CVE-2025-9086

High

Advisory

Published 10 Sept 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.014; 71st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 579; of 17,787 indexed, latest versions
Container images: 632; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: curl security update

Carried by container images the latest versions of 579 of 17,787 indexed charts deploy, on 632 images.

Affected package	Affected versions	Fixed in	Images
curldeb	1:8.14.1-2+deb13u3+e1, 7.74.0-1.3+b1, 7.74.0-1.3+deb11u1, 7.74.0-1.3+deb11u2+12 more	7.74.0-1.3+deb11u16, 8.14.1-2+deb13u1, 8.14.1-2+e1, 8.14.1-2ubuntu1.1	291
curlapk	8.14.0-r2, 8.14.1-r0, 8.14.1-r1	8.14.1-r2	35
curlrpm	7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+34 more	0:7.61.1-34.el8_10.9, 0:7.76.1-23.el9_2.8, 0:7.76.1-29.el9_4.3, 0:7.76.1-31.el9_6.2+2 more	306

OSV records: ALPINE-CVE-2025-9086 DEBIAN-CVE-2025-9086 UBUNTU-CVE-2025-9086 RHSA-2025:23043 RHSA-2025:23125 RHSA-2025:23127 RHSA-2025:23383 RHSA-2026:1350 RHSA-2026:1825 RLSA-2025:23383 RLSA-2026:1350 DLA-4432-1 ECHO-6a25-e091-8eb3
Also known as: USN-8062-1

Charts affected

579 by stars

Chart

Latest

Affected images

Radar Score

todolist-charttodolist-chart

0.1.7

1 of 10 See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
erenozcan17/react_frontend :v4.5	6e1b14973f9b	curl@8.14.1-r1	8.14.1-r2

Open the chart page →

6,974

token-servertoken-server

1.0.9

1 of 1 See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
udhos/token-server :1.0.9	728013f2fac1	curl@8.14.1-r1	8.14.1-r2

Open the chart page →

1,245

hermestouk

0.6.0

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.9

Open the chart page →

12,454

synapsetranhailong

0.1.0

1 of 2 See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.78.0	def97fd537d8	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u16

Open the chart page →

3,164

zookeepertwomartens

0.2.2

1 of 1 See more

zookeeper twomartens 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
confluentinc/cp-zookeeper :latest	7610a50b13e7	curl@7.61.1-34.el8_10.3	0:7.61.1-34.el8_10.9

Open the chart page →

1,733

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16

Open the chart page →

8,370

miniouninettsigma2

1.2.0

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	curl@7.61.1-22.el8_6.4	0:7.61.1-34.el8_10.9

Open the chart page →

4,960

simple-prima-notavcnngr

0.5.3

1 of 4 See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
vcnngr/pnfrontend :latest	4e4979ab8c41	curl@8.14.1-r1	8.14.1-r2

Open the chart page →

4,769

velero-notificationsvelero-notifications

1.1.0

1 of 1 See more

velero-notifications velero-notifications 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
ghcr.io/simoncaron/velero-notifications :1.0.0	d058963d4de7	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16

Open the chart page →

1,285

n8nvictorlane

1.0.18

1 of 1 See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
n8nio/n8n :1.115.1	ed16e560c40e	curl@8.14.1-r1	8.14.1-r2

Open the chart page →

6,470

vinyl-lib-chartvinyl-lib

0.1.0

1 of 1 See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
kporwit/vinyl_lib_app :v0.1.1	217de0302218	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16

Open the chart page →

3,392

resultappvoting-app-helm-charts-repo

1.0.0

1 of 1 See more

resultapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_result :v1	e510023fdf38	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16

Open the chart page →

1,263

voteappvoting-app-helm-charts-repo

1.0.0

2 of 5 See more

voteapp voting-app-helm-charts-repo 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_result :v1	e510023fdf38	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16
kodekloud/examplevotingapp_vote :v1	3a856afb02a3	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16

Open the chart page →

8,287

resultappvoting-app-helm-charts-repo-cloud

1.0.0

1 of 1 See more

resultapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_result :v1	e510023fdf38	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16

Open the chart page →

1,263

voteappvoting-app-helm-charts-repo-cloud

1.0.0

2 of 5 See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
kodekloud/examplevotingapp_result :v1	e510023fdf38	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16
kodekloud/examplevotingapp_vote :v1	3a856afb02a3	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16

