StackRadar

CVE-2025-14819

Medium

Advisory

Published 6 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
653
of 17,787 indexed, latest versions
Container images
647
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 653 of 17,787 indexed charts deploy, on 647 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.88.1-10, 7.88.1-10+deb12u1, 7.88.1-10+deb12u4+16 more1:8.14.1-2+deb13u3+e2, 7.88.1-10+deb12u15, 8.5.0-2ubuntu10.7, 8.14.1-2+deb13u4+1 more543
curlapk8.12.1-r0, 8.17.0-r18.18.0-r0104
OSV records
ALPINE-CVE-2025-14819DEBIAN-CVE-2025-14819UBUNTU-CVE-2025-14819ECHO-2c28-953d-b5a0
Also known as
USN-8062-1

Charts affected

653 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

7,673
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15

Open the chart page →

13,677
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

1,571

Container images carrying it

647 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
2
opendatacube/ows:latest668cbb41473c
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
2
quickwit/quickwit:v0.8.2363ff56ce456
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
2
rajnandan1/kener:3.2.1930407afca731
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
2
requarks/wiki:2:latest68f0d1848261
curl@8.17.0-r1
8.18.0-r0
2
uffizzi/controller:latest0344805f267b
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
2
vdiogov/glpi-conteiner:latest6945f84f0058
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
curl@8.17.0-r1
8.18.0-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
curl@8.17.0-r1
8.18.0-r0
2
1dev/server:11.9.0cd5b12fe5471
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4
1
aboogie/login_test_backend:new9c41a4483ac8
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
curl@8.5.0-2ubuntu10.1
8.5.0-2ubuntu10.7
1
airbyte/pod-sweeper:1.5.198d2c39d512e
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
akaunting/akaunting:3.0.1552811b36ec3a
curl@7.88.1-10
7.88.1-10+deb12u15
1
aktosecurity/data-ingestion-service213aded7adc5
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
alazidis/stornx:1.1.1602d4f7f090c
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
allegroai/clearml:2.0.0-613713ae38f7daf
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
alpine/kubectl:1.36.01ee9df6316d4
curl@8.17.0-r1
8.18.0-r0
1
alpine/kubectl:1.35.0862d86046bbc
curl@8.17.0-r1
8.18.0-r0
1
alpine/kubectl:1.35.3c4a11ae9a1cb
curl@8.17.0-r1
8.18.0-r0
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
curl@8.5.0-2ubuntu10.4
8.5.0-2ubuntu10.7
1
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
anujdatar/cups:25.07.01685df04a643b
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
apache/activemq-artemis:2.44.00305c26f19ed
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
apache/activemq-artemis:2.37.0bae523439ee3
curl@8.5.0-2ubuntu10.2
8.5.0-2ubuntu10.7
1
apache/airflow:2.8.4-python3.964e58748b6b9
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
1
apache/airflow:2.8.1e5560ad0b86e
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
apache/hertzbeat:1.8.075d48a62748f
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
apache/rocketmq:5.3.0434d8398f996
curl@8.5.0-2ubuntu10.1
8.5.0-2ubuntu10.7
1
apache/superset:4.0.1ab9467fd712c
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
appwrite/appwrite:1.9.01aaa70127114
curl@8.17.0-r1
8.18.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.