StackRadar

CVE-2025-14819

Medium

Advisory

Published 6 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
656
of 17,787 indexed, latest versions
Container images
651
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 656 of 17,787 indexed charts deploy, on 651 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.88.1-10, 7.88.1-10+deb12u1, 7.88.1-10+deb12u4+16 more1:8.14.1-2+deb13u3+e2, 7.88.1-10+deb12u15, 8.5.0-2ubuntu10.7, 8.14.1-2+deb13u4+1 more546
curlapk8.12.1-r0, 8.17.0-r18.18.0-r0105
OSV records
ALPINE-CVE-2025-14819DEBIAN-CVE-2025-14819UBUNTU-CVE-2025-14819ECHO-2c28-953d-b5a0
Also known as
USN-8062-1

Charts affected

656 by stars
ChartLatestAffected imagesRadar Score
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

7,643
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

5,548
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

2,383
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

7,685
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15

Open the chart page →

13,197
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

1,571

Container images carrying it

651 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
istio/examples-helloworld-v2:latest0a7f02b2c7c9
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
istio/install-cni:1.23.6ab34c4740f44
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
istio/install-cni:1.29.0ce27c9ce43c8
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
istio/pilot:1.29.0325156535773
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
istio/pilot:1.23.69c3d6a218181
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
istio/ztunnel:1.25.005f3972d80a9
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
ixsystems/truecommand:3.2.019c218455cd2
curl@8.14.1-2
8.14.1-2+deb13u4
1
jaedb/iris:latest048cfbf58d57
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
jellyfin/jellyfin:10.11.81694ff069f0c
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
jellyfin/jellyfin:10.11.717285f9cce63
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
jellyfin/jellyfin:10.11.6333b64771663
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15
1
jellyfin/jellyfin:10.10.77ae36aab93ef
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
jellyfin/jellyfin:10.10.696b09723b22f
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
jordan/icinga2:latestf75025fe8ea8
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
curl@8.5.0-2ubuntu10.4
8.5.0-2ubuntu10.7
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
curl@8.17.0-r1
8.18.0-r0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
curl@8.17.0-r1
8.18.0-r0
1
kinseii/wazuh-agent:4.14.17160eb143728
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
knspar/phronetis-operator:0.1.60c4f0543ee58
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
curl@8.17.0-r1
8.18.0-r0
1
kuzwolka/aws9:main1ad759b961b1
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
kuzwolka/aws9:news3e8880fbbb96
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
kuzwolka/aws9:blog4a7707410bf1
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
kuzwolka/aws9:shop84a9d9766345
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
laly9999/node-app:1dd0e503913e1
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
langflowai/langflow-frontend:latest54f67f1961fe
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
langgenius/dify-api:1.0.0066035f93856
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
langgenius/dify-api:0.6.11fca918260dd6
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
lbenicio/stremio-web:latest732f9003de33
curl@8.17.0-r1
8.18.0-r0
1
lib42/jackett:latesta55596cda383
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
library/caddy:2.11.2-alpine834468128c76
curl@8.17.0-r1
8.18.0-r0
1
library/couchdb:3.4.22817ad50b5c5
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
library/httpd:2.4.631ae8051591a5
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
library/influxdb:1.12.3-meta8812029260b5
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
library/influxdb:1.12.3-datab0f9fc41ed79
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
library/matomo:5.1.2-apache2415789e1602
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
library/mongo:8.0.11dca8d11fe467
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
library/nextcloud:31.0.6-apache588609d76b21
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
library/nextcloud:31.0.10-apacheb7faa1653c39
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
library/nginx:1.27.409369da6b103
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
library/nginx:1.291881968aff6f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
library/nginx:1.29.8-alpine5616878291a2
curl@8.17.0-r1
8.18.0-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.