StackRadar

CVE-2026-107929

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
446
of 18,131 indexed, latest versions
Container images
277
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 446 of 18,131 indexed charts deploy, on 277 images.

Affected packageAffected versionsFixed inImages
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+9 moreno fix listed277
OSV records
DEBIAN-CVE-2026-107929

Charts affected

446 by stars
ChartLatestAffected imagesRadar Score
gitlabgitlabVerified publisher10.4.27 of 21See more

gitlab gitlab 10.4.2

7 of the 21 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.234d6f158b84c
curl@8.14.1-2+deb13u5
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.2a85b70c915e7
curl@8.14.1-2+deb13u5
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.281f755390179
curl@8.14.1-2+deb13u5
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
curl@8.14.1-2+deb13u5
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3e3bc352dec49
curl@8.14.1-2+deb13u5
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.2e05fea2e7ce7
curl@8.14.1-2+deb13u5
no fix listed
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.2dc78bf0d3cbc
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

21,887
jenkinsjenkinsciOfficialVerified publisher5.9.671 of 2See more

jenkins jenkinsci 5.9.67

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
jenkins/jenkins:2.580.1-jdk21a660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,311
nextcloudnextcloud9.4.01 of 1See more

nextcloud nextcloud 9.4.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1-apache8f2f0e93aca5
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,644
netdatanetdataVerified publisher3.7.1761 of 1See more

netdata netdata 3.7.176

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
netdata/netdata:v2.12.15cfa05a5fa56
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,996
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
boky/postfix:v5.1.0aafc77238423
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

6,497
vaultwardengissilabs1.4.21 of 1See more

vaultwarden gissilabs 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,224
zammadzammadOfficialVerified publisher19.1.51 of 5See more

zammad zammad 19.1.5

1 of the 5 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.2.2-0003c3c1f2df6881
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,326
penpotpenpotOfficialVerified publisher1.11.31 of 5See more

penpot penpot 1.11.3

1 of the 5 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
penpotapp/exporter:2.18.3418232d6ca31
curl@8.14.1-2+deb13u5+dhi0
no fix listed

Open the chart page →

6,270
emqxemqx-operator5.8.91 of 1See more

emqx emqx-operator 5.8.9

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
emqx/emqx:5.8.935b46f7aa7a0
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

3,120
difydify-helmVerified publisher0.38.02 of 11See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.15750e1111426e
curl@8.19.0-3
no fix listed
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

75,089
oktetooktetoOfficialVerified publisher0.0.0-2026-08-311 of 10See more

okteto okteto 0.0.0-2026-08-31

1 of the 10 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-313e56bdd1b90d
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

8,483
yourlsyourlsOfficialVerified publisher8.10.51 of 2See more

yourls yourls 8.10.5

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/yourls/yourls:1.10.62f2879125903
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,736
openprojectopenproject-helm-chartsOfficialVerified publisher13.13.11 of 5See more

openproject openproject-helm-charts 13.13.1

1 of the 5 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
openproject/openproject:17.9.1-slim2beeecac788d
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

22,399
lemmyananace-chartsVerified publisher0.6.151 of 5See more

lemmy ananace-charts 0.6.15

1 of the 5 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
dessalines/lemmy-ui:0.19.20ee4c620d8e93
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

8,246
factorio-server-chartsfactorio-server-chartsVerified publisher2.5.21 of 1See more

factorio-server-charts factorio-server-charts 2.5.2

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
factoriotools/factorio:lateste91a03290ef8
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,427
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/golang:lateste0174e51e812
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

10,684
localstacklocalstack0.7.11 of 1See more

localstack localstack 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest801a3dff7f6a
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,334
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
curl@8.21.0-2~bpo13+1
no fix listed

Open the chart page →

15,549
oneuptimeoneuptimeOfficialVerified publisher14.0.571 of 7See more

oneuptime oneuptime 14.0.57

1 of the 7 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
oneuptime/runner:releasef368dab31cbb
curl@8.14.1-2+deb13u7
no fix listed

Open the chart page →

9,445
stalwart-mailstalwart-mailVerified publisher2.1.51 of 1See more

stalwart-mail stalwart-mail 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/stalwartlabs/stalwart:v0.16.2574e5a7d55303
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,285
prefect-serverprefectVerified publisher2026.10.61630151 of 2See more

prefect-server prefect 2026.10.6163015

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.8-python3.1119463f92420b
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,171
apim3graviteeioVerified publisher4.12.232 of 4See more

apim3 graviteeio 4.12.23

2 of the 4 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.23-debianbe709a8594ba
curl@8.14.1-2+deb13u5
no fix listed
graviteeio/apim-management-api:4.12.23-debian976576f27981
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,186
wordpressgroundhog2k0.16.71 of 1See more

wordpress groundhog2k 0.16.7

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/wordpress:7.1.3-apache8ecd8d8e3741
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,972
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
budibase/proxy:3.41.38d780b6ee602
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

