StackRadar

CVE-2026-19931

Critical

Advisory

Published 2 Sept 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.012
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,814
of 17,790 indexed, latest versions
Container images
1,636
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,814 of 17,790 indexed charts deploy, on 1,636 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.68.0-1ubuntu2.2, 7.68.0-1ubuntu2.4, 7.68.0-1ubuntu2.5+78 moreno fix listed1,276
curlapk8.10.1-r0, 8.10.1-r1, 8.12.0-r1, 8.12.1-r0+10 more8.22.0-r0360
OSV records
ALPINE-CVE-2026-19931DEBIAN-CVE-2026-19931UBUNTU-CVE-2026-19931CGA-4wpj-77jq-67v6ECHO-5bd0-12f6-d009
Also known as
CGA-h86j-p398-8x8h
Trending
Rank 27 in indexed charts, since 5 Sept 2026. See the ranking →

Charts affected

1,814 by stars
ChartLatestAffected imagesRadar Score
cluster-uiappscodeVerified publisher2026.9.111 of 1See more

cluster-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/appscode/cluster-ui:2.4.0f527d10769ac
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

371
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
curl@7.81.0-1ubuntu1.21
no fix listed

Open the chart page →

4,005
inbox-server-distributedappscodeVerified publisher2025.12.252 of 4See more

inbox-server-distributed appscode 2025.12.25

2 of the 4 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
curl@7.81.0-1ubuntu1.15
no fix listed
ghcr.io/appscode/inbox-server:latest536358d7b17e
curl@7.81.0-1ubuntu1.21
no fix listed

Open the chart page →

15,718
james-komposeappscodeVerified publisher0.1.02 of 4See more

james-kompose appscode 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
curl@7.81.0-1ubuntu1.15
no fix listed
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
curl@7.81.0-1ubuntu1.15
no fix listed

Open the chart page →

17,122
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

2,655
platform-apiappscodeVerified publisher2026.9.112 of 3See more

platform-api appscode 2026.9.11

2 of the 3 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
curl@7.88.1-10+deb12u15
no fix listed
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
curl@8.16.0-4~bpo13+1
no fix listed

Open the chart page →

37,629
s3proxyappscodeVerified publisher2026.9.111 of 1See more

s3proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
curl@7.81.0-1ubuntu1.16
no fix listed

Open the chart page →

3,313
websiteappscodeVerified publisher2026.9.111 of 1See more

website appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/appscode/website:v2026.9.1170d9d1b78d39
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

371
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
curl@7.88.1-10+deb12u1
no fix listed

Open the chart page →

5,680
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
curl@8.5.0-2ubuntu10.11
no fix listed

Open the chart page →

8,913
appwriteappwrite-helmVerified publisher1.3.22 of 8See more

appwrite appwrite-helm 1.3.2

2 of the 8 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
curl@8.17.0-r1
8.22.0-r0
clamav/clamav:1.0dd0d9cc746af
curl@8.20.0-r1
8.22.0-r0

Open the chart page →

9,855
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
curl@8.14.1-2
no fix listed

Open the chart page →

7,558
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
curl@8.5.0-2ubuntu10.6
no fix listed

Open the chart page →

7,359
argonix-apiargonix0.2.31 of 4See more

argonix-api argonix 0.2.3

1 of the 4 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.0cb5f24732197
curl@8.14.1-2+deb13u5
no fix listed

Open the chart page →

4,956
aias-servicesarlas-stackVerified publisher28.8.04 of 5See more

aias-services arlas-stack 28.8.0

4 of the 5 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
gisaia/agate:0.18.198213fa403ae
curl@8.21.0-r0
8.22.0-r0
gisaia/airs:0.18.15abfe00317bf
curl@8.21.0-r0
8.22.0-r0
gisaia/aproc-service:0.18.1ac6564921994
curl@8.21.0-r0
8.22.0-r0
gisaia/fam:0.18.1ae525930b4b6
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

