StackRadar

CVE-2026-3784

Medium

Advisory

Published 11 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,131
of 17,790 indexed, latest versions
Container images
1,063
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,131 of 17,790 indexed charts deploy, on 1,063 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6+69 more1:8.14.1-2+deb13u3+e2, 7.58.0-2ubuntu3.24+esm8, 7.68.0-1ubuntu2.25+esm3, 7.81.0-1ubuntu1.23+4 more957
curlapk8.12.1-r0, 8.17.0-r1, 8.18.0-r08.19.0-r0106
OSV records
ALPINE-CVE-2026-3784DEBIAN-CVE-2026-3784UBUNTU-CVE-2026-3784ECHO-f726-ae66-88e1
Also known as
USN-8084-1, USN-8099-1

Charts affected

1,131 by stars
ChartLatestAffected imagesRadar Score
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
curl@7.88.1-10+deb12u7
7.88.1-10+deb12u15

Open the chart page →

9,148
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

9,485
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
curl@7.68.0-1ubuntu2.22
7.68.0-1ubuntu2.25+esm3

Open the chart page →

18,938
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

29,930
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

3,304
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4

Open the chart page →

11,122
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

5,361
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

3,453
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

9,771
openreel-videohelmforgeVerified publisher1.0.31 of 1See more

openreel-video helmforge 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
helmforge/openreel-video:v0.5.07ba0d47b943f
curl@8.17.0-r1
8.19.0-r0

Open the chart page →

1,086
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
curl@8.14.1-2
8.14.1-2+deb13u4

Open the chart page →

4,819
pimcorehelmforgeVerified publisher2.0.11 of 6See more

pimcore helmforge 2.0.1

1 of the 6 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.2916834e49961
curl@8.17.0-r1
8.19.0-r0

Open the chart page →

3,212
text-embeddings-inferencehelmforgeVerified publisher1.0.01 of 2See more

text-embeddings-inference helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

2,563
uptime-kumahelmforgeVerified publisher1.5.131 of 1See more

uptime-kuma helmforge 1.5.13

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

30,326
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

12,680
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4

Open the chart page →

2,626
openaevhelm-openbasVerified publisher2.0.51 of 7See more

openaev helm-openbas 2.0.5

1 of the 7 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

7,528
openbashelm-openbasVerified publisher1.8.143 of 7See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15
openbas/caldera-server:5.1.0a277796d9724
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15
openbas/platform:2.0.5d986d80b0a75
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

25,190
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
curl@8.18.0-r0
8.19.0-r0

Open the chart page →

2,001
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.25+esm3
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm8

Open the chart page →

20,242
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

3,154
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
curl@7.81.0-1ubuntu1.20
7.81.0-1ubuntu1.23

Open the chart page →

6,085
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u15

Open the chart page →

5,996
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.23

Open the chart page →

14,363
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.23
hmediade/printserver-init:latest7f005eb6c718
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.23

Open the chart page →

10,948
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

3,065
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u15

Open the chart page →

16,415
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

3,148
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.25+esm3

Open the chart page →

8,751
eoloplanthttpd-eoloplant0.1.02 of 7See more

eoloplant httpd-eoloplant 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.23
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3

Open the chart page →

32,372
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.23
apache/skywalking-ui:9.2.0295f1dc87d98
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.23

Open the chart page →

16,495
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
apache/skywalking-ui:8.9.180530f0308a5
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3

Open the chart page →

20,741
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

9,084
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

7,785
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.23

Open the chart page →

7,211
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.23

Open the chart page →

7,938
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
curl@7.88.1-10+deb12u8
7.88.1-10+deb12u15

Open the chart page →

5,986
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
curl@7.58.0-2ubuntu3.6
7.58.0-2ubuntu3.24+esm8

Open the chart page →

12,628
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2fac502149c40
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

12,161
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3

Open the chart page →

27,822
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.8

Open the chart page →

9,038
ikigaiikigai-chartVerified publisher0.0.93 of 58See more

ikigai ikigai-chart 0.0.9

3 of the 58 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
curl@7.81.0-1ubuntu1.10
7.81.0-1ubuntu1.23
jupyterhub/k8s-hub:1.2.0e4770285aaf7
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm3
library/zookeeper:3.8-temurin55d1e5b2e601
curl@7.81.0-1ubuntu1.14
7.81.0-1ubuntu1.23

Open the chart page →

37,874
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
curl@7.88.1-10+deb12u12
7.88.1-10+deb12u15

Open the chart page →

11,885
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
curl@7.58.0-2ubuntu3.21
7.58.0-2ubuntu3.24+esm8

Open the chart page →

16,230
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
curl@7.81.0-1ubuntu1.16
7.81.0-1ubuntu1.23

Open the chart page →

5,363
influxdb-enterpriseinfluxdata0.2.12 of 2See more

influxdb-enterprise influxdata 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
library/influxdb:1.12.3-meta8812029260b5
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
library/influxdb:1.12.3-datab0f9fc41ed79
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15

Open the chart page →

5,980
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.23

Open the chart page →

10,554
label-studioinseefrlab2.3.11 of 3See more

label-studio inseefrlab 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
heartexlabs/label-studio:latestaa461572e8f9
curl@8.17.0-r1
8.19.0-r0

Open the chart page →

3,157
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
curl@7.68.0-1ubuntu2.11
7.68.0-1ubuntu2.25+esm3

Open the chart page →

18,155
tcs-issuerintelVerified publisher0.5.01 of 2See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-3784.

Container imageDigestPackageFixed in
intel/trusted-certificate-issuer:0.5.0591a9db4a427
curl@7.68.0-1ubuntu2.16
7.68.0-1ubuntu2.25+esm3

Open the chart page →

5,999

Container images carrying it

1,063 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u15
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.25+esm3
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
curl@7.88.1-10+deb12u14
7.88.1-10+deb12u15
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
curl@8.17.0-r1
8.19.0-r0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
curl@8.17.0-r1
8.19.0-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
curl@8.17.0-r1
8.19.0-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
8.14.1-2+deb13u4
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u15
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
curl@8.17.0-r1
8.19.0-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.