CVE-2024-9681

Medium

Advisory

Published 6 Nov 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.020; 79th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 502; of 17,781 indexed, latest versions
Container images: 502; deployed by those charts
Fix available: 3 of 3; affected packages

curl-8.11.0-1.1 on GA media

Carried by container images the latest versions of 502 of 17,781 indexed charts deploy, on 502 images.

Affected package	Affected versions	Fixed in	Images
curldeb	7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+19 more	7.81.0-1ubuntu1.19, 7.88.1-10+deb12u9, 8.5.0-2ubuntu10.5	309
curlapk	8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+13 more	8.11.0-r0	191
curlrpm	7.60.0-lp151.5.6.1	8.11.0-1.1	2

OSV records: ALPINE-CVE-2024-9681 CGA-6vgx-rqv6-p48q DEBIAN-CVE-2024-9681 UBUNTU-CVE-2024-9681 openSUSE-SU-2024:14476-1
Also known as: CGA-f97r-fwm9-2xxp, USN-7104-1

Charts affected

502 by stars

Chart

Latest

Affected images

Radar Score

prometheusalertygqygq2

1.0.0

1 of 1 See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container image	Digest	Package	Fixed in
feiyu563/prometheus-alert :v4.9.1	224cfa68cbd9	curl@8.5.0-r0	8.11.0-r0

Open the chart page →

1,611

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-9681.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	curl@8.5.0-r0	8.11.0-r0

Open the chart page →

1,589

Container images carrying it

502 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u9	2
organizr/organizr :latest	1ce319d73cdf	curl@8.4.0-r0	8.11.0-r0	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	curl@7.81.0-1ubuntu1.4	7.81.0-1ubuntu1.19	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u9	2
quickwit/quickwit :v0.8.2	363ff56ce456	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u9	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	curl@7.81.0-1ubuntu1.2	7.81.0-1ubuntu1.19	2
temporalio/server :1.22.4	c0a44c26397b	curl@8.4.0-r0	8.11.0-r0	2
temporalio/ui :2.16.2	af9c9349708f	curl@8.1.2-r0	8.11.0-r0	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	curl@7.81.0-1ubuntu1.10	7.81.0-1ubuntu1.19	2
uffizzi/controller :latest	0344805f267b	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u9	2
vdiogov/glpi-conteiner :latest	6945f84f0058	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u9	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.19	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.19	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u9	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u9	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	curl@7.81.0-1ubuntu1.2	7.81.0-1ubuntu1.19	2
registry.k8s.io/ingress-nginx/controller :v1.9.4	5b161f051d01	curl@8.4.0-r0	8.11.0-r0	2
registry.k8s.io/ingress-nginx/controller :v1.9.5	b3aba22b1da8	curl@8.5.0-r0	8.11.0-r0	2
aboogie/login_test_backend :new	9c41a4483ac8	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u9	1
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.5	1
airbyte/pod-sweeper :1.5.1	98d2c39d512e	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u9	1
akaunting/akaunting :3.0.15	52811b36ec3a	curl@7.88.1-10	7.88.1-10+deb12u9	1
allegroai/clearml :2.0.0-613	713ae38f7daf	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u9	1
alpine/curl :8.5.0	513c4f0d7123	curl@8.5.0-r0	8.11.0-r0	1
alpine/helm	105741fa6621	curl@8.9.0-r0	8.11.0-r0	1
alpine/k8s :1.27.3	21b24e6bf801	curl@8.1.2-r0	8.11.0-r0	1
alpine/k8s :1.30.0	bd01dae02676	curl@8.5.0-r0	8.11.0-r0	1
alpine/k8s :1.30.2	cd560fce90f7	curl@8.8.0-r0	8.11.0-r0	1
alpine/k8s :1.28.13	e5c0b053fed7	curl@8.9.0-r0	8.11.0-r0	1
alpine/k8s :1.28.2	fc059f056ad0	curl@8.3.0-r0	8.11.0-r0	1
andrcuns/smocker :0.18.5	b4a8eb20581a	curl@8.4.0-r0	8.11.0-r0	1
andrewgaul/s3proxy :sha-85b0f98	7dc1d34174a5	curl@8.5.0-2ubuntu10.4	8.5.0-2ubuntu10.5	1
apache/activemq-artemis :2.37.0	bae523439ee3	curl@8.5.0-2ubuntu10.2	8.5.0-2ubuntu10.5	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u9	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u9	1
apache/airflow :2.8.1	e5560ad0b86e	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u9	1
apache/nifi-registry :1.27.0	63b8e3e40742	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.19	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	curl@7.81.0-1ubuntu1.13	7.81.0-1ubuntu1.19	1
apachepulsar/pulsar :3.0.7	9c9947de139d	curl@7.81.0-1ubuntu1.18	7.81.0-1ubuntu1.19	1
apache/rocketmq :5.3.0	434d8398f996	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.5	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.19	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.19	1
apache/skywalking-ui :9.2.0	295f1dc87d98	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.19	1
apache/superset :4.0.1	ab9467fd712c	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u9	1
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	curl@8.5.0-r0	8.11.0-r0	1
aquasec/postee :2.12.0-amd64	0795cba777e7	curl@8.1.2-r0	8.11.0-r0	1
aquasec/trivy :0.43.1	944a04445179	curl@8.1.2-r0	8.11.0-r0	1
aristidetm/basic-notebook :3.6.5	469dbc951224	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u9	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u9	1
assistiot/location_processing :latest	e9bae124095f	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.19	1