1,001
arlas-aiasarlas-stackVerified publisher28.8.015 of 22See more

arlas-aias arlas-stack 28.8.0

15 of the 22 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
curl@7.88.1-10+deb12u12
no fix listed
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
curl@7.88.1-10+deb12u12
no fix listed
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
curl@7.88.1-10+deb12u8
no fix listed
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
curl@7.88.1-10+deb12u12
no fix listed
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
curl@7.88.1-10+deb12u12
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
curl@7.88.1-10+deb12u12
no fix listed
gisaia/agate:0.18.198213fa403ae
curl@8.21.0-r0
8.22.0-r0
gisaia/airs:0.18.15abfe00317bf
curl@8.21.0-r0
8.22.0-r0
gisaia/aproc-service:0.18.1ac6564921994
curl@8.21.0-r0
8.22.0-r0
gisaia/arlas-fam-wui:0.18.13700dcaf7a75
curl@8.20.0-r0
8.22.0-r0
gisaia/arlas-wui:28.0.3b83b3e067173
curl@8.19.0-r0
8.22.0-r0
gisaia/arlas-wui-builder:28.0.1a35977a5bb7d
curl@8.19.0-r0
8.22.0-r0
gisaia/arlas-wui-hub:28.0.21a3cc43d822f
curl@8.19.0-r0
8.22.0-r0
gisaia/fam:0.18.1ae525930b4b6
curl@8.21.0-r0
8.22.0-r0
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

40,580
arlas-uisarlas-stackVerified publisher28.8.04 of 4See more

arlas-uis arlas-stack 28.8.0

4 of the 4 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
gisaia/arlas-fam-wui:0.18.13700dcaf7a75
curl@8.20.0-r0
8.22.0-r0
gisaia/arlas-wui:28.0.3b83b3e067173
curl@8.19.0-r0
8.22.0-r0
gisaia/arlas-wui-builder:28.0.1a35977a5bb7d
curl@8.19.0-r0
8.22.0-r0
gisaia/arlas-wui-hub:28.0.21a3cc43d822f
curl@8.19.0-r0
8.22.0-r0

Open the chart page →

2,987
titilerarlas-stackVerified publisher28.8.01 of 1See more

titiler arlas-stack 28.8.0

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:latest0f31f8b0441b
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,466
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
curl@7.68.0-1ubuntu2.16
no fix listed

Open the chart page →

23,425
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
curl@7.68.0-1ubuntu2.20
no fix listed
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
curl@7.68.0-1ubuntu2.20
no fix listed

Open the chart page →

22,663
assemblylineassemblylineVerified publisher7.4.193 of 12See more

assemblyline assemblyline 7.4.19

3 of the 12 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable19c914f21a41d7
curl@7.88.1-10+deb12u15
no fix listed
cccs/assemblyline-socketio:4.7.4.stable19caf40394bd17
curl@7.88.1-10+deb12u15
no fix listed
cccs/assemblyline-ui:4.7.4.stable190426ed7884a2
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

12,666
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
curl@7.68.0-1ubuntu2.12
no fix listed

Open the chart page →

9,411
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
assistiot/location_processing:lateste9bae124095f
curl@7.81.0-1ubuntu1.6
no fix listed

Open the chart page →

10,127
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
curl@7.81.0-1ubuntu1.15
no fix listed

Open the chart page →

18,357
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
library/buildpack-deps:curl04907bdd423b
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

8,052
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
curl@7.68.0-1ubuntu2.19
no fix listed

Open the chart page →

7,985
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
curl@7.88.1-10+deb12u1
no fix listed

Open the chart page →

45,656
videoaugmentationassist-iot-video-augmentation0.1.02 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
curl@7.68.0-1ubuntu2.18
no fix listed
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

14,013
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
curl@7.81.0-1ubuntu1.10
no fix listed
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
curl@7.88.1-10+deb12u7
no fix listed

