Nov 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
502
of 17,781 indexed, latest versions
Container images
502
deployed by those charts
Fix available
3 of 3
affected packages

curl-8.11.0-1.1 on GA media

Carried by container images the latest versions of 502 of 17,781 indexed charts deploy, on 502 images.

Affected packageAffected versionsFixed inImages
curldeb7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+19 more7.81.0-1ubuntu1.19, 7.88.1-10+deb12u9, 8.5.0-2ubuntu10.5309
curlapk8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+13 more8.11.0-r0191
curlrpm7.60.0-lp151.5.6.18.11.0-1.12
OSV records
ALPINE-CVE-2024-9681CGA-6vgx-rqv6-p48qDEBIAN-CVE-2024-9681UBUNTU-CVE-2024-9681openSUSE-SU-2024:14476-1
Also known as
CGA-f97r-fwm9-2xxp, USN-7104-1

Charts affected

502 by stars
ChartLatestAffected imagesRadar Score
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
curl@8.5.0-2ubuntu10.4
8.5.0-2ubuntu10.5

Open the chart page →

4,309
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
curl@8.2.1-r0
8.11.0-r0

Open the chart page →

3,675
kubecostmesosphere-stable0.37.52 of 9See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9
gcr.io/kubecost1/frontend:prod-1.108.14c6df805bbf2
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

17,693
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
curl@8.9.0-r0
8.11.0-r0

Open the chart page →

2,160
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9

Open the chart page →

7,052
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
curl@7.81.0-1ubuntu1.14
7.81.0-1ubuntu1.19

Open the chart page →

10,315
smockerandrcunsVerified publisher0.0.41 of 1See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
andrcuns/smocker:0.18.5b4a8eb20581a
curl@8.4.0-r0
8.11.0-r0

Open the chart page →

2,173
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
curl@8.10.1-r0
8.11.0-r0

Open the chart page →

2,388
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ddosify/selfhosted_frontend:4.1.5bf454ab99d89
curl@8.5.0-r0
8.11.0-r0
library/nginx:1.25.5-alpine516475cc129d
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

22,202
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
curl@7.81.0-1ubuntu1.18
7.81.0-1ubuntu1.19

Open the chart page →

7,190
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
curl@7.81.0-1ubuntu1.18
7.81.0-1ubuntu1.19

Open the chart page →

7,190
celestia-nodecelestia-node0.1.71 of 1See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
curl@8.9.1-r1
8.11.0-r0

Open the chart page →

1,799
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
curl@8.9.0-r0
8.11.0-r0

Open the chart page →

12,562
swaggeruichrisfuVerified publisher0.3.71 of 1See more

swaggerui chrisfu 0.3.7

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v5.6.2342808e22de4
curl@8.2.1-r0
8.11.0-r0

Open the chart page →

1,309
commonground-gatewaycommonground-gateway1.5.42 of 7See more

commonground-gateway commonground-gateway 1.5.4

2 of the 7 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
curl@8.5.0-r0
8.11.0-r0
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
curl@7.88.1-10
7.88.1-10+deb12u9

Open the chart page →

9,724
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9

Open the chart page →

13,761
tasmo-admincrystalnetVerified publisher3.0.111 of 1See more

tasmo-admin crystalnet 3.0.11

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

891
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.19

Open the chart page →

5,398
data-fairdata354-helmVerified publisher1.1.23 of 12See more

data-fair data354-helm 1.1.2

3 of the 12 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
curl@8.5.0-r0
8.11.0-r0
ghcr.io/data-fair/metrics:0a8d40779eeae
curl@8.1.2-r0
8.11.0-r0
ghcr.io/data-fair/processings:15a9216989707
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

38,346
dbrepodbrepo1.13.34 of 25See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9

Open the chart page →

52,635
jumpdjjudas21Verified publisher0.1.71 of 1See more

jump djjudas21 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
daledavies/jump:v1.4.10a0c8ad93902
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

