CVE-2025-9086
HighAdvisory
Published 10 Sept 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.014
- 71st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 579
- of 17,787 indexed, latest versions
- Container images
- 632
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: curl security update
Carried by container images the latest versions of 579 of 17,787 indexed charts deploy, on 632 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 1:8.14.1-2+deb13u3+e1, 7.74.0-1.3+b1, 7.74.0-1.3+deb11u1, 7.74.0-1.3+deb11u2+12 more | 7.74.0-1.3+deb11u16, 8.14.1-2+deb13u1, 8.14.1-2+e1, 8.14.1-2ubuntu1.1 | 291 |
| curlapk | 8.14.0-r2, 8.14.1-r0, 8.14.1-r1 | 8.14.1-r2 | 35 |
| curlrpm | 7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+34 more | 0:7.61.1-34.el8_10.9, 0:7.76.1-23.el9_2.8, 0:7.76.1-29.el9_4.3, 0:7.76.1-31.el9_6.2+2 more | 306 |
Charts affected
579 by stars
Container images carrying it
632 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| socialmediamacroscope/ | 51cb17626519 | curl | 7.74.0-1.3+deb11u16 | 1 |
| socialmediamacroscope/ | 74e35f64db68 | curl | 7.74.0-1.3+deb11u16 | 1 |
| socialmediamacroscope/ | 724f3f5702e0 | curl | 7.74.0-1.3+deb11u16 | 1 |
| sonatype/ | 4bd975493104 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| sonatype/ | 586060431b64 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| sosedoff/ | a5256d416e2e | curl | 7.74.0-1.3+deb11u16 | 1 |
| speckle/ | 82c052441110 | curl | 7.74.0-1.3+deb11u16 | 1 |
| speckle/ | d5f689c9256c | curl | 7.74.0-1.3+deb11u16 | 1 |
| speckle/ | d9b58995a8b8 | curl | 7.74.0-1.3+deb11u16 | 1 |
| splunk/ | c4e0d3146226 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| stakater/ | 97bf456cc97c | curl | 0:7.61.1-34.el8_10.9 | 1 |
| stratospire/ | a4c34cb01117 | curl | 7.74.0-1.3+deb11u16 | 1 |
| supabase/ | d429005429ce | curl | 7.74.0-1.3+deb11u16 | 1 |
| svtechnmaa/ | a59d0b81dde2 | curl | 7.74.0-1.3+deb11u16 | 1 |
| t3nde/ | 77e008f764db | curl | 7.74.0-1.3+deb11u16 | 1 |
| tachyongroup/ | f4f7fabe1037 | curl | 7.74.0-1.3+deb11u16 | 1 |
| tautulli/ | c4da15f058ea | curl | 7.74.0-1.3+deb11u16 | 1 |
| temporalio/ | a3a52e6ca122 | curl | 8.14.1-r2 | 1 |
| temporalio/ | 5b3502a3b685 | curl | 8.14.1-r2 | 1 |
| temporalio/ | c1e3326b2ce1 | curl | 8.14.1-r2 | 1 |
| th0th/ | d06fa39f7406 | curl | 7.74.0-1.3+deb11u16 | 1 |
| tksky1/ | ec7b889f380f | curl | 7.74.0-1.3+deb11u16 | 1 |
| torrespro/ | 6d3bd305a1ba | curl | 7.74.0-1.3+deb11u16 | 1 |
| trinodb/ | 38c6f24ab1a4 | curl | 0:7.76.1-29.el9_4.3 | 1 |
| trinodb/ | 6af989b0846d | curl | 0:8.12.1-2.el10_1.2 | 1 |
| udhos/ | 728013f2fac1 | curl | 8.14.1-r2 | 1 |
| uffizzi/ | 66e9e3937c60 | curl | 7.74.0-1.3+deb11u16 | 1 |
| vaultwarden/ | c2849f8189e4 | curl | 7.74.0-1.3+deb11u16 | 1 |
| vcnngr/ | 4e4979ab8c41 | curl | 8.14.1-r2 | 1 |
| viniciusfcf/ | bba8ee1b5cd5 | curl | 0:7.61.1-34.el8_10.9 | 1 |
| vividplanet/ | ae1c5b1cbecb | curl | 0:7.61.1-34.el8_10.9 | 1 |
| vlebediantsev/ | e7f20450d2ae | curl | 7.74.0-1.3+deb11u16 | 1 |
| vlebediantsev/ | 10393a89b4a8 | curl | 7.74.0-1.3+deb11u16 | 1 |
| vlebediantsev/ | df8bf38c535b | curl | 7.74.0-1.3+deb11u16 | 1 |
| vlebediantsev/ | 427af418b75e | curl | 7.74.0-1.3+deb11u16 | 1 |
| vlebediantsev/ | 9319437f3c8f | curl | 7.74.0-1.3+deb11u16 | 1 |
| volkerraschek/ | c4f10aebf87b | curl | 7.74.0-1.3+deb11u16 | 1 |
| xtrendence/ | e6e6612bb94c | curl | 7.74.0-1.3+deb11u16 | 1 |
| youssef11gaber10/ | ba6853e35c60 | curl | 7.74.0-1.3+deb11u16 | 1 |
| zbalogh/ | 5eb19e460b3c | curl | 8.14.1-r2 | 1 |
| zbalogh/ | 7c247e399a1f | curl | 7.74.0-1.3+deb11u16 | 1 |
| zzorica/ | 640ca4de2922 | curl | 7.74.0-1.3+deb11u16 | 1 |
| gcr.io/ | 5a0884f9a90c | curl | 0:7.76.1-35.el9_7.3 | 1 |
| gcr.io/ | 02b90651367f | curl | 0:7.76.1-35.el9_7.3 | 1 |
| gcr.io/ | 9e507ac0aebb | curl | 0:7.76.1-35.el9_7.3 | 1 |
| gcr.io/ | a2259b098b13 | curl | 0:7.76.1-35.el9_7.3 | 1 |
| gcr.io/ | a461dc5cb96a | curl | 0:7.76.1-35.el9_7.3 | 1 |
| gcr.io/ | ec3ae9f6df47 | curl | 7.74.0-1.3+deb11u16 | 1 |
| ghcr.io/ | 2a115e991894 | curl | 7.74.0-1.3+deb11u16 | 1 |
| ghcr.io/ | 8ec6c4812a7e | curl | 0:7.76.1-31.el9_6.2 | 1 |