Open the chart page →

32,638
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

9,429
bamboo-agentatlassian-data-centerVerified publisher2.0.151 of 1See more

bamboo-agent atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
atlassian/bamboo-agent-base:12.1.1151c2d7274eef
curl@8.5.0-2ubuntu10.13
no fix listed

Open the chart page →

1,657
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
curl@7.81.0-1ubuntu1.6
no fix listed

Open the chart page →

6,958
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
curl@7.88.1-10+deb12u4
no fix listed

Open the chart page →

6,321
nas-appsawesomeVerified publisher2.0.04 of 8See more

nas-apps awesome 2.0.0

4 of the 8 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
curl@8.14.1-2+deb13u4
no fix listed
linuxserver/jackett:latest609a1830692d
curl@8.21.0-r0
8.22.0-r0
linuxserver/qbittorrent:latesta00b6a597a38
curl@8.21.0-r0
8.22.0-r0
wettyoss/wetty:latest7423b3d40ba2
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

7,176
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
curl@7.88.1-10+deb12u12
no fix listed
kuzwolka/aws9:news3e8880fbbb96
curl@7.88.1-10+deb12u12
no fix listed
kuzwolka/aws9:blog4a7707410bf1
curl@7.88.1-10+deb12u12
no fix listed
kuzwolka/aws9:shop84a9d9766345
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

18,436
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

3,031
axosyslogaxosyslogVerified publisher0.21.01 of 1See more

axosyslog axosyslog 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.27.00379598e9ad2
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

394
azp-agentazp-agent1.2.01 of 1See more

azp-agent azp-agent 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
cheveo/azp-agent:1.0.282240f890884
curl@7.81.0-1ubuntu1.20
no fix listed

Open the chart page →

3,310
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
infiniflow/infinity:v0.7.0992c87a68612
curl@7.81.0-1ubuntu1.23
no fix listed

Open the chart page →

5,894
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
curl@8.14.1-2+deb13u2
no fix listed

Open the chart page →

2,760
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
curl@7.88.1-10+deb12u4
no fix listed

Open the chart page →

6,321
bookinfobasictechno0.1.03 of 6See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
curl@7.68.0-1ubuntu2.12
no fix listed
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
curl@7.68.0-1ubuntu2.12
no fix listed
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
curl@7.68.0-1ubuntu2.12
no fix listed

Open the chart page →

20,794
my-nginx-appbassant-nginx-app0.1.01 of 1See more

my-nginx-app bassant-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

1,849
lidarrbdclark-helm-chartsVerified publisher0.1.01 of 1See more

lidarr bdclark-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
linuxserver/lidarr:3.1.0c74c32408fdf
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

377
mealiebdclark-helm-chartsVerified publisher0.1.151 of 1See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
curl@8.14.1-2+deb13u4
no fix listed

Open the chart page →

4,059
prowlarrbdclark-helm-chartsVerified publisher0.3.41 of 1See more

prowlarr bdclark-helm-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
linuxserver/prowlarr:2.5.291844fa2c927
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

255
sonarrbdclark-helm-chartsVerified publisher0.4.31 of 1See more

sonarr bdclark-helm-charts 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
linuxserver/sonarr:4.0.194d9df314875e
curl@8.21.0-r0
8.22.0-r0

Open the chart page →

320
pangolinbdcode0.14.11 of 1See more

pangolin bdcode 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
fosrl/pangolin:latest83a55f933b4d
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

1,923
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
no fix listed

Open the chart page →

20,242
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-19931.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
curl@7.81.0-1ubuntu1.18
no fix listed

