StackRadar

CVE-2024-9681

Medium

Advisory

Published 6 Nov 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
502
of 17,781 indexed, latest versions
Container images
502
deployed by those charts
Fix available
3 of 3
affected packages

curl-8.11.0-1.1 on GA media

Carried by container images the latest versions of 502 of 17,781 indexed charts deploy, on 502 images.

Affected packageAffected versionsFixed inImages
curldeb7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+19 more7.81.0-1ubuntu1.19, 7.88.1-10+deb12u9, 8.5.0-2ubuntu10.5309
curlapk8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+13 more8.11.0-r0191
curlrpm7.60.0-lp151.5.6.18.11.0-1.12
OSV records
ALPINE-CVE-2024-9681CGA-6vgx-rqv6-p48qDEBIAN-CVE-2024-9681UBUNTU-CVE-2024-9681openSUSE-SU-2024:14476-1
Also known as
CGA-f97r-fwm9-2xxp, USN-7104-1

Charts affected

502 by stars
ChartLatestAffected imagesRadar Score
temporalcastaiVerified publisher0.54.24 of 14See more

temporal castai 0.54.2

4 of the 14 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
curl@8.5.0-r0
8.11.0-r0
temporalio/admin-tools:1.26.237e2e33dbd7b
curl@8.9.1-r2
8.11.0-r0
temporalio/server:1.26.21e2626efcbc1
curl@8.9.1-r2
8.11.0-r0
temporalio/ui:2.33.05c586a3c8ec5
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

16,198
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9

Open the chart page →

5,778
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.19

Open the chart page →

6,447
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u9

Open the chart page →

5,982
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u9

Open the chart page →

11,995
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9

Open the chart page →

8,009
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

5,141
commonground-gatewaycommonground-gateway-frontend0.1.51 of 4See more

commonground-gateway commonground-gateway-frontend 0.1.5

1 of the 4 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

2,825
mongodbcowboysysopVerified publisher15.1.51 of 1See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u9

Open the chart page →

6,161
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
curl@8.9.1-r1
8.11.0-r0

Open the chart page →

3,769
csghubcsghubVerified publisher2.4.32 of 34See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9

Open the chart page →

58,897
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u9

Open the chart page →

15,380
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u9

Open the chart page →

7,503
jupyterhubd4nVerified publisher3.3.72 of 7See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9
quay.io/jupyterhub/configurable-http-proxy:4.6.1fd916f75415f
curl@8.4.0-r0
8.11.0-r0

Open the chart page →

16,604
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.19

Open the chart page →

5,398
daejeon_2-3daejeon2-30.1.01 of 2See more

daejeon_2-3 daejeon2-3 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
clsen2024/daejeon_2-3:latest1156cd87c8fb
curl@8.9.0-r0
8.11.0-r0

Open the chart page →

1,141
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
curl@8.4.0-r0
8.11.0-r0

Open the chart page →

6,179
sentry-relaydasmeta0.1.21 of 1See more

sentry-relay dasmeta 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
getsentry/relay:24.10.0ba7bf9163219
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9

Open the chart page →

3,571
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9

Open the chart page →

10,090
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

4,509
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9

Open the chart page →

6,075
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.19

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.19

Open the chart page →

29,033
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9

Open the chart page →

9,607
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
curl@7.81.0-1ubuntu1.7
7.81.0-1ubuntu1.19

Open the chart page →

12,949
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u9

Open the chart page →

68,240
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
curl@7.81.0-1ubuntu1.10
7.81.0-1ubuntu1.19

Open the chart page →

4,928
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9

Open the chart page →

9,607
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
curl@7.81.0-1ubuntu1.7
7.81.0-1ubuntu1.19

Open the chart page →

12,949
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u9

Open the chart page →

68,240
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
curl@7.81.0-1ubuntu1.10
7.81.0-1ubuntu1.19

Open the chart page →

4,928
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u9

Open the chart page →

32,902
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9

Open the chart page →

19,224
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9

Open the chart page →

7,141
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
curl@8.5.0-2ubuntu10.1
8.5.0-2ubuntu10.5

Open the chart page →

16,954
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9

Open the chart page →

14,627
codecovdoubanVerified publisher0.2.43 of 8See more

codecov douban 0.2.4

3 of the 8 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
curl@8.5.0-r0
8.11.0-r0
codecov/self-hosted-worker:24.4.1837f546b479b
curl@8.5.0-r0
8.11.0-r0
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
curl@7.81.0-1ubuntu1.7
7.81.0-1ubuntu1.19

Open the chart page →

24,917
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
curl@8.3.0-r0
8.11.0-r0

Open the chart page →

3,659
tencentcloud-exporterdoubanVerified publisher0.2.21 of 1See more

tencentcloud-exporter douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tencentcloud-exporter:masterca51b6bb15dd
curl@8.2.1-r0
8.11.0-r0

Open the chart page →

1,439
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
curl@7.81.0-1ubuntu1.2
7.81.0-1ubuntu1.19

Open the chart page →

30,699
temporaldtrdnk-helm-chartsVerified publisher0.35.03 of 13See more

temporal dtrdnk-helm-charts 0.35.0

3 of the 13 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.4258958fe2ff2
curl@8.4.0-r0
8.11.0-r0
temporalio/server:1.22.4c0a44c26397b
curl@8.4.0-r0
8.11.0-r0
temporalio/ui:2.16.2af9c9349708f
curl@8.1.2-r0
8.11.0-r0

Open the chart page →

20,205
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9

Open the chart page →

9,244
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
curl@7.81.0-1ubuntu1.17
7.81.0-1ubuntu1.19

Open the chart page →

9,764
kube-ecp-stackemqx-operator2.5.12 of 16See more

kube-ecp-stack emqx-operator 2.5.1

2 of the 16 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9
library/telegraf:1.27507a3eecf809
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u9

Open the chart page →

23,685
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9

Open the chart page →

6,131
eoapi-supporteoapiVerified publisher0.1.71 of 7See more

eoapi-support eoapi 0.1.7

1 of the 7 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
curl@8.5.0-r0
8.11.0-r0

Open the chart page →

8,648
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.19

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-9681.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.19

Open the chart page →

32,205

Container images carrying it

502 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
curl@8.10.1-r0
8.11.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
curl@8.5.0-r0
8.11.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.