Open the chart page →

8,287

apiwbstack

0.36.0

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16

Open the chart page →

2,019

mediawikiwbstack

0.14.0

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16

Open the chart page →

2,132

drillwearefrank

1.3.6

2 of 3 See more

drill wearefrank 1.3.6

2 of the 3 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u16

Open the chart page →

9,399

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	curl@7.61.1-18.el8	0:7.61.1-34.el8_10.9

Open the chart page →

28,699

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx :latest	6de60c83128d	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16

Open the chart page →

7,552

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	curl@7.61.1-14.el8_3.1	0:7.61.1-34.el8_10.9

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	curl@7.61.1-22.el8	0:7.61.1-34.el8_10.9

Open the chart page →

6,138

wexa-studiowexa-studio

1.2.0

3 of 15 See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	curl@8.14.1-r0	8.14.1-r2
temporalio/server :1.29.1	c1e3326b2ce1	curl@8.14.1-r0	8.14.1-r2
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	curl@7.61.1-34.el8_10.3	0:7.61.1-34.el8_10.9

Open the chart page →

14,618

vaultwardenwitcom-gmbh

0.2.0

1 of 2 See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.25.2	39f34c5159a2	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16

Open the chart page →

1,585

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16

Open the chart page →

2,021

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	curl@7.61.1-22.el8	0:7.61.1-34.el8_10.9

Open the chart page →

11,592

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	curl@7.61.1-25.el8_7.1	0:7.61.1-34.el8_10.9

Open the chart page →

6,016

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u16

Open the chart page →

1,838

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-9086.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	curl@7.61.1-25.el8_7.3	0:7.61.1-34.el8_10.9