Open the chart page →

7,246

Container images carrying it

1,636 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
curl@7.81.0-1ubuntu1.3
no fix listed
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
curl@8.5.0-2ubuntu10.6
no fix listed
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
curl@7.88.1-10+deb12u12
no fix listed
1
zimengxiong/excalidash-frontend:0.4.27242629350b06
curl@8.17.0-r1
8.22.0-r0
1
zimengxiong/excalidash-frontend:0.6.04ec5b20c0303
curl@8.21.0-r0
8.22.0-r0
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
curl@7.81.0-1ubuntu1.25
no fix listed
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
curl@8.5.0-2ubuntu10.6
no fix listed
1
gcr.io/datadoghq/observability-pipelines-worker:2.21.1de6ff0f1a854
curl@8.5.0-2ubuntu10.13
no fix listed
1
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
curl@8.5.0-2ubuntu10.8
no fix listed
1
gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine6d35276c2562
curl@8.20.0-r0
8.22.0-r0
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
curl@7.68.0-1ubuntu2.6
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
curl@7.68.0-1ubuntu2.6
no fix listed
1
gcr.io/istio-testing/install-cni:latestec6f9ea5757b
curl@8.5.0-2ubuntu10.13
no fix listed
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
curl@8.5.0-2ubuntu10.1
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
curl@7.88.1-10+deb12u7
no fix listed
1
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
curl@8.20.0-r0
8.22.0-r0
1
ghcr.io/abcdesktopio/mongo:safe8.0c4c1938a973b
curl@8.5.0-2ubuntu10.13
no fix listed
1
ghcr.io/aeharding/voyager:latest779759172676
curl@8.14.1-2+deb13u4
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.70.04c28334f3c79
curl@7.88.1-10+deb12u15
no fix listed
1
ghcr.io/alekc/samba-docker:v1.1.0cc9a028d9c43
curl@8.20.0-r0
8.22.0-r0
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
curl@8.5.0-2ubuntu10.13
no fix listed
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
curl@8.5.0-2ubuntu10.6
no fix listed
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
curl@8.14.1-2+deb13u2
no fix listed
1
ghcr.io/angelnu/tt-rss:2.0.10068d332ae2410f8
curl@8.18.0-1ubuntu2.4
no fix listed
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
curl@8.5.0-2ubuntu10.6
no fix listed
1
ghcr.io/apache/ats-ingress:latest2d4d776f6362
curl@8.20.0-r0
8.22.0-r0
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
curl@7.81.0-1ubuntu1.18
no fix listed
1
ghcr.io/appscode/cluster-ui:2.4.0f527d10769ac
curl@8.21.0-r0
8.22.0-r0
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
curl@8.16.0-4~bpo13+1
no fix listed
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
curl@7.81.0-1ubuntu1.15
no fix listed
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
curl@7.81.0-1ubuntu1.16
no fix listed
1
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
curl@8.17.0-r1
8.22.0-r0
1
ghcr.io/appscode/website:v2026.9.1170d9d1b78d39
curl@8.21.0-r0
8.22.0-r0
1
ghcr.io/argonix-io/argonix-api:1.0.0cb5f24732197
curl@8.14.1-2+deb13u5
no fix listed
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
curl@8.17.0-r1
8.22.0-r0
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
curl@7.88.1-10+deb12u7
no fix listed
1
ghcr.io/autobrr/qui:v1.14.110b7945d4f09
curl@8.17.0-r1
8.22.0-r0
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
curl@7.88.1-10+deb12u12
no fix listed
1
ghcr.io/axoflow/axosyslog:4.27.00379598e9ad2
curl@8.21.0-r0
8.22.0-r0
1
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
curl@8.5.0-2ubuntu10.9
no fix listed
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
curl@7.81.0-1ubuntu1.20
no fix listed
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
curl@8.15.0-r4
8.22.0-r0
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
curl@7.88.1-10+deb12u14
no fix listed
1
ghcr.io/biru-scop/tenzu-front:latest16759fa523f8
curl@8.19.0-r0
8.22.0-r0
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10b6373349a301
curl@8.21.0-r0
8.22.0-r0
1
ghcr.io/bitwarden/web:2026.8.1dd1df8408daf
curl@8.20.0-r0
8.22.0-r0
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
curl@7.68.0-1ubuntu2.16
no fix listed
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
curl@8.5.0-2ubuntu10.13
no fix listed
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
curl@8.5.0-2ubuntu10.11
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.