CVE-2026-11856
CriticalAdvisory
Published 24 Jun 2026In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.007
- 51st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,704
- of 17,790 indexed, latest versions
- Container images
- 1,530
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 1,704 of 17,790 indexed charts deploy, on 1,530 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 1:8.14.1-2+deb13u3+e1, 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16+109 more | 7.35.0-1ubuntu2.20+esm22, 7.47.0-1ubuntu2.19+esm18, 7.58.0-2ubuntu3.24+esm11, 7.68.0-1ubuntu2.25+esm6+4 more | 1,313 |
| curlapk | 8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0+2 more | 8.21.0-r0, 8.22.0-r0 | 217 |
- OSV records
- ALPINE-CVE-2026-11856DEBIAN-CVE-2026-11856UBUNTU-CVE-2026-11856ECHO-895d-0fcf-45bd
- Also known as
- USN-8651-1
Charts affected
1,704 by stars
Container images carrying it
1,530 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| langflowai/ | 54f67f1961fe | curl | no fix listed | 1 |
| langgenius/ | bf8027ddccf3 | curl | no fix listed | 1 |
| langgenius/ | 066035f93856 | curl | no fix listed | 1 |
| langgenius/ | dcefa5f7c47c | curl | no fix listed | 1 |
| langgenius/ | fca918260dd6 | curl | no fix listed | 1 |
| langgenius/ | 3c694329357b | curl | 8.5.0-2ubuntu10.12 | 1 |
| langgenius/ | 8269050f192e | curl | 8.5.0-2ubuntu10.12 | 1 |
| langgenius/ | 750e1111426e | curl | no fix listed | 1 |
| lbenicio/ | 732f9003de33 | curl | 8.22.0-r0 | 1 |
| lib42/ | a55596cda383 | curl | no fix listed | 1 |
| library/ | ac978b783657 | curl | no fix listed | 1 |
| library/ | 13ba145cba2f | curl | 8.22.0-r0 | 1 |
| library/ | 834468128c76 | curl | 8.22.0-r0 | 1 |
| library/ | b095ff3248c6 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 2817ad50b5c5 | curl | no fix listed | 1 |
| library/ | 28f7931ecbcb | curl | no fix listed | 1 |
| library/ | 2cc40b15dff8 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 310b9fc03b06 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 332c6d416808 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 88c2ec10c7f2 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | fdc73b3249c1 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 2461f02672b3 | curl | 7.81.0-1ubuntu1.26 | 1 |
| library/ | 512690a56605 | curl | no fix listed | 1 |
| library/ | 1ae8051591a5 | curl | no fix listed | 1 |
| library/ | 571eb4514977 | curl | no fix listed | 1 |
| library/ | 695a8063ff10 | curl | 8.5.0-2ubuntu10.12 | 1 |
| library/ | 8812029260b5 | curl | no fix listed | 1 |
| library/ | b0f9fc41ed79 | curl | no fix listed | 1 |
| library/ | f75e48af0598 | curl | no fix listed | 1 |
| library/ | 0172f1c538e7 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 04c0fc150f3a | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | c5781ba340ef | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | e2e2031c15be | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 712e407b20ea | curl | 7.81.0-1ubuntu1.26 | 1 |
| library/ | 17a4f64e9cf5 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 2415789e1602 | curl | no fix listed | 1 |
| library/ | 8e6bdd396496 | curl | no fix listed | 1 |
| library/ | 0032d2ca20db | curl | 7.81.0-1ubuntu1.26 | 1 |
| library/ | 02a0cc7939f5 | curl | 8.5.0-2ubuntu10.12 | 1 |
| library/ | 05678ae4e5e1 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 3b6c281e1c08 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 3d0e6df9fd5b | curl | 7.58.0-2ubuntu3.24+esm11 | 1 |
| library/ | 406a4fdca9fc | curl | 7.81.0-1ubuntu1.26 | 1 |
| library/ | 50cae5081ab4 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 646902910d6a | curl | 7.81.0-1ubuntu1.26 | 1 |
| library/ | 699d652ed674 | curl | 7.58.0-2ubuntu3.24+esm11 | 1 |
| library/ | 6ca49afbcb2b | curl | 7.58.0-2ubuntu3.24+esm11 | 1 |
| library/ | 6ede2806c78e | curl | 8.5.0-2ubuntu10.12 | 1 |
| library/ | 71a63fc2438e | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |
| library/ | 7c81758cb295 | curl | 7.68.0-1ubuntu2.25+esm6 | 1 |