StackRadar

CVE-2025-14524

Medium

Advisory

Published 6 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,186
of 17,790 indexed, latest versions
Container images
1,107
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,186 of 17,790 indexed charts deploy, on 1,107 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16+87 more1:8.14.1-2+deb13u3+e2, 7.81.0-1ubuntu1.22, 7.88.1-10+deb12u15, 8.5.0-2ubuntu10.7+2 more1,003
curlapk8.12.1-r0, 8.17.0-r18.18.0-r0104
OSV records
ALPINE-CVE-2025-14524DEBIAN-CVE-2025-14524UBUNTU-CVE-2025-14524ECHO-5c48-9921-1026
Also known as
USN-8062-1

Charts affected

1,186 by stars
ChartLatestAffected imagesRadar Score
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
curl@7.47.0-1ubuntu2.19
no fix listed

Open the chart page →

18,526
mongodbkubesphere-testVerified publisher0.3.21 of 2See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
curl@7.58.0-2ubuntu3.8
no fix listed

Open the chart page →

9,631
mysqlkubesphere-testVerified publisher1.0.21 of 3See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
curl@7.68.0-1ubuntu2.5
no fix listed

Open the chart page →

7,384
xenondbkubesphere-testVerified publisher1.0.01 of 3See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
curl@7.68.0-1ubuntu2.5
no fix listed

Open the chart page →

7,384
network-enforcerkubewardenVerified publisher0.1.21 of 3See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0.4ca08b7d2df5b
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

2,562
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

8,767
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
curl@7.81.0-1ubuntu1.18
7.81.0-1ubuntu1.22
penpotapp/exporter:2.2.15c835ffd87ab
curl@7.81.0-1ubuntu1.18
7.81.0-1ubuntu1.22

Open the chart page →

16,976
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.42 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
curl@8.14.1-2
8.14.1-2+deb13u4
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15

Open the chart page →

20,386
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
curl@7.81.0-1ubuntu1.20
7.81.0-1ubuntu1.22

Open the chart page →

6,913
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

3,148
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
curl@8.5.0-2ubuntu10.1
8.5.0-2ubuntu10.7

Open the chart page →

3,379
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
curl@7.58.0-2ubuntu3.13
no fix listed

Open the chart page →

16,539
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.22

Open the chart page →

7,848
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
curl@7.58.0-2ubuntu3.8
no fix listed

Open the chart page →

26,377
pageslatif-pages1.0.02 of 3See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
no fix listed
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
no fix listed

Open the chart page →

20,242
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
no fix listed
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
no fix listed

Open the chart page →

20,242
stremiolbenicio-communityVerified publisher0.1.11 of 2See more

stremio lbenicio-community 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
lbenicio/stremio-web:latest732f9003de33
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

2,601
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

33,540
kinesaliteleprechaun-charts0.1.21 of 1See more

kinesalite leprechaun-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
instructure/kinesalite:latest34400d82f28f
curl@7.68.0-1ubuntu2.25
no fix listed

Open the chart page →

4,273
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

4,643
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

38,239
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
curl@7.81.0-1ubuntu1.13
7.81.0-1ubuntu1.22

Open the chart page →

10,780
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
no fix listed
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
no fix listed

Open the chart page →

20,242
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4

Open the chart page →

2,626
node-redlmatfyVerified publisher0.1.61 of 1See more

node-red lmatfy 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
nodered/node-red:4.1.10-minimald73ae167cb9b
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

1,809
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

33,540
elasticvuelogic3579Verified publisher1.15.01 of 1See more

elasticvue logic3579 1.15.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
cars10/elasticvue:1.15.0efddf4fa0fd8
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

1,086
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.22

Open the chart page →

6,680
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15

Open the chart page →

6,578
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

17,858
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
curl@7.58.0-2ubuntu3.10
no fix listed
elastictranscoder/media-storage:f6d861a026208b8c2359
curl@7.58.0-2ubuntu3.10
no fix listed
elastictranscoder/transcoder:627e21dcb4a0327029e6
curl@7.58.0-2ubuntu3.9
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
curl@7.58.0-2ubuntu3.9
no fix listed

Open the chart page →

58,245
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

27,554
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4

Open the chart page →

2,626
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.22

Open the chart page →

24,537
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
novosga/novosga:latest34b9acbe6e51
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

3,713
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
curl@8.14.1-2
8.14.1-2+deb13u4

Open the chart page →

3,597
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
curl@7.68.0-1ubuntu2.24
no fix listed

Open the chart page →

4,152
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

8,409
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
curl@7.68.0-1ubuntu2.7
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
no fix listed

Open the chart page →

29,746
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

9,765
dependency-trackmediamarktsaturn1.9.22 of 2See more

dependency-track mediamarktsaturn 1.9.2

2 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
dependencytrack/frontend:4.14.200560b57a6cf
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

3,840
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

8,147
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15

Open the chart page →

5,886
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

5,455
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

2,584
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7

Open the chart page →

3,829
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
curl@7.68.0-1ubuntu2.2
no fix listed

Open the chart page →

12,052
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

7,452
nvidiamesosphere0.4.41 of 2See more

nvidia mesosphere 0.4.4

1 of the 2 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
nvidia/k8s-device-plugin:v0.9.0964847cc3fd8
curl@7.47.0-1ubuntu2.18
no fix listed

Open the chart page →

10,490
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry CVE-2025-14524.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

11,704

Container images carrying it

1,107 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
curl@8.17.0-r1
8.18.0-r0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
curl@8.17.0-r1
8.18.0-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
curl@8.17.0-r1
8.18.0-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
8.14.1-2+deb13u4
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u15
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
curl@8.17.0-r1
8.18.0-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.