StackRadarChart IndexLive demo

CVE-2025-13034

Medium

Advisory

Published 6 Jan 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.002; 15th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 74; of 17,781 indexed, latest versions
Container images: 71; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 74 of 17,781 indexed charts deploy, on 71 images.

Affected package	Affected versions	Fixed in	Images
curldeb	8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2ubuntu1	8.14.1-2+deb13u3, 8.14.1-2ubuntu1.1	71

OSV records: DEBIAN-CVE-2025-13034 UBUNTU-CVE-2025-13034
Also known as: USN-8062-1

Charts affected

74 by stars

Chart

Latest

Affected images

Radar Score

scrutinykubernetes-homelab-helm-charts

1 of 3 See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
ghcr.io/analogj/scrutiny :v0.9.2-web	71be54e99608	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

5,500

kube-wordpress-mysqlkube-wordpress-mysql

1 of 2 See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
library/wordpress :php8.1-apache	f73396626d2f	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

8,698

kubiya-runnerkubiya-helm-charts

1 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	curl@8.14.1-2	8.14.1-2+deb13u3

Open the chart page →

20,204

marge-botmarge-bot-helm

1 of 1 See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.16.0	b59f01bc0418	curl@8.14.1-2	8.14.1-2+deb13u3

Open the chart page →

3,574

backstagemcwarman

1 of 2 See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
ghcr.io/mcwarman/backstage-sample-app/app :main	fae3c1f04311	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

9,668

dependency-trackmediamarktsaturn

1 of 2 See more

dependency-track mediamarktsaturn 1.9.2

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
dependencytrack/apiserver :4.14.2	1ba4f004e1ec	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

3,818

tinymediamanagermedia-servarr

1 of 2 See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
tinymediamanager/tinymediamanager :5.3.2	2b34dc85099e	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

7,944

paperless-ngxmt190502

1 of 4 See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

11,950

vaultwardenmt190502

1 of 3 See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.35.4	43498a94b22f	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

4,710

core-keeper-dedicatednerkho-helm-charts

1 of 1 See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
escaping/core-keeper-dedicated :latest	87fa79255962	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

3,891

agent-controlnewrelic

1 of 1 See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
newrelic/newrelic-agent-control-cli :0.48.0	1a448492b55a	curl@8.14.1-2	8.14.1-2+deb13u3

Open the chart page →

3,843

linkdingpascaliske

1 of 1 See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

3,854

vaultwardenpascaliske

1 of 1 See more

vaultwarden pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
ghcr.io/dani-garcia/vaultwarden :1.35.2	d89a6d21e361	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

3,408

k8s-oidc-discovery-providerpnnl-miscscripts

1 of 2 See more

k8s-oidc-discovery-provider pnnl-miscscripts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
library/nginx :1.29.4	9dd288848f44	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

4,260

paperless-ngxrtomik-helm-charts

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

10,605

transmissionryuunosukeds3

1 of 2 See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
library/python :3.9	da5aee29682d	curl@8.14.1-2	8.14.1-2+deb13u3

Open the chart page →

9,534

nextcloudsb-helm-charts

1 of 2 See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.10-apache	b7faa1653c39	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

9,755

factorioschichtel

1 of 1 See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
factoriotools/factorio :2.0.67-rootless	f7909f7361d6	curl@8.14.1-2	8.14.1-2+deb13u3

Open the chart page →

2,971

wordpressschichtel

1 of 2 See more

wordpress schichtel 0.10.10

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
nginxinc/nginx-unprivileged :1.29.5	c5b989ebc150	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

8,184

jellyfinschoolguys-helmcharts

1 of 1 See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.8	1694ff069f0c	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

3,001

slothsloth

1 of 2 See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	curl@8.14.1-2	8.14.1-2+deb13u3

Open the chart page →

3,962

squadsquad

1 of 1 See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
cm2network/squad :latest	8cba47f53df5	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

2,487

jellyfinsudo-kraken-jellyfin

1 of 1 See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.6	333b64771663	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

3,389

app-startersynkube

1 of 1 See more

app-starter synkube 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-13034.

Container image	Digest	Package	Fixed in
library/nginx :latest	6e23479198b9	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3

Open the chart page →

3,240

Container images carrying it

71 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/analogj/scrutiny :v0.9.2-web	71be54e99608	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/dani-garcia/vaultwarden :1.35.2	d89a6d21e361	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/dask/dask-kubernetes-operator :2026.3.0	3225d2bc6b3c	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/dfir-iris/iriswebapp_app :v2.4.26	e59ebde55709	curl@8.14.1-2	8.14.1-2+deb13u3	1
ghcr.io/goauthentik/server :2026.2.1	46a71d75dfd3	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/htunn/ansible-inspec :0.2.12	cd25a5cc3f1b	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/immich-app/immich-server :v2.3.1	f8d06a32b1b2	curl@8.14.1-2	8.14.1-2+deb13u3	1
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	curl@8.14.1-2	8.14.1-2+deb13u3	1
ghcr.io/lloesche/valheim-server :latest	20fde516ce31	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/mcwarman/backstage-sample-app/app :main	fae3c1f04311	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/monicahq/monica-next :main	8be69156acbb	curl@8.14.1-2	8.14.1-2+deb13u3	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/reitermarkus/7d2d :main	39953b387b61	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u3	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	curl@8.14.1-2	8.14.1-2+deb13u3	1