StackRadar

CVE-2025-13034

Medium

Advisory

Published 6 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
74
of 17,781 indexed, latest versions
Container images
71
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 74 of 17,781 indexed charts deploy, on 71 images.

Affected packageAffected versionsFixed inImages
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2ubuntu18.14.1-2+deb13u3, 8.14.1-2ubuntu1.171
OSV records
DEBIAN-CVE-2025-13034UBUNTU-CVE-2025-13034
Also known as
USN-8062-1

Charts affected

74 by stars
ChartLatestAffected imagesRadar Score
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

5,366
emqxemqx-operator5.8.91 of 1See more

emqx emqx-operator 5.8.9

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
emqx/emqx:5.8.935b46f7aa7a0
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

2,705
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
curl@8.14.1-2
8.14.1-2+deb13u3

Open the chart page →

5,634
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

4,332
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

9,316
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
instill/mgmt-backend:d0933d4ebe12f77a3f9
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
instill/model-backend:611f0f2e980125e5ba5
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

30,816
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

107,811
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

12,037
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

11,205
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

31,510
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

4,879
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
curl@8.14.1-2
8.14.1-2+deb13u3

Open the chart page →

15,712
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
curl@8.14.1-2
8.14.1-2+deb13u3

Open the chart page →

11,764
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
curl@8.14.1-2ubuntu1
8.14.1-2ubuntu1.1

Open the chart page →

11,103
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

3,681
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

7,126
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

3,240
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

7,696
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

5,558
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

3,239
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
curl@8.14.1-2
8.14.1-2+deb13u3

Open the chart page →

7,489
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

2,738
kitchenowlchart-kitchenowl0.1.121 of 2See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

4,803
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

7,168
gitea-jenkinsclusterfactory0.1.11 of 5See more

gitea-jenkins clusterfactory 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

5,238
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
curl@8.14.1-2
8.14.1-2+deb13u3

Open the chart page →

5,174
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
curl@8.14.1-2
8.14.1-2+deb13u3

Open the chart page →

3,455
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

13,391
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

7,233
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

5,039
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
fireflyiii/data-importer:version-2.2.3ab52bf932546
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

10,260
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

4,829
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

2,511
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
curl@8.14.1-2
8.14.1-2+deb13u3

Open the chart page →

8,923
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

9,342
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

10,849
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

29,817
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

3,281
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

3,430
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
curl@8.14.1-2
8.14.1-2+deb13u3

Open the chart page →

4,751
jellyfinjellyfin--jellyfin-helm3.0.01 of 1See more

jellyfin jellyfin--jellyfin-helm 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.717285f9cce63
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

3,001
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
moreillon/group-manager-front:latest5f0a38498271
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

63,461
jupyter-hub-customizationsjupyter-jscVerified publisher0.27.171 of 4See more

jupyter-hub-customizations jupyter-jsc 0.27.17

1 of the 4 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
library/nginx:1.291881968aff6f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

3,389
jupyter-nginxjupyter-jscVerified publisher0.1.31 of 1See more

jupyter-nginx jupyter-jsc 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

3,508
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

3,460
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

9,103
vaultwardenk8s-home-lab-repo6.2.31 of 1See more

vaultwarden k8s-home-lab-repo 6.2.3

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.79a8eec71f4a5
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

2,854
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

4,568
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

9,620
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2025-13034.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3

Open the chart page →

8,405

Container images carrying it

71 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
curl@8.14.1-2
8.14.1-2+deb13u3
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
curl@8.14.1-2
8.14.1-2+deb13u3
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
curl@8.14.1-2
8.14.1-2+deb13u3
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/monicahq/monica-next:main8be69156acbb
curl@8.14.1-2
8.14.1-2+deb13u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u3
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
8.14.1-2+deb13u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.