CVE-2026-3783

Medium

Advisory

Published 11 Mar 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,063; of 17,787 indexed, latest versions
Container images: 996; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,063 of 17,787 indexed charts deploy, on 996 images.

Affected package	Affected versions	Fixed in	Images
curldeb	1:8.14.1-2+deb13u3+e1, 7.68.0-1ubuntu2.2, 7.68.0-1ubuntu2.4, 7.68.0-1ubuntu2.5+53 more	1:8.14.1-2+deb13u3+e2, 7.68.0-1ubuntu2.25+esm3, 7.81.0-1ubuntu1.23, 7.88.1-10+deb12u15+3 more	889
curlapk	8.12.1-r0, 8.17.0-r1, 8.18.0-r0	8.19.0-r0	107

OSV records: ALPINE-CVE-2026-3783 DEBIAN-CVE-2026-3783 UBUNTU-CVE-2026-3783 ECHO-de93-d97b-29a9
Also known as: USN-8084-1, USN-8099-1

Charts affected

1,063 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm3

Open the chart page →

28,699

giteawenerme

12.7.0

1 of 4 See more

gitea wenerme 12.7.0

1 of the 4 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15

Open the chart page →

8,842

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.25+esm3

Open the chart page →

15,287

wikiwikijs

3.0.0

1 of 2 See more

5,472

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	curl@7.81.0-1ubuntu1.15	7.81.0-1ubuntu1.23

Open the chart page →

9,296

keycloakwiremind

25.3.1

1 of 2 See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

7,643

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	curl@7.68.0-1ubuntu2.25	7.68.0-1ubuntu2.25+esm3

Open the chart page →

6,323

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

5,548

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15

Open the chart page →

2,383

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.23

Open the chart page →

14,172

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15

Open the chart page →

7,685

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
murtazashah46/helmfile :latest	4d11726cf803	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15

Open the chart page →

13,197

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-3783.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	curl@8.17.0-r1	8.19.0-r0

Open the chart page →

1,571

Container images carrying it

996 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.23	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.23	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.23	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.25+esm3	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	curl@7.81.0-1ubuntu1.2	7.81.0-1ubuntu1.23	2
ghcr.io/smarter-project/home-ha-mock :main	95ee018cf558	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.25+esm3	2
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra :latest	b1198ea741d1	curl@8.17.0-r1	8.19.0-r0	2
registry.gitlab.com/shortlink-org/shortlink/ui :main	9bdb1062d960	curl@8.17.0-r1	8.19.0-r0	2
1dev/server :11.9.0	cd5b12fe5471	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	1
48n6e/camellia-redis-proxy :1.4.0-jdk-21-0.0.1	a6ed886fddfc	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
5200710/hadoop :3.2.3-java8	092d3088a5fb	curl@7.68.0-1ubuntu2.21	7.68.0-1ubuntu2.25+esm3	1
aapjeisbaas/wp-frankenphp :v0.2.2	6b261abc7fb0	curl@8.14.1-2+deb13u3	8.14.1-2+deb13u4	1
aboogie/login_test_backend :new	9c41a4483ac8	curl@7.88.1-10+deb12u6	7.88.1-10+deb12u15	1
adorsys/keycloak-config-cli :6.3.0-26.1.0	85be7a45a94c	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	1
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	curl@8.5.0-2ubuntu10.1	8.5.0-2ubuntu10.8	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.25+esm3	1
ahmetfurkandemir/iceberg-rest-fixture-postgresql :1.10.0	142231a0b8b7	curl@7.81.0-1ubuntu1.20	7.81.0-1ubuntu1.23	1
airbyte/pod-sweeper :1.5.1	98d2c39d512e	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.25+esm3	1
akaunting/akaunting :3.0.15	52811b36ec3a	curl@7.88.1-10	7.88.1-10+deb12u15	1
aktosecurity/data-ingestion-service	213aded7adc5	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	1
alazidis/stornx :1.1.1	602d4f7f090c	curl@7.88.1-10+deb12u14	7.88.1-10+deb12u15	1
allegroai/clearml :2.0.0-613	713ae38f7daf	curl@7.88.1-10+deb12u8	7.88.1-10+deb12u15	1
alpine/helm :4.1.0	905a068da431	curl@8.18.0-r0	8.19.0-r0	1
alpine/kubectl :1.36.0	1ee9df6316d4	curl@8.17.0-r1	8.19.0-r0	1
alpine/kubectl :1.35.0	862d86046bbc	curl@8.17.0-r1	8.19.0-r0	1
alpine/kubectl :1.35.3	c4a11ae9a1cb	curl@8.17.0-r1	8.19.0-r0	1
andrewgaul/s3proxy :sha-85b0f98	7dc1d34174a5	curl@8.5.0-2ubuntu10.4	8.5.0-2ubuntu10.8	1
anguda/ant-media :2.5	c435285fc241	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.25+esm3	1
antrea/antrea-ui-frontend :v0.8.0	ee9686bcefb8	curl@8.14.1-2+deb13u2	8.14.1-2+deb13u4	1
anujdatar/cups :25.07.01	685df04a643b	curl@7.88.1-10+deb12u12	7.88.1-10+deb12u15	1
apache/activemq-artemis :2.44.0	0305c26f19ed	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	1
apache/activemq-artemis :2.37.0	bae523439ee3	curl@8.5.0-2ubuntu10.2	8.5.0-2ubuntu10.8	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	curl@7.88.1-10+deb12u7	7.88.1-10+deb12u15	1
apache/airflow :2.8.1	e5560ad0b86e	curl@7.88.1-10+deb12u5	7.88.1-10+deb12u15	1
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	curl@7.81.0-1ubuntu1.21	7.81.0-1ubuntu1.23	1
apache/hertzbeat :1.8.0	75d48a62748f	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	1
apache/hertzbeat-collector :1.8.0	a2bab1be574c	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.8	1
apache/iotdb :0.13.3-node	afa47bf1692a	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.25+esm3	1
apache/nifi-registry :1.27.0	63b8e3e40742	curl@7.81.0-1ubuntu1.16	7.81.0-1ubuntu1.23	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	curl@7.81.0-1ubuntu1.13	7.81.0-1ubuntu1.23	1