12,113
nextcloudgroundhog2k0.22.81 of 3See more

nextcloud groundhog2k 0.22.8

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1:35.0.1-apacheb1ae671e9815
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,243
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8a02508cbdcf
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,344
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

5,294
paperless-ngxpaperless-ngxVerified publisher0.3.241 of 3See more

paperless-ngx paperless-ngx 0.3.24

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

9,467
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.3.12 of 3See more

tbmq-cluster tbmq-helm-chart 2.3.1

2 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.16a0e157c73be
curl@8.14.1-2+deb13u5
no fix listed
thingsboard/tbmq-node:2.4.155aa86b6144f
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,448
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apachee1d42a6985a9
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,869
cortexcortex3.5.01 of 4See more

cortex cortex 3.5.0

1 of the 4 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:1.31f9ea18bfa4fa
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,180
docmosthelmforgeVerified publisher1.4.11 of 4See more

docmost helmforge 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,756
wordpresshelmforgeVerified publisher3.0.91 of 3See more

wordpress helmforge 3.0.9

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/wordpress:7.1.2-apachee04cf657f248
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,776
passboltpassbolt2.2.01 of 6See more

passbolt passbolt 2.2.0

1 of the 6 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
passbolt/passbolt:5.16.0-1-ce1768916a04b1
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

14,333
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,099
baserowbaserow-chartVerified publisher1.1.11 of 6See more

baserow baserow-chart 1.1.1

1 of the 6 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
baserow/backend:2.4.1497347d0ba74
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

19,262
jellyfindjjudas21Verified publisher4.0.81 of 1See more

jellyfin djjudas21 4.0.8

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

3,111
gitops-promotergitops-promoterOfficialVerified publisher0.24.01 of 2See more

gitops-promoter gitops-promoter 0.24.0

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,700
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/phpmyadmin:lateste1d42a6985a9
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

13,317
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,559
jenkinsjenkins-helm-chartVerified publisher0.1.01 of 1See more

jenkins jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
matrixzekker6Verified publisher3.32.01 of 4See more

matrix zekker6 3.32.0

1 of the 4 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.162.06b84a7bbac36
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,229
vaultwardenandrenarchyVerified publisher6.28.01 of 1See more

vaultwarden andrenarchy 6.28.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.31587c45feaa4
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,940
limesurveyarea-42Verified publisher0.3.1011 of 2See more

limesurvey area-42 0.3.101

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
adamzammit/limesurvey:7.6.0bb3e8d6e8dde
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,606
convertigoconvertigoOfficialVerified publisher8.4.61 of 5See more

convertigo convertigo 8.4.6

1 of the 5 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/couchdb:3.53611ce43bd32
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

17,538
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

11,172
defectdojodefectdojo1.9.561 of 4See more

defectdojo defectdojo 1.9.56

1 of the 4 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
defectdojo/defectdojo-django:3.4.100b8a8e82522a8
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,031
rsshubgabe565Verified publisher0.8.01 of 3See more

rsshub gabe565 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
diygod/rsshub:latestd5fd850a359a
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,928
openbaogitlabVerified publisher0.20.11 of 1See more

openbao gitlab 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1394bc87d066d
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,933
apimgraviteeioVerified publisher4.12.232 of 4See more

apim graviteeio 4.12.23

2 of the 4 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.23-debianbe709a8594ba
curl@8.14.1-2+deb13u5
no fix listed
graviteeio/apim-management-api:4.12.23-debian976576f27981
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,186

Container images carrying it

277 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
curl@8.14.1-2+deb13u3
no fix listed
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
curl@8.14.1-2+deb13u3
no fix listed
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
curl@8.14.1-2+deb13u2
no fix listed
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.4914e75d9f445
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latestb0b6b96adaa3
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
curl@8.14.1-2+deb13u2
no fix listed
1
ghcr.io/steadybit/agent:2.4.759927a1a1599
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/wgbh-mla/chowda:maina63dadf119be
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/yourls/yourls:1.10.62f2879125903
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/zammad/zammad:7.2.2-0003c3c1f2df6881
curl@8.14.1-2+deb13u5
no fix listed
1
public.ecr.aws/jtekt-corporation/api-key-manager-gui:v0.1.10424fa47fbeb
curl@8.14.1-2+deb13u5
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.234d6f158b84c
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.2a85b70c915e7
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.281f755390179
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1394bc87d066d
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3e3bc352dec49
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.2e05fea2e7ce7
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.2dc78bf0d3cbc
curl@8.14.1-2+deb13u5
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.