StackRadar

CVE-2026-5545

Medium

Advisory

Published 29 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,269
of 17,790 indexed, latest versions
Container images
1,207
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,269 of 17,790 indexed charts deploy, on 1,207 images.

Affected packageAffected versionsFixed inImages
curldeb1:8.14.1-2+deb13u3+e1, 7.68.0-1ubuntu2.2, 7.68.0-1ubuntu2.4, 7.68.0-1ubuntu2.5+57 more1:8.14.1-2+deb13u3+e2, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9+2 more959
curlapk8.12.1-r0, 8.14.0-r2, 8.14.1-r0, 8.14.1-r1+4 more8.14.1-r3, 8.20.0-r0248
OSV records
ALPINE-CVE-2026-5545DEBIAN-CVE-2026-5545UBUNTU-CVE-2026-5545ECHO-ec69-c7b1-4f74
Also known as
USN-8227-1, USN-8525-1

Charts affected

1,269 by stars
ChartLatestAffected imagesRadar Score
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm5

Open the chart page →

17,858
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

27,554
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
curl@8.14.1-2+deb13u3
8.14.1-2+deb13u4

Open the chart page →

2,626
decap-cmsm11sVerified publisher0.3.151 of 1See more

decap-cms m11s 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
m11s/decap-cms:0.2.11-s30cd6810c9885
curl@8.19.0-r0
8.20.0-r0

Open the chart page →

1,152
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
curl@7.81.0-1ubuntu1.15
7.81.0-1ubuntu1.24

Open the chart page →

24,537
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
jeboehm/mailserver-web:5.0.929da13edf5aa8
curl@8.14.1-r1
8.14.1-r3

Open the chart page →

10,921
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
novosga/novosga:latest34b9acbe6e51
curl@8.17.0-r1
8.20.0-r0

Open the chart page →

3,713
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
curl@8.14.1-2
8.14.1-2+deb13u4

Open the chart page →

3,597
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
curl@7.68.0-1ubuntu2.24
7.68.0-1ubuntu2.25+esm5

Open the chart page →

4,152
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

8,409
eoloplantmca-eoloplaner0.1.02 of 7See more

eoloplant mca-eoloplaner 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
hugohg34/toposervice:0.0.2812a03b3f274
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm5
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm5

Open the chart page →

29,746
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

9,765
dependency-trackmediamarktsaturn1.9.22 of 2See more

dependency-track mediamarktsaturn 1.9.2

2 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4
dependencytrack/frontend:4.14.200560b57a6cf
curl@8.17.0-r1
8.20.0-r0

Open the chart page →

3,840
flaresolverrmedia-servarrVerified publisher0.18.11 of 1See more

flaresolverr media-servarr 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

6,416
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
curl@8.14.1-2+deb13u2
8.14.1-2+deb13u4

Open the chart page →

8,147
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
curl@7.88.1-10+deb12u8
no fix listed

Open the chart page →

5,886
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

5,455
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.9

Open the chart page →

2,584
istio-helm-istiodmesosphere1.25.12 of 2See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.9
mesosphere/kubectl:v1.35.0-alpineea01a9387771
curl@8.14.1-r2
8.14.1-r3

Open the chart page →

3,829
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
curl@7.68.0-1ubuntu2.2
7.68.0-1ubuntu2.25+esm5

Open the chart page →

12,052
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

7,452
prometheus-operatormesosphere12.11.131 of 8See more

prometheus-operator mesosphere 12.11.13

1 of the 8 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
curl@8.17.0-r1
8.20.0-r0

Open the chart page →

11,704
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

19,270
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

5,455
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.9

Open the chart page →

3,335
istio-helm-istiodmesosphere-stable1.23.62 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

2 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
curl@8.5.0-2ubuntu10.6
8.5.0-2ubuntu10.9
mesosphere/kubectl:v1.35.0-alpineea01a9387771
curl@8.14.1-r2
8.14.1-r3

Open the chart page →

4,656
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
curl@7.68.0-1ubuntu2.2
7.68.0-1ubuntu2.25+esm5

Open the chart page →

68,417
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
curl@7.88.1-10+deb12u5
no fix listed

Open the chart page →

10,227
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm5

Open the chart page →

8,950
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
curl@7.68.0-1ubuntu2.25
7.68.0-1ubuntu2.25+esm5

Open the chart page →

4,297
folding-at-homemidokura-communityVerified publisher0.0.31 of 1See more

folding-at-home midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
linuxserver/foldingathome:7.6.219a997426d71e
curl@8.5.0-2ubuntu10.1
8.5.0-2ubuntu10.9

Open the chart page →

2,943
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
curl@7.68.0-1ubuntu2.18
7.68.0-1ubuntu2.25+esm5

