StackRadar

CVE-2024-9681

Medium

Advisory

Published 6 Nov 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
500
of 17,787 indexed, latest versions
Container images
502
deployed by those charts
Fix available
3 of 3
affected packages

curl-8.11.0-1.1 on GA media

Carried by container images the latest versions of 500 of 17,787 indexed charts deploy, on 502 images.

Affected packageAffected versionsFixed inImages
curldeb7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+19 more7.81.0-1ubuntu1.19, 7.88.1-10+deb12u9, 8.5.0-2ubuntu10.5309
curlapk8.0.1-r2, 8.1.0-r0, 8.1.1-r1, 8.1.2-r0+13 more8.11.0-r0191
curlrpm7.60.0-lp151.5.6.18.11.0-1.12
OSV records
ALPINE-CVE-2024-9681CGA-6vgx-rqv6-p48qDEBIAN-CVE-2024-9681UBUNTU-CVE-2024-9681openSUSE-SU-2024:14476-1
Also known as
CGA-f97r-fwm9-2xxp, USN-7104-1

Charts affected

500 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

502 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
vlebediantsev/notes-project-front:latest945675fd2636
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u9
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u9
1
wallarm/ingress-controller:4.8.0-1a591b9c91570
curl@8.4.0-r0
8.11.0-r0
1
wistefan/mvf:lateste0887302b2d8
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.19
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.19
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.19
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.19
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.19
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
curl@8.5.0-2ubuntu10.1
8.5.0-2ubuntu10.5
1
gcr.io/kubecost1/frontend:prod-1.108.14c6df805bbf2
curl@8.5.0-r0
8.11.0-r0
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
curl@7.81.0-1ubuntu1.18
7.81.0-1ubuntu1.19
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.19
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.19
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
curl@8.4.0-r0
8.11.0-r0
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.19
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
curl@8.9.1-r1
8.11.0-r0
1
ghcr.io/cubeengine/sponge:1.20.2-11.0.0-RC13755c85f2b82064
curl@8.3.0-r0
8.11.0-r0
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.19
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
curl@8.5.0-r0
8.11.0-r0
1
ghcr.io/data-fair/metrics:0a8d40779eeae
curl@8.1.2-r0
8.11.0-r0
1
ghcr.io/data-fair/processings:15a9216989707
curl@8.5.0-r0
8.11.0-r0
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
curl@8.8.0-r0
8.11.0-r0
1
ghcr.io/devops-ia/kafka-cruise-control-ui:0.4.096c25035cb02
curl@8.5.0-r0
8.11.0-r0
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u9
1
ghcr.io/element-hq/hydrogen-web:v0.5.12d15d14b201a
curl@8.10.1-r0
8.11.0-r0
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u9
1
ghcr.io/gabe565/mnemonic-ninja:latest1fd90a9e4d04
curl@8.5.0-r0
8.11.0-r0
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
curl@8.9.1-r1
8.11.0-r0
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u9
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
curl@8.4.0-r0
8.11.0-r0
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
curl@8.5.0-2ubuntu10.4
8.5.0-2ubuntu10.5
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.19
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.19
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.19
1
ghcr.io/kubeshop/botkube:v1.14.0c6fe64c7bfcd
curl@8.9.1-r1
8.11.0-r0
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u9
1
ghcr.io/leoquote/tencentcloud-exporter:masterca51b6bb15dd
curl@8.2.1-r0
8.11.0-r0
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u9
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.19
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
curl@8.5.0-r0
8.11.0-r0
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
curl@8.2.1-r0
8.11.0-r0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
curl@8.5.0-r0
8.11.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.