StackRadar

CVE-2025-14524

Medium

Advisory

Published 6 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,186
of 17,790 indexed, latest versions
Container images
1,107
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,186 of 17,790 indexed charts deploy, on 1,107 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16+87 more1:8.14.1-2+deb13u3+e2, 7.81.0-1ubuntu1.22, 7.88.1-10+deb12u15, 8.5.0-2ubuntu10.7+2 more1,003
curlapk8.12.1-r0, 8.17.0-r18.18.0-r0104
OSV records
ALPINE-CVE-2025-14524DEBIAN-CVE-2025-14524UBUNTU-CVE-2025-14524ECHO-5c48-9921-1026
Also known as
USN-8062-1

Charts affected

1,186 by stars
ChartLatestAffected imagesRadar Score
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

11,827
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.02 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
curl@7.58.0-2ubuntu3.12
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
curl@7.58.0-2ubuntu3.12
no fix listed

Open the chart page →

24,726
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
curl@7.81.0-1ubuntu1.2
7.81.0-1ubuntu1.22

Open the chart page →

30,753
duckdb-uiduckdb-ui0.5.21 of 1See more

duckdb-ui duckdb-ui 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

4,488
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
curl@8.14.1-2
8.14.1-2+deb13u4

Open the chart page →

3,479
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
curl@7.47.0-1ubuntu2.14
no fix listed

Open the chart page →

19,835
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15

Open the chart page →

9,273
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

13,487
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
curl@7.81.0-1ubuntu1.17
7.81.0-1ubuntu1.22

Open the chart page →

9,808
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
curl@7.58.0-2ubuntu3.14
no fix listed

Open the chart page →

10,998
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
no fix listed
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
no fix listed

Open the chart page →

20,242
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
curl@7.68.0-1ubuntu2.25
no fix listed

Open the chart page →

5,153
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4

Open the chart page →

3,189
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
curl@7.68.0-1ubuntu2.25
no fix listed

Open the chart page →

7,360
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

30,217
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
curl@7.58.0-2ubuntu3.13
no fix listed

Open the chart page →

8,049
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
curl@7.68.0-1ubuntu2.14
no fix listed

Open the chart page →

25,263
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

10,610
kube-ecp-stackemqx-operator2.5.12 of 16See more

kube-ecp-stack emqx-operator 2.5.1

2 of the 16 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
library/telegraf:1.27507a3eecf809
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

23,813
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15

Open the chart page →

6,165
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

7,301
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
curl@7.58.0-2ubuntu3.12
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
curl@7.58.0-2ubuntu3.12
no fix listed

Open the chart page →

27,361
eoloPlanteolo-plannerVerified publisher0.1.02 of 7See more

eoloPlant eolo-planner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
curl@7.68.0-1ubuntu2.25
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.22

Open the chart page →

27,702
eoloplannereoloplannerVerified publisher0.1.02 of 7See more

eoloplanner eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.22
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

32,372
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.02 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
curl@7.68.0-1ubuntu2.25
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.22

Open the chart page →

27,702
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
curl@7.58.0-2ubuntu3.12
no fix listed
oscarsotosanchez/weatherservice:v1.0911ec961d10b
curl@7.58.0-2ubuntu3.12
no fix listed

Open the chart page →

27,327
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
curl@7.58.0-2ubuntu3.13
no fix listed

Open the chart page →

28,549
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

27,197
eoloplanteoloplant1.0.02 of 7See more

eoloplant eoloplant 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
curl@7.68.0-1ubuntu2.25
no fix listed
mastercloudapps/planner:v1.2340a950b311b2
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.22

Open the chart page →

27,702
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

27,822
servereoloserverVerified publisher0.1.02 of 7See more

server eoloserver 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.22
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

32,372
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
curl@7.68.0-1ubuntu2.16
no fix listed

Open the chart page →

9,402
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15

Open the chart page →

5,352
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4

Open the chart page →

6,566
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4

Open the chart page →

2,924
benchmarkoor-uiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-ui ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

1,339
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

4,479
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
curl@7.68.0-1ubuntu2.5
no fix listed

Open the chart page →

20,983
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.22

Open the chart page →

6,041
fairwinds-insightsfairwinds-stableVerified publisher10.1.101 of 13See more

fairwinds-insights fairwinds-stable 10.1.10

1 of the 13 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.49ccd82364762
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

3,820
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

3,796
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.21 of 18See more

farm-observability farm-observability 0.27.2

1 of the 18 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
grafana/grafana:13.0.1-security-012d1f9ae67c17
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

13,409
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.22

Open the chart page →

13,502
rospoferama0.4.31 of 1See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

6,049
vipienferama0.2.81 of 1See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

7,523
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
curl@7.47.0-1ubuntu2.14
no fix listed

Open the chart page →

14,692
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15

Open the chart page →

10,814
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
curl@8.5.0-2ubuntu10.2
8.5.0-2ubuntu10.7

Open the chart page →

12,538
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

5,107
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
fireflyiii/data-importer:version-2.2.3ab52bf932546
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

10,396

Container images carrying it

1,107 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
curl@8.17.0-r1
8.18.0-r0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
curl@8.17.0-r1
8.18.0-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
curl@8.17.0-r1
8.18.0-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
8.14.1-2+deb13u4
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u15
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
curl@8.17.0-r1
8.18.0-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.