Open the chart page →

11,281
teimilvus-helm1.6.01 of 1See more

tei milvus-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

3,301
mini-blogmini-blog-helm0.1.02 of 3See more

mini-blog mini-blog-helm 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
curl@7.88.1-10+deb12u12
no fix listed
beyzkaya/blog-frontend:v1.0.0bf412d75c510
curl@8.14.1-r0
8.14.1-r3

Open the chart page →

13,107
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
curl@7.68.0-1ubuntu2.23
7.68.0-1ubuntu2.25+esm5
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

43,532
mongodbmmontesVerified publisher0.5.01 of 1See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
library/mongo:4.4.1305678ae4e5e1
curl@7.68.0-1ubuntu2.10
7.68.0-1ubuntu2.25+esm5

Open the chart page →

7,151
reporting-nifi-processor-svcmojaloop0.0.21 of 3See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
library/mongo:6.0.271a63fc2438e
curl@7.68.0-1ubuntu2.13
7.68.0-1ubuntu2.25+esm5

Open the chart page →

6,224
mollysocketmollysocket-wrenixVerified publisher0.1.141 of 2See more

mollysocket mollysocket-wrenix 0.1.14

1 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.3c4a11ae9a1cb
curl@8.17.0-r1
8.20.0-r0

Open the chart page →

2,540
mongo-compassmongo-compass-webVerified publisher1.1.41 of 1See more

mongo-compass mongo-compass-web 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.1f4f8fe4e21f1
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

1,781
mongo-compassmongo-compass-web-helm1.1.01 of 1See more

mongo-compass mongo-compass-web-helm 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.5.054f2112602ee
curl@7.88.1-10+deb12u14
no fix listed

Open the chart page →

2,419
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
curl@7.68.0-1ubuntu2.25
7.68.0-1ubuntu2.25+esm5

Open the chart page →

5,220
moodlemoodle1.0.31 of 2See more

moodle moodle 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
cloudtooling/moodle:5.2.3f4f04e0fc401
curl@7.88.1-10+deb12u15
no fix listed

Open the chart page →

3,972
camera-viewermoreillonVerified publisher0.2.12 of 4See more

camera-viewer moreillon 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
curl@7.81.0-1ubuntu1.20
7.81.0-1ubuntu1.24
moreillon/camera-viewer:lateste418cc694bd5
curl@7.88.1-10+deb12u12
no fix listed

Open the chart page →

11,708
group-managermoreillonVerified publisher0.4.42 of 3See more

group-manager moreillon 0.4.4

2 of the 3 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
curl@7.81.0-1ubuntu1.20
7.81.0-1ubuntu1.24
moreillon/group-manager-front:v3.3.1c9f85db3baa5
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

9,900
mqtt-loggermoreillonVerified publisher0.3.11 of 5See more

mqtt-logger moreillon 0.3.1

1 of the 5 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
curl@7.81.0-1ubuntu1.20
7.81.0-1ubuntu1.24

Open the chart page →

11,008
user-manager-mongodbmoreillonVerified publisher0.6.23 of 4See more

user-manager-mongodb moreillon 0.6.2

3 of the 4 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
curl@7.81.0-1ubuntu1.20
7.81.0-1ubuntu1.24
moreillon/user-manager-front:v5.0.3b067dbbbb6af
curl@7.88.1-10+deb12u4
no fix listed
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
curl@7.88.1-10+deb12u4
no fix listed

Open the chart page →

25,844
user-manager-neo4jmoreillonVerified publisher0.9.74 of 6See more

user-manager-neo4j moreillon 0.9.7

4 of the 6 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
curl@7.81.0-1ubuntu1.20
7.81.0-1ubuntu1.24
moreillon/group-manager-front:v3.3.1c9f85db3baa5
curl@7.88.1-10+deb12u6
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
curl@7.88.1-10+deb12u4
no fix listed
moreillon/user-manager-front:v5.1.06597e6b98d21
curl@7.88.1-10+deb12u6
no fix listed

Open the chart page →

30,524
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
curl@7.88.1-10+deb12u1
no fix listed

Open the chart page →

6,877
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm5

Open the chart page →

26,022
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-5545.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.25+esm5

Open the chart page →

15,727

Container images carrying it

1,207 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
curl@8.17.0-r1
8.20.0-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
curl@8.17.0-r1
8.20.0-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
curl@8.14.1-2
8.14.1-2+deb13u4
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
curl@7.88.1-10+deb12u4
no fix listed
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
curl@8.14.1-r1
8.14.1-r3
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
curl@8.14.1-r1
8.14.1-r3
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
curl@8.17.0-r1
8.20.0-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.