728
openssh-serverdjjudas21Verified publisher0.1.141 of 1See more

openssh-server djjudas21 0.1.14

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
linuxserver/openssh-server:9.7_p1-r4-ls17153ea39d2485c
curl@8.9.1-r2
8.11.0-r0

Open the chart page →

565
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
curl@7.81.0-1ubuntu1.17
7.81.0-1ubuntu1.19

Open the chart page →

10,858
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u9

Open the chart page →

18,376
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
library/mongo:6.0.12646902910d6a
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.19

Open the chart page →

15,383
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9

Open the chart page →

11,458
event-exporterevent-exporterVerified publisher0.1.171 of 1See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
kubestar/event-exporter:latest656606941255
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

1,210
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-frontend:v1.5.12409c2a00ab6
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

5,291
featurehubfeaturehub4.1.61 of 7See more

featurehub featurehub 4.1.6

1 of the 7 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
curl@8.4.0-r0
8.11.0-r0

Open the chart page →

8,240
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
curl@8.9.1-r1
8.11.0-r0

Open the chart page →

1,965
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.19

Open the chart page →

5,136
organizrgeek-cookbookVerified publisher7.4.21 of 1See more

organizr geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
organizr/organizr:latest1ce319d73cdf
curl@8.4.0-r0
8.11.0-r0

Open the chart page →

1,533
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.19

Open the chart page →

13,025
temporalglasskubeVerified publisher0.45.2-gk.14 of 14See more

temporal glasskube 0.45.2-gk.1

4 of the 14 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
curl@8.5.0-r0
8.11.0-r0
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
curl@8.5.0-r0
8.11.0-r0
temporalio/server:1.25.08a5798191dea
curl@8.5.0-r0
8.11.0-r0
temporalio/ui:2.30.25c2a3645d09c
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

16,346
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
curl@8.9.1-r1
8.11.0-r0

Open the chart page →

4,679
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9

Open the chart page →

10,072
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9

Open the chart page →

16,514
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.19

Open the chart page →

4,300
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9

Open the chart page →

7,387
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.19
kafkakraft/kafka-controller:3.7.0f261ad288fce
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.19
kafkakraft/kafkakraft:3.7.02e4b593b878b
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.19

Open the chart page →

14,130
mysql-checkkfirfer0.3.01 of 1See more

mysql-check kfirfer 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
kfirfer/mysql-client:0.0.4d23d173f333f
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

785
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u9

Open the chart page →

20,403
ks-corekubeblocksVerified publisher1.1.31 of 5See more

ks-core kubeblocks 1.1.3

1 of the 5 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
kubesphere/kubectl:v1.27.1649b445b1b732
curl@8.9.0-r0
8.11.0-r0

Open the chart page →

4,721
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
curl@8.2.1-r0
8.11.0-r0

Open the chart page →

5,940
miniapiminiapi1.3.21 of 1See more

miniapi miniapi 1.3.2

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
udhos/miniapi:1.3.28a7042db82ce
curl@8.10.1-r0
8.11.0-r0

Open the chart page →

854
clowder2ncsaVerified publisher1.9.72 of 12See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u9
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u9

Open the chart page →

37,373
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9

Open the chart page →

5,039
opencatalogiopencatalogi1.0.63 of 8See more

opencatalogi opencatalogi 1.0.6

3 of the 8 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
curl@8.5.0-r0
8.11.0-r0
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
curl@7.88.1-10
7.88.1-10+deb12u9
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9

Open the chart page →

14,838
chartmuseumphntom4.0.201 of 1See more

chartmuseum phntom 4.0.20

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
phntom/chartmuseum:v0.16.053883b65d9b7
curl@8.2.0-r1
8.11.0-r0

Open the chart page →

2,939
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
curl@7.81.0-1ubuntu1.4
7.81.0-1ubuntu1.19

Open the chart page →

7,576

Container images carrying it

502 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
curl@8.10.1-r0
8.11.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
curl@8.5.0-r0
8.11.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.