StackRadar

CVE-2026-11856

Critical

Advisory

Published 24 Jun 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,707
of 17,781 indexed, latest versions
Container images
1,527
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,707 of 17,781 indexed charts deploy, on 1,527 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16+109 more7.35.0-1ubuntu2.20+esm22, 7.47.0-1ubuntu2.19+esm18, 7.58.0-2ubuntu3.24+esm11, 7.68.0-1ubuntu2.25+esm6+4 more1,310
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r0, 8.19.0-r0+2 more8.21.0-r0, 8.22.0-r0217
OSV records
ALPINE-CVE-2026-11856DEBIAN-CVE-2026-11856UBUNTU-CVE-2026-11856ECHO-895d-0fcf-45bd
Also known as
USN-8651-1

Charts affected

1,707 by stars
ChartLatestAffected imagesRadar Score
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
curl@8.20.0-r1
8.21.0-r0

Open the chart page →

2,133
rss-bridgegabe565Verified publisher0.5.21 of 1See more

rss-bridge gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/rss-bridge/rss-bridge:latest606896116558
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

2,186
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm6

Open the chart page →

17,377
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.25+esm6

Open the chart page →

35,305
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.25+esm6

Open the chart page →

15,653
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm11

Open the chart page →

11,662
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.26

Open the chart page →

5,136
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm6

Open the chart page →

11,558
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.25+esm6

Open the chart page →

10,231
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.26

Open the chart page →

13,025
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm6
haveagitgat/tdarr_node:2.00.101e3f9328327d
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.25+esm6

Open the chart page →

31,000
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

4,879
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.25+esm6

Open the chart page →

7,660
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

3,123
openbaogitlabVerified publisher0.18.11 of 1See more

openbao gitlab 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,769
gluugluu-flexOfficialVerified publisher0.0.0-nightly1 of 9See more

gluu gluu-flex 0.0.0-nightly

1 of the 9 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/gluufederation/flex/persistence-loader:0.0.0-nightlyc26589258dec
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

1,507
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

10,072
bazarrhalkeye0.2.01 of 1See more

bazarr halkeye 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
linuxserver/bazarr:latesta20fb11a440d
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

614
haproxy-unified-gatewayhaproxytechVerified publisher1.2.01 of 1See more

haproxy-unified-gateway haproxytech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
haproxytech/haproxy-unified-gateway:1.0.7b9bffe2d0fd1
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

674
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

6,374
clickstackhdx-oss-v21.1.11 of 5See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
library/mongo:5.0.32-focal3b6c281e1c08
curl@7.68.0-1ubuntu2.25
7.68.0-1ubuntu2.25+esm6

Open the chart page →

4,711
hello-helmhellok8s0.1.01 of 2See more

hello-helm hellok8s 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,000
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.12

Open the chart page →

8,716
matomohelmforgeVerified publisher2.3.01 of 3See more

matomo helmforge 2.3.0

1 of the 3 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
library/matomo:5.13.0-apache8e6bdd396496
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

2,680
vaultwardenhelmforgeVerified publisher1.13.11 of 1See more

vaultwarden helmforge 1.13.1

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,744
mywebapphelm-nginxVerified publisher0.1.01 of 1See more

mywebapp helm-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,827
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
curl@7.88.1-10+deb12u6
no fix listed
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

16,514
hivemq-swarmhivemqOfficialVerified publisher0.2.701 of 1See more

hivemq-swarm hivemq 0.2.70

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
hivemq/hivemq-swarm:4.54.0f9746d5d70fa
curl@8.5.0-2ubuntu10.10
8.5.0-2ubuntu10.12

Open the chart page →

1,350
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.26

Open the chart page →

4,300
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
curl@7.81.0-1ubuntu1.21
7.81.0-1ubuntu1.26

Open the chart page →

12,397
cyberchefhv-helm-repo0.3.31 of 1See more

cyberchef hv-helm-repo 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/gchq/cyberchef:11.0.045082a0ac41d
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,109
iceberg-resticeberg-rest-fixture0.0.11 of 2See more

iceberg-rest iceberg-rest-fixture 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
curl@7.81.0-1ubuntu1.20
7.81.0-1ubuntu1.26

Open the chart page →

3,470
odooimioVerified publisher3.0.21 of 3See more

odoo imio 3.0.2

1 of the 3 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
library/nginx:1.29.8-alpine5616878291a2
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

3,068
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
curl@8.14.1-2
no fix listed

Open the chart page →

15,712
elasticinseefrlab2.2.02 of 2See more

elastic inseefrlab 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm6
library/kibana:7.17.3e2e2031c15be
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm6

Open the chart page →

17,284
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
curl@8.14.1-2
no fix listed

Open the chart page →

11,764
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm11

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm11

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm11

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm11

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm11

Open the chart page →

10,701
jellyfinjellyfinVerified publisher0.3.301 of 1See more

jellyfin jellyfin 0.3.30

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
curl@8.14.1-2+deb13u3
no fix listed

Open the chart page →

2,604
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

7,387
jupyterhub-outpostjupyter-jscVerified publisher2.4.11 of 1See more

jupyterhub-outpost jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
curl@8.20.0-r0
8.22.0-r0

