StackRadar

CVE-2026-107929

Low

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
446
of 18,131 indexed, latest versions
Container images
277
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 446 of 18,131 indexed charts deploy, on 277 images.

Affected packageAffected versionsFixed inImages
curldeb8.14.1-2, 8.14.1-2+deb13u2, 8.14.1-2+deb13u3, 8.14.1-2+deb13u3+dhi3+9 moreno fix listed277
OSV records
DEBIAN-CVE-2026-107929

Charts affected

446 by stars
ChartLatestAffected imagesRadar Score
hermes-agenthermes-agentVerified publisher1.18.01 of 1See more

hermes-agent hermes-agent 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,062
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/httpd:2.441163d514c02
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,465
observalobservalVerified publisher1.15.01 of 8See more

observal observal 1.15.0

1 of the 8 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.15.0fddbee22c569
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,543
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

112,232
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache7ebeef41095c
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,746
skypilotskypilotOfficialVerified publisher0.14.01 of 3See more

skypilot skypilot 0.14.0

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.14.0a8362d205365
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

6,256
spartanspartan0.9.11 of 1See more

spartan spartan 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

12,784
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

9,159
wgerwgerOfficialVerified publisher2.0.01 of 7See more

wger wger 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

9,400
paperlesszekker6Verified publisher11.11.01 of 1See more

paperless zekker6 11.11.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,335
paperless-ngxadnoctemVerified publisher0.5.02 of 5See more

paperless-ngx adnoctem 0.5.0

2 of the 5 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
curl@8.21.0-2~bpo13+1
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

27,040
agentareaagentareaVerified publisher0.0.271 of 17See more

agentarea agentarea 0.0.27

1 of the 17 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latestde166c910ef9
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

16,800
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

3,111
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

14,662
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

7,757
music-assistantbdclark-helm-chartsVerified publisher0.4.141 of 1See more

music-assistant bdclark-helm-charts 0.4.14

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.645fdb050e069
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,818
pgcagriekinVerified publisher2.4.11 of 2See more

pg cagriekin 2.4.1

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.1.0-pg18111ccc617ce7
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,387
pgvectorcagriekinVerified publisher2.4.11 of 3See more

pgvector cagriekin 2.4.1

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
cagriekin/pg-ha:2.1.0-pg18111ccc617ce7
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,886
home-assistant-matter-servercharts-derwitt-devVerified publisher4.3.01 of 2See more

home-assistant-matter-server charts-derwitt-dev 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,988
claude-code-hubclaude-code-hub0.1.01 of 4See more

claude-code-hub claude-code-hub 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/ding113/claude-code-hub:latestfa7c6f5428c2
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,350
dawarichcogitriVerified publisher2.9.31 of 3See more

dawarich cogitri 2.9.3

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.3589e3606b11b
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

7,076
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

13,229
mealiedeimosfr-charts1.0.161 of 1See more

mealie deimosfr-charts 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.28.08b02290f4d18
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,028
nginx-phpfpmdrpsychickVerified publisher0.1.11 of 2See more

nginx-phpfpm drpsychick 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,035
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,186
elastalert2elastalert22.31.01 of 1See more

elastalert2 elastalert2 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
jertel/elastalert2:2.31.03cbf63f9b7dc
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,369
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

37,378
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

7,132
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest19f55bcf7bb6
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,044
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,219
matomohelmforgeVerified publisher2.3.21 of 3See more

matomo helmforge 2.3.2

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/matomo:5.14.0-apache1e0019262702
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

3,297
vaultwardenhelmforgeVerified publisher1.14.21 of 1See more

vaultwarden helmforge 1.14.2

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.31587c45feaa4
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,940
mywebapphelm-nginxVerified publisher0.1.01 of 1See more

mywebapp helm-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
curl@8.14.1-2
no fix listed

Open the chart page →

18,595
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
curl@8.14.1-2
no fix listed

Open the chart page →

13,623
jellyfinjellyfinVerified publisher0.3.321 of 1See more

jellyfin jellyfin 0.3.32

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:12.2c3efa69a22f2
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,582
jenkinsjenkins-cicd-tool0.1.01 of 1See more

jenkins jenkins-cicd-tool 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsa660310e39ad
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,194
web-chartkbt-ktcloudlab0.1.01 of 1See more

web-chart kbt-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
filegator/filegator:latesta40a23c383c6
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

9,355
app-componentkeltio-helm-chartsVerified publisher3.14.01 of 1See more

app-component keltio-helm-charts 3.14.0

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
glpi/glpi:latest8888c5d8aa46
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

5,000
powerdns-recursorklicktippVerified publisher0.4.111 of 1See more

powerdns-recursor klicktipp 0.4.11

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
powerdns/pdns-recursor-54:5.4.7ec0ad7d67b63
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

1,600
jellyfinmedia-servarrVerified publisher0.18.01 of 2See more

jellyfin media-servarr 0.18.0

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

3,124
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/redmine:6.1.204ac44a2595b
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

9,688
12factormyaVerified publisher24.1.21 of 1See more

12factor mya 24.1.2

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
my-react-appmy-react-app0.1.51 of 1See more

my-react-app my-react-app 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

2,293
nginx-chartnginx-chart-testVerified publisher0.1.11 of 1See more

nginx-chart nginx-chart-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

2,014
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-107929.

Container imageDigestPackageFixed in
library/wordpress:latest4abf7a450ee4
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

16,200

Container images carrying it

277 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
curl@8.14.1-2+deb13u3
no fix listed
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
curl@8.14.1-2+deb13u3
no fix listed
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
curl@8.14.1-2+deb13u2
no fix listed
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.4914e75d9f445
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latestb0b6b96adaa3
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
curl@8.14.1-2+deb13u2
no fix listed
1
ghcr.io/steadybit/agent:2.4.759927a1a1599
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/wgbh-mla/chowda:maina63dadf119be
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.7df1ba94bd5c0
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/yourls/yourls:1.10.62f2879125903
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/zammad/zammad:7.2.2-0003c3c1f2df6881
curl@8.14.1-2+deb13u5
no fix listed
1
public.ecr.aws/jtekt-corporation/api-key-manager-gui:v0.1.10424fa47fbeb
curl@8.14.1-2+deb13u5
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.45.05ac7b6178ddc
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
curl@8.14.1-2+deb13u4
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.234d6f158b84c
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.2a85b70c915e7
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.281f755390179
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1394bc87d066d
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3e3bc352dec49
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.2e05fea2e7ce7
curl@8.14.1-2+deb13u5
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.2dc78bf0d3cbc
curl@8.14.1-2+deb13u5
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.