StackRadar

CVE-2026-3784

Medium

Advisory

Published 11 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,134
of 17,787 indexed, latest versions
Container images
1,067
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,134 of 17,787 indexed charts deploy, on 1,067 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6+69 more1:8.14.1-2+deb13u3+e2, 7.58.0-2ubuntu3.24+esm8, 7.68.0-1ubuntu2.25+esm3, 7.81.0-1ubuntu1.23+4 more960
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r08.19.0-r0107
OSV records
ALPINE-CVE-2026-3784DEBIAN-CVE-2026-3784UBUNTU-CVE-2026-3784ECHO-f726-ae66-88e1
Also known as
USN-8084-1, USN-8099-1

Charts affected

1,134 by stars
ChartLatestAffected imagesRadar Score
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

13,513
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
curl@7.81.0-1ubuntu1.18
7.81.0-1ubuntu1.23

Open the chart page →

7,239
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

5,108
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
curl@7.81.0-1ubuntu1.18
7.81.0-1ubuntu1.23

Open the chart page →

7,239
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3

Open the chart page →

84,678
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3

Open the chart page →

84,678
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

3,713
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

15,995
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

10,873
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

10,008
typo3christianhuthVerified publisher7.7.01 of 2See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
martinhelmich/typo3:12.4c83a4f3fd7ae
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

8,524
openstack-manila-csicloud-provider-openstack2.36.31 of 5See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
curl@8.17.0-r1
8.19.0-r0

Open the chart page →

3,749
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

10,076
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
curl@7.88.1-10
7.88.1-10+deb12u15

Open the chart page →

9,736
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

11,236
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15

Open the chart page →

12,924
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.23

Open the chart page →

5,438
data-fairdata354-helmVerified publisher1.1.22 of 12See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
curl@7.68.0-1ubuntu2.25
7.68.0-1ubuntu2.25+esm3
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3

Open the chart page →

38,424
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

4,909
dbrepodbrepo1.13.34 of 25See more

dbrepo dbrepo 1.13.3

4 of the 25 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15

Open the chart page →

50,281
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
curl@7.68.0-1ubuntu2.13
7.68.0-1ubuntu2.25+esm3

Open the chart page →

6,978
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
curl@7.81.0-1ubuntu1.17
7.81.0-1ubuntu1.23

Open the chart page →

10,884
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

18,402
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

5,724
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
library/mongo:6.0.12646902910d6a
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.23

Open the chart page →

15,501
enavenav-service-architectureVerified publisher0.0.71 of 10See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-eureka:latest05002092c621
curl@8.17.0-r1
8.19.0-r0

Open the chart page →

15,865
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

31,572
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4

Open the chart page →

5,615
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15

Open the chart page →

11,483
vulnz-nvd-mirroreugen1.0.01 of 1See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
curl@8.17.0-r1
8.19.0-r0

Open the chart page →

1,676
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
curl@7.58.0-2ubuntu3.20
7.58.0-2ubuntu3.24+esm8

Open the chart page →

6,515
zabbix-server-mysqlfermosit3.0.23 of 4See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

12,988
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm8

Open the chart page →

12,914
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3

Open the chart page →

17,438
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.25+esm3

Open the chart page →

35,464
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.25+esm3

Open the chart page →

15,717
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm8

Open the chart page →

11,684
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.23

Open the chart page →

5,175
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3

Open the chart page →

11,606
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.25+esm3

Open the chart page →

10,279
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.23

Open the chart page →

13,071
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
haveagitgat/tdarr_node:2.00.101e3f9328327d
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.25+esm3

Open the chart page →

31,178
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

4,893
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.25+esm3

Open the chart page →

7,698
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

3,135
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15

Open the chart page →

10,106
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

6,092
clickstackhdx-oss-v21.1.11 of 5See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
library/mongo:5.0.32-focal3b6c281e1c08
curl@7.68.0-1ubuntu2.25
7.68.0-1ubuntu2.25+esm3

Open the chart page →

4,750
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

8,773
helmuphelmupVerified publisher0.1.02 of 3See more

helmup helmup 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15

Open the chart page →

16,532

Container images carrying it

1,067 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
curl@8.17.0-r1
8.19.0-r0
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-173e56bdd1b90d
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
1
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
curl@8.17.0-r1
8.19.0-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
curl@7.88.1-10+deb12u6
7.88.1-10+deb12u15
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
curl@8.5.0-2ubuntu10.4
8.5.0-2ubuntu10.8
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.25+esm3
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u15
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
curl@8.17.0-r1
8.19.0-r0
1
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
curl@8.17.0-r1
8.19.0-r0
1
ghcr.io/port-labs/port-agent:v0.8.12c92d1e223f5c
curl@1:8.14.1-2+deb13u3+e1
1:8.14.1-2+deb13u3+e2
1
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4
1
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
curl@8.17.0-r1
8.19.0-r0
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.25+esm3
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.25+esm3
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.25+esm3
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.