CVE-2026-3783

Medium

Advisory

Published 11 Mar 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,060; of 17,790 indexed, latest versions
Container images: 992; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,060 of 17,790 indexed charts deploy, on 992 images.

Affected package	Affected versions	Fixed in	Images
curldeb	1:8.14.1-2+deb13u3+e1, 7.68.0-1ubuntu2.2, 7.68.0-1ubuntu2.4, 7.68.0-1ubuntu2.5+53 more	1:8.14.1-2+deb13u3+e2, 7.68.0-1ubuntu2.25+esm3, 7.81.0-1ubuntu1.23, 7.88.1-10+deb12u15+3 more	886
curlapk	8.12.1-r0, 8.17.0-r1, 8.18.0-r0	8.19.0-r0	106

OSV records: ALPINE-CVE-2026-3783 DEBIAN-CVE-2026-3783 UBUNTU-CVE-2026-3783 ECHO-de93-d97b-29a9
Also known as: USN-8084-1, USN-8099-1

Charts affected

1,060 by stars

Chart

Latest

Affected images

Radar Score

wikiwikijs

3.0.0

1 of 2 See more

5,472

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.23

Open the chart page →

9,296

keycloakwiremind

25.3.1

1 of 2 See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

7,643

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm3

Open the chart page →

6,323

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

5,548

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

2,383

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.23

Open the chart page →

14,172

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

7,685

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15

Open the chart page →

13,197

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	curl@8.17.0-r1	8.19.0-r0

Open the chart page →

1,571

Container images carrying it

992 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
sirrend/helmup-engine :0.1.13	699e79e3d4e2	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
sirrend/helmup-github-scraper :0.1.4	7ca688c7abf5	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
sissbruecker/linkding :1.35.0	0c5dddf0b37c	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
snipe/snipe-it :v8.3.1	141ebf2386fe	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	1
snipe/snipe-it :v6.0.14	55fb7636a98c	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.25+esm3	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	curl@7.68.0-1ubuntu2.19	7.68.0-1ubuntu2.25+esm3	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u15	1
soldevelo/kafka :4.0.0-debian-12-r0	cfdc08c2f577	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
soldevelo/postgresql-repmgr :17.6.0-debian-12-r0	3eaab21e40e5	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	curl@7.68.0-1ubuntu2.11	7.68.0-1ubuntu2.25+esm3	1
somnathmore/custom-nginx :v2	bdfc06cad4ec	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
speckle/speckle-preview-service :2.26.3	092384dba45d	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
speckle/speckle-preview-service :2.20.2-branch.testing4.134160-9fad4b2	1f897ca906ea	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
speckle/speckle-preview-service :2.21.3-branch.testing5.219631-2153bef	52cad5e3293e	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
speckle/speckle-preview-service :2.23.14-branch.testing6.334655-b4e04ee	6dee853ba74a	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
speckle/speckle-preview-service :2.25.10-branch.testing6.645-b125c1e	787adcb20a3a	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
speckle/speckle-preview-service :2.20.6-branch.testing1.154030-9b09114	8f3c1ea153ba	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
speckle/speckle-preview-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	c102b087481a	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
speckle/speckle-preview-service :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	d3da0a84de98	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
stackstorm/st2actionrunner :3.8	88235ba70cad	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2api :3.8	6f56d239d280	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2auth :3.8	33ecfda16608	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2notifier :3.8	f190a6212195	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2rulesengine :3.8	259503496ff9	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2scheduler :3.8	b1de2055c362	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2stream :3.8	1c8904a3bf67	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2web :3.8	09989a26c8b7	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
stashapp/stash :v0.31.1	df744af5a0c9	curl@8.17.0-r1	8.19.0-r0	1
stashapp/stash-box :latest	a534c8afdf39	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	1
statcan/ckan :2.9	3921305425b8	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.25+esm3	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.25+esm3	1
structurizr/onpremises :2025.11.09	4b5ffb5119c8	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
supabase/realtime :v2.102.3	aa1c92c0cf32	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
supabase/realtime :v2.33.8	d207e6e23ad3	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
supabase/studio :20241021-9f9b083	26d8070c55e9	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.23	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.25+esm3	1
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.23	1
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.25+esm3	1