StackRadar

CVE-2025-14819

Medium

Advisory

Published 6 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
656
of 17,787 indexed, latest versions
Container images
651
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 656 of 17,787 indexed charts deploy, on 651 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.88.1-10, 7.88.1-10+deb12u1, 7.88.1-10+deb12u4+16 more1:8.14.1-2+deb13u3+e2, 7.88.1-10+deb12u15, 8.5.0-2ubuntu10.7, 8.14.1-2+deb13u4+1 more546
curlapk8.12.1-r0, 8.17.0-r18.18.0-r0105
OSV records
ALPINE-CVE-2025-14819DEBIAN-CVE-2025-14819UBUNTU-CVE-2025-14819ECHO-2c28-953d-b5a0
Also known as
USN-8062-1

Charts affected

656 by stars
ChartLatestAffected imagesRadar Score
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

7,643
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

5,548
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

2,383
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

7,685
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15

Open the chart page →

13,197
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2025-14819.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
curl@8.17.0-r1
8.18.0-r0

Open the chart page →

1,571

Container images carrying it

651 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/nginx:1.276784fb0834aa
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
library/nginx:1.25.167f9a4f10d14
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u15
1
library/nginx:1.25.49ff236ed47fe
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
library/nginx:1.28-alpinea8b39bd9cf0f
curl@8.17.0-r1
8.18.0-r0
1
library/nginx:1.27.3fb197595ebe7
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
library/node:208f693eaa7e0a
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
library/postgres:18.3-alpine54451ecb8ab3
curl@8.17.0-r1
8.18.0-r0
1
library/python:3.8d41127070014
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
1
library/python:3.9da5aee29682d
curl@8.14.1-2
8.14.1-2+deb13u4
1
library/redmine:6.1.204ac44a2595b
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4
1
library/telegraf:1.27507a3eecf809
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
library/wordpress:6.4.3-apache8ae66efb09a2
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4
1
library/wordpress:php8.1-apachef73396626d2f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
linuxserver/calibre-web:0.6.24241009026e6f
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.7
1
linuxserver/foldingathome:7.6.219a997426d71e
curl@8.5.0-2ubuntu10.1
8.5.0-2ubuntu10.7
1
lis314/project-zomboid-docker:latestaa2089c37920
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
localstack/localstack:3.19d278167f2b7
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
louislam/uptime-kuma:2.5.33e24e96c89ef
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
louislam/uptime-kuma:2.0.24c364ef96aad
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
louislam/uptime-kuma:2.4.091e963bfda56
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
luligu/matterbridge:3.0.28f97884bebc2
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
makersquad/harp-proxy:0.8.1a40dd258c527
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
martinhelmich/typo3:12.4c83a4f3fd7ae
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
mathesar/mathesar:0.12.0091757cb01fe
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
1
matterlabs/external-node:v24.0.06cbfea4c694a
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
mautic/mautic:7-apacheeb8cc73d97e1
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
mawad98/backstage-pyactions:demo99422c56a274
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
middlewareeng/middleware:0.3.1747d880812f1
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
mindsdb/mindsdb:latest163011c09299
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
moreillon/api-proxy:latestd7d4a5463525
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
moreillon/camera-viewer:lateste418cc694bd5
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
moreillon/food-manager:lateste8fd856e593d
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
moreillon/group-manager:latest3caa8f710ee0
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
moreillon/group-manager-front:latest5f0a38498271
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
moreillon/user-manager-front:v5.1.06597e6b98d21
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u15
1
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
curl@8.17.0-r1
8.18.0-r0
1
muhammedgamal/fp23:latest74b4cd69b6fa
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15
1
murtazashah46/helmfile:latest4d11726cf803
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
1
mybb/mybb:1.8f2a54bce31c5
curl@8.17.0-r1
8.18.0-r0
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4
1
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
curl@8.17.0-r1
8.18.0-r0
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
curl@8.14.1-2
8.14.1-2+deb13u4
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.