Open the chart page →

1,678
qbittorrentk8s-chartsVerified publisher3.1.01 of 2See more

qbittorrent k8s-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

1,270
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.322 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

2 of the 17 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
curl@8.17.0-r1
8.22.0-r0
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

15,418
ombik8s-home-lab-repo12.2.11 of 1See more

ombi k8s-home-lab-repo 12.2.1

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
curl@8.5.0-2ubuntu10.9
8.5.0-2ubuntu10.12

Open the chart page →

1,421
radarrk8s-home-lab-repo17.6.11 of 1See more

radarr k8s-home-lab-repo 17.6.1

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/home-operations/radarr:6.2.1a566e7d364b9
curl@8.20.0-r1
8.21.0-r0

Open the chart page →

752
sonarrk8s-home-lab-repo17.3.11 of 1See more

sonarr k8s-home-lab-repo 17.3.1

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
curl@8.20.0-r1
8.21.0-r0

Open the chart page →

765
tautullik8s-home-lab-repo12.3.01 of 1See more

tautulli k8s-home-lab-repo 12.3.0

1 of the 1 container images this version deploys carry CVE-2026-11856.

Container imageDigestPackageFixed in
ghcr.io/home-operations/tautulli:2.17.12183820d45a1
curl@8.17.0-r1
8.22.0-r0

Open the chart page →

1,129

Container images carrying it

1,527 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opendatacube/ows:latest668cbb41473c
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.12
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
curl@8.20.0-r0
8.22.0-r0
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
curl@7.81.0-1ubuntu1.4
7.81.0-1ubuntu1.26
2
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
curl@8.14.1-2+deb13u4
no fix listed
2
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
curl@8.14.1-2+deb13u4
no fix listed
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
curl@7.88.1-10+deb12u5
no fix listed
2
quickwit/quickwit:v0.8.2363ff56ce456
curl@7.88.1-10+deb12u5
no fix listed
2
rajnandan1/kener:3.2.1930407afca731
curl@7.88.1-10+deb12u12
no fix listed
2
requarks/wiki:2:latest68f0d1848261
curl@8.17.0-r1
8.22.0-r0
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
curl@7.68.0-1ubuntu2.22
7.68.0-1ubuntu2.25+esm6
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
curl@7.81.0-1ubuntu1.2
7.81.0-1ubuntu1.26
2
syncthing/syncthing:2.1.1775c4aac4862
curl@8.19.0-r0
8.22.0-r0
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
curl@7.81.0-1ubuntu1.10
7.81.0-1ubuntu1.26
2
uffizzi/controller:latest0344805f267b
curl@7.88.1-10+deb12u5
no fix listed
2
vdiogov/glpi-conteiner:latest6945f84f0058
curl@7.88.1-10+deb12u6
no fix listed
2
wolveix/satisfactory-server:latest:v1.9.10e103700ae6ae
curl@7.81.0-1ubuntu1.20
7.81.0-1ubuntu1.26
2
wurstmeister/zookeeper:latest7a7fd44a7210
curl@7.35.0-1ubuntu2.1
7.35.0-1ubuntu2.20+esm22
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.12
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
curl@7.47.0-1ubuntu2.2
7.47.0-1ubuntu2.19+esm18
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
curl@7.81.0-1ubuntu1.21
7.81.0-1ubuntu1.26
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.12
2
ghcr.io/cinnyapp/cinny:v4.12.6a7805a8a60ff
curl@8.19.0-r0
8.22.0-r0
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.26
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.26
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
curl@7.88.1-10+deb12u14
no fix listed
2
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
curl@7.88.1-10+deb12u15
no fix listed
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.25+esm6
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
curl@7.88.1-10+deb12u6
no fix listed
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
curl@8.20.0-r1
8.21.0-r0
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
curl@8.20.0-r1
8.21.0-r0
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24+esm11
2
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
curl@8.5.0-2ubuntu10.11
8.5.0-2ubuntu10.12
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
curl@7.88.1-10+deb12u7
no fix listed
2
ghcr.io/openunison/openunison-kubernetes-operator:1.0.11f4feb3323a29
curl@8.5.0-2ubuntu10.9
8.5.0-2ubuntu10.12
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
curl@7.81.0-1ubuntu1.2
7.81.0-1ubuntu1.26
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
curl@7.88.1-10+deb12u12
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
curl@7.88.1-10+deb12u14
no fix listed
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
curl@7.68.0-1ubuntu2.18
7.68.0-1ubuntu2.25+esm6
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.12
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
curl@8.17.0-r1
8.22.0-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
curl@8.17.0-r1
8.22.0-r0
2
1dev/server:11.9.0cd5b12fe5471
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.12
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
curl@7.88.1-10+deb12u14
no fix listed
1
5200710/hadoop:3.2.3-java8092d3088a5fb
curl@7.68.0-1ubuntu2.21
7.68.0-1ubuntu2.25+esm6
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
curl@8.14.1-2+deb13u3
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
curl@7.88.1-10+deb12u6
no fix listed
1
adamzammit/limesurvey:7.0.15e75e2f455c8d
curl@8.14.1-2+deb13u4
no fix listed
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.12
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
curl@8.5.0-2ubuntu10.1
8.5.0-2ubuntu10.12
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.25+esm6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.