Open the chart page →

3,697

Container images carrying it

632 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/flaresolverr/flaresolverr :v3.3.16	088412db1051	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u16	1
ghcr.io/flaresolverr/flaresolverr :v3.3.21	f104ee51e512	curl@7.74.0-1.3+deb11u11	7.74.0-1.3+deb11u16	1
ghcr.io/fleeksoft/hbase/hdfs :3.3.3.2	ac62269785ac	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16	1
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16	1
ghcr.io/grafana/alloy-operator :1.3.0	2088dcb22aaa	curl@7.76.1-31.el9	0:7.76.1-31.el9_6.2	1
ghcr.io/grafana/alloy-operator :1.7.0	2ce23f948e02	curl@7.76.1-31.el9_6.1	0:7.76.1-31.el9_6.2	1
ghcr.io/home-operations/beets :2.3.1	cc4975f1a0be	curl@8.14.0-r2	8.14.1-r2	1
ghcr.io/immich-app/immich-server :v2.3.1	f8d06a32b1b2	curl@8.14.1-2	8.14.1-2+deb13u1	1
ghcr.io/it-at-m/dave-document-storage/dave-document-storage :10.0.0	9c7fc07330c9	curl@7.76.1-34.el9	0:7.76.1-35.el9_7.3	1
ghcr.io/it-at-m/kf-app-eai :1.0.6	5de339b3d537	curl@7.76.1-31.el9_6.1	0:7.76.1-31.el9_6.2	1
ghcr.io/it-at-m/wjh-rechner :1.0.0	bc70cdb5a01a	curl@7.76.1-26.el9_3.3	0:7.76.1-35.el9_7.3	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	curl@7.61.1-12.el8	0:7.61.1-34.el8_10.9	1
ghcr.io/k10app/frontend :latest	066b5ac6b119	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16	1
ghcr.io/k10app/staticcache :latest	e77805689a8e	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16	1
ghcr.io/k8s-at-home/theme-park :v1.7.3	f8a5ec8f4669	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16	1
ghcr.io/k8snetworkplumbingwg/multus-dynamic-networks-controller :v0.3.7	2a2bb32c0ea8	curl@7.61.1-34.el8_10.3	0:7.61.1-34.el8_10.9	1
ghcr.io/kanisterio/controller :0.118.0	d22616a5998b	curl@7.76.1-34.el9	0:7.76.1-35.el9_7.3	1
ghcr.io/kiaedev/kiae :latest	ebd03028ff6a	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16	1
ghcr.io/kluster-manager/managed-serviceaccount :latest	365183f83ac9	curl@7.61.1-33.el8	0:7.61.1-34.el8_10.9	1
ghcr.io/kluster-manager/multicluster-controlplane :latest	6de40f528be9	curl@7.61.1-33.el8	0:7.61.1-34.el8_10.9	1
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	curl@8.14.1-2	8.14.1-2+deb13u1	1
ghcr.io/leoquote/tinyproxy_exporter :master	6b4103d88dbb	curl@7.74.0-1.3+b1	7.74.0-1.3+deb11u16	1
ghcr.io/libretime/libretime-analyzer :latest	3d5e236216ad	curl@7.74.0-1.3+deb11u15	7.74.0-1.3+deb11u16	1
ghcr.io/libretime/libretime-api :latest	eae026cc8909	curl@7.74.0-1.3+deb11u15	7.74.0-1.3+deb11u16	1
ghcr.io/libretime/libretime-legacy :latest	35b4531189c2	curl@7.74.0-1.3+deb11u15	7.74.0-1.3+deb11u16	1
ghcr.io/libretime/libretime-playout :latest	71a8706531aa	curl@7.74.0-1.3+deb11u15	7.74.0-1.3+deb11u16	1
ghcr.io/linuxforhealth/fhir-schematool :5.1.1	f62cefee6ef6	curl@7.61.1-34.el8_10.2	0:7.61.1-34.el8_10.9	1
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	curl@7.76.1-31.el9	0:7.76.1-31.el9_6.2	1
ghcr.io/lsst-sqre/strimzi-registry-operator :0.6.0	7e25f7048aff	curl@7.74.0-1.3+deb11u2	7.74.0-1.3+deb11u16	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u16	1
ghcr.io/microboxlabs/miot-calendar :latest-jvm	7157cdc0bf5b	curl@7.76.1-34.el9	0:7.76.1-35.el9_7.3	1
ghcr.io/microboxlabs/miot-srv :latest	4ec11d229028	curl@7.76.1-34.el9	0:7.76.1-35.el9_7.3	1
ghcr.io/microboxlabs/miot-srv :latest	5796553b41ae	curl@7.76.1-34.el9	0:7.76.1-35.el9_7.3	1
ghcr.io/monicahq/monica-next :main	8be69156acbb	curl@8.14.1-2	8.14.1-2+deb13u1	1
ghcr.io/mroxso/pollstr :latest	0b4f97faa3d0	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u16	1
ghcr.io/nathanvaughn/webtrees :2.0.19	69423a100fab	curl@7.74.0-1.3+b1	7.74.0-1.3+deb11u16	1
ghcr.io/paperless-ngx/paperless-ngx :1.8.0	9bbc9a90641e	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16	1
ghcr.io/porelli/firefox-sync :syncstorage-rs-mysql-0.18.2	7d244e514216	curl@7.74.0-1.3+deb11u14	7.74.0-1.3+deb11u16	1
ghcr.io/port-labs/port-agent :v0.8.12	c92d1e223f5c	curl@1:8.14.1-2+deb13u3+e1	8.14.1-2+e1	1
ghcr.io/privacyengineering/hawk-monitor :master	13309f068a56	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16	1
ghcr.io/projectnessie/nessie :0.92.1	9efe3c74d55f	curl@7.76.1-29.el9_4	0:7.76.1-29.el9_4.3	1
ghcr.io/remla23-team17/app :1.0.0	5816dbddf47d	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u16	1
ghcr.io/remla23-team17/model-service :1.0.0	aa59fe2c4f6a	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u16	1
ghcr.io/rodg/nodecg-base :latest	31be4bf87070	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u16	1
ghcr.io/savonet/liquidsoap :v2.0.1	9e08148e1055	curl@7.74.0-1.3+b1	7.74.0-1.3+deb11u16	1
ghcr.io/sergelogvinov/keydb :6.3.3	76a19ddc3626	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u16	1
ghcr.io/simoncaron/velero-notifications :1.0.0	d058963d4de7	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u16	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	curl@7.74.0-1.3+deb11u1	7.74.0-1.3+deb11u16	1
ghcr.io/zystem-io/zymtrace-pub-ui :26.9.1	e951adf792cd	curl@8.14.1-r0	8.14.1-r2	1