CVE-2025-9086
HighAdvisory
Published 10 Sept 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.014
- 71st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 579
- of 17,787 indexed, latest versions
- Container images
- 632
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: curl security update
Carried by container images the latest versions of 579 of 17,787 indexed charts deploy, on 632 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 1:8.14.1-2+deb13u3+e1, 7.74.0-1.3+b1, 7.74.0-1.3+deb11u1, 7.74.0-1.3+deb11u2+12 more | 7.74.0-1.3+deb11u16, 8.14.1-2+deb13u1, 8.14.1-2+e1, 8.14.1-2ubuntu1.1 | 291 |
| curlapk | 8.14.0-r2, 8.14.1-r0, 8.14.1-r1 | 8.14.1-r2 | 35 |
| curlrpm | 7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+34 more | 0:7.61.1-34.el8_10.9, 0:7.76.1-23.el9_2.8, 0:7.76.1-29.el9_4.3, 0:7.76.1-31.el9_6.2+2 more | 306 |
Charts affected
579 by stars
Container images carrying it
632 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gurolakman/ | ce23b20a8a17 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| gurolakman/ | b22e746edd5d | curl | 0:7.61.1-34.el8_10.9 | 1 |
| gurolakman/ | bf18525c5ad9 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| gurolakman/ | 8739565c3ea2 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| ha33ona/ | 6affdfc644d0 | curl | 7.74.0-1.3+deb11u16 | 1 |
| hammerspaceinc/ | 395bee4504fc | curl | 0:7.76.1-35.el9_7.3 | 1 |
| hazelcast/ | f9d34300d330 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| healthchecks/ | e82bb0836e30 | curl | 7.74.0-1.3+deb11u16 | 1 |
| helga09/ | e283539bcb8c | curl | 7.74.0-1.3+deb11u16 | 1 |
| helga09/ | 7999bc8b77c0 | curl | 7.74.0-1.3+deb11u16 | 1 |
| hiboxsystems/ | 7235809b43b3 | curl | 7.74.0-1.3+deb11u16 | 1 |
| hiboxsystems/ | a96c10b61a59 | curl | 7.74.0-1.3+deb11u16 | 1 |
| hiboxsystems/ | b59f01bc0418 | curl | 8.14.1-2+deb13u1 | 1 |
| hivemq/ | 4d194450d48e | curl | 7.74.0-1.3+deb11u16 | 1 |
| hkotel/ | a7e6b6abe087 | curl | 7.74.0-1.3+deb11u16 | 1 |
| hotavneesh/ | a4579b163414 | curl | 7.74.0-1.3+deb11u16 | 1 |
| hugohg34/ | 503e5d8960ff | curl | 7.74.0-1.3+deb11u16 | 1 |
| hyperledgerk8s/ | 29a8af8be270 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| hyperledgerk8s/ | 729b3d128487 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| hyperledgerk8s/ | ed0b0c56f1ea | curl | 0:7.61.1-34.el8_10.9 | 1 |
| ibmcom/ | c796a4c693b4 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| ibmcom/ | 9c73804b37a3 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| ibmcom/ | d28bf361327a | curl | 0:7.61.1-34.el8_10.9 | 1 |
| ibmcom/ | cd5065df7304 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| ixsystems/ | 19c218455cd2 | curl | 8.14.1-2+deb13u1 | 1 |
| j0113/ | 696cb8ca9f4e | curl | 7.74.0-1.3+deb11u16 | 1 |
| jeboehm/ | 9da13edf5aa8 | curl | 8.14.1-r2 | 1 |
| jellyfin/ | 05a9734d7e83 | curl | 7.74.0-1.3+deb11u16 | 1 |
| jellyfin/ | ee24f4459a40 | curl | 7.74.0-1.3+deb11u16 | 1 |
| juicedata/ | d915e899e322 | curl | 7.74.0-1.3+deb11u16 | 1 |
| jupyterhub/ | 5a0ceed1300a | curl | 7.74.0-1.3+deb11u16 | 1 |
| jupyterhub/ | 8e4778efec8e | curl | 7.74.0-1.3+deb11u16 | 1 |
| kobotoolbox/ | b15679454415 | curl | 7.74.0-1.3+deb11u16 | 1 |
| kobotoolbox/ | bcacc01bccd4 | curl | 7.74.0-1.3+deb11u16 | 1 |
| kporwit/ | 217de0302218 | curl | 7.74.0-1.3+deb11u16 | 1 |
| kubebb/ | b746824819f3 | curl | 7.74.0-1.3+deb11u16 | 1 |
| kubeflow/ | 5783f6db428f | curl | 0:7.61.1-34.el8_10.9 | 1 |
| kubegems/ | e42e3aaacdd3 | curl | 7.74.0-1.3+deb11u16 | 1 |
| kubegems/ | f3c492a938ad | curl | 7.74.0-1.3+deb11u16 | 1 |
| kuberay/ | 4e6ac8a3a2c4 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| library/ | ee2117e77c35 | curl | 7.74.0-1.3+deb11u16 | 1 |
| library/ | 33eae14f0867 | curl | 0:7.76.1-31.el9_6.2 | 1 |
| library/ | ceb1ba4196ab | curl | 7.74.0-1.3+deb11u16 | 1 |
| library/ | 3536d368b898 | curl | 7.74.0-1.3+deb11u16 | 1 |
| library/ | ab589a3c466e | curl | 7.74.0-1.3+deb11u16 | 1 |
| library/ | f4e3b6489888 | curl | 7.74.0-1.3+deb11u16 | 1 |
| library/ | f5747a42e3ad | curl | 7.74.0-1.3+deb11u16 | 1 |
| library/ | b9872cd287ef | curl | 7.74.0-1.3+deb11u16 | 1 |
| library/ | da5aee29682d | curl | 8.14.1-2+deb13u1 | 1 |
| library/ | ed4450bab88f | curl | 7.74.0-1.3+deb11